Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd34dd2-7ba8-3707-b591-24c938fdb559.roa
File:                     ffd34dd2-7ba8-3707-b591-24c938fdb559.roa (raw, json)
Hash identifier:          +ew3FG5s0d4MLFXzLQNPgL34VQwGY0KipvwcYEfwG8Q=
Subject key identifier:   3D:40:23:99:D9:11:33:AE:54:D5:E3:D3:67:49:54:23:31:D7:38:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402A203B5663D740EA42BD73A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd34dd2-7ba8-3707-b591-24c938fdb559.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.192.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:20:3b:56:63:d7:40:ea:42:bd:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=898f8547-5ea5-40e6-b603-4764d8b94a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:19:d8:8e:0f:f5:2d:29:c3:14:8a:f1:c2:
                    e2:70:da:0a:ec:16:28:bd:15:ef:d3:f9:22:f6:ff:
                    26:9e:e2:d9:66:cb:1e:a0:77:0c:30:f8:88:93:d8:
                    05:78:32:55:ae:5a:d4:17:8b:f1:de:4d:8b:42:d0:
                    62:86:b3:a4:88:31:de:8a:21:48:5f:b4:a6:10:1a:
                    f3:80:ee:87:3e:6d:e4:25:55:61:c2:57:60:1e:81:
                    3c:d7:17:ec:4a:06:89:15:51:55:bb:f7:8a:de:b5:
                    93:f5:46:41:7d:80:60:72:79:e0:ec:06:71:6b:4e:
                    f3:12:98:c8:90:2b:ec:2a:19:3d:2d:21:b5:e0:2d:
                    72:5b:28:ed:a8:ee:5b:93:39:c5:75:e7:88:93:df:
                    9e:df:cd:c2:f0:8b:f6:2c:cc:2a:39:26:bf:e6:56:
                    1d:e7:a7:7a:79:f2:38:47:a5:59:45:35:e2:70:e2:
                    99:f6:bf:63:6c:0c:88:f0:08:52:1a:5b:b6:a3:0e:
                    3a:ff:18:48:3f:6f:5a:8f:57:c5:d2:ab:43:03:c8:
                    de:ab:11:89:5c:7b:4d:bc:2c:cf:84:38:ac:62:35:
                    bb:17:22:14:bd:c9:24:da:0b:6b:62:d0:92:b2:bc:
                    80:c6:4d:a0:5b:3d:06:ba:84:73:3e:73:8d:0d:0f:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:40:23:99:D9:11:33:AE:54:D5:E3:D3:67:49:54:23:31:D7:38:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffd34dd2-7ba8-3707-b591-24c938fdb559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.192.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:3b:d9:fd:c8:70:c5:d1:9b:e6:77:74:3a:16:94:dc:fd:
         bb:d7:55:71:7d:21:a6:81:b0:77:ee:8a:14:af:2d:e0:84:fe:
         61:ac:bc:79:da:12:9d:d0:8b:32:e7:19:ba:57:9f:98:47:f3:
         86:05:d0:3d:1f:b2:00:8c:5f:14:e5:c9:28:87:c6:6f:14:55:
         ea:90:01:2e:dd:8b:05:05:0c:f8:ed:92:3c:f2:d3:74:df:54:
         f8:fd:cd:a3:9b:fb:a8:23:10:1c:06:4e:fc:3c:05:c8:75:3a:
         0b:cd:20:09:e1:db:63:d8:16:c1:ec:2a:7d:33:a6:5f:43:23:
         24:58:49:a7:b0:0a:07:e2:59:dc:27:a7:45:78:32:9b:6e:c1:
         47:fd:b8:84:f3:4b:c5:ac:96:df:83:41:78:ed:6e:50:58:3f:
         d4:36:8b:0b:c2:33:72:72:31:29:a3:8c:04:ec:36:26:a7:20:
         4a:e1:a5:4c:4c:d8:32:11:51:42:ac:8a:da:48:99:41:30:69:
         16:59:a9:4e:c1:e1:91:59:27:1e:14:43:0a:26:fa:b5:00:73:
         80:b8:c0:7d:7c:af:9d:52:3c:bd:e8:8f:2f:68:e0:9f:da:6c:
         2a:9a:f8:54:94:35:2e:cb:8e:eb:a9:d0:b1:db:a3:0d:d1:b2:
         03:da:f3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:09:21 2025 by rpki-client