Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/021baf25-d81b-3f0a-9a5a-b49ab63a3319.roa
File:                     021baf25-d81b-3f0a-9a5a-b49ab63a3319.roa (raw, json)
Hash identifier:          +c4r4C8iGaIrOzVWCvGOsHljkHGLzT1mplSlG64Owes=
Subject key identifier:   59:7B:7E:00:DD:70:97:12:5C:A9:F6:8C:CB:93:FA:B5:1D:3C:26:D3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF95D61972AFF4FD876743E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/021baf25-d81b-3f0a-9a5a-b49ab63a3319.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:5d:61:97:2a:ff:4f:d8:76:74:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=1cb6d056-2e20-4dd7-b717-58594aa991b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:e7:7d:2f:ad:26:e8:43:b5:3a:05:d9:6d:
                    e8:8e:2d:84:34:bd:10:b8:3d:61:63:75:a4:67:18:
                    b2:33:48:f2:c0:df:7d:43:d9:1d:4c:61:4e:44:e1:
                    66:b1:21:f9:fa:62:2b:2e:0e:33:e3:65:7d:2d:7d:
                    bc:86:0f:aa:c5:b8:c5:59:8d:86:0f:57:5d:d9:1e:
                    fa:65:3d:e4:39:a4:4a:10:b5:41:4b:49:9b:6c:5b:
                    4f:0e:70:53:49:71:89:d2:bd:0d:19:b0:e7:8f:ff:
                    4f:d6:90:d3:89:2b:fa:7e:36:71:21:b0:cb:9c:db:
                    06:83:0a:7e:63:de:77:58:89:7e:9f:18:20:8c:a3:
                    1a:b4:50:5b:00:1f:3b:94:9d:45:dd:51:72:6a:1a:
                    25:e0:cc:10:c0:5d:53:21:c1:fb:93:cf:38:a0:96:
                    73:47:a3:f6:a7:87:df:00:ce:9e:f1:73:8d:b4:83:
                    dc:63:f7:f3:ef:c2:e5:9c:bd:76:85:f2:ab:8a:b2:
                    bf:9c:70:28:76:63:2a:7c:bd:cf:5c:c8:79:c1:45:
                    67:08:ac:66:df:6e:12:b4:62:c4:28:12:2c:58:43:
                    98:2a:db:aa:61:fb:c2:da:5b:d8:39:4c:b2:a8:12:
                    9b:bd:a4:7f:04:9a:ae:90:1a:d3:a0:cf:56:6e:f9:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7B:7E:00:DD:70:97:12:5C:A9:F6:8C:CB:93:FA:B5:1D:3C:26:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/021baf25-d81b-3f0a-9a5a-b49ab63a3319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:19:dc:79:33:4d:2b:d4:8a:0d:d5:bd:36:24:c6:2b:51:
         2a:96:0d:23:d8:fe:bf:f7:6b:8c:69:f4:d5:d9:89:e8:6a:c7:
         f8:fd:be:e2:2c:eb:20:ec:ec:02:ce:b3:f9:97:5e:31:ef:48:
         15:1d:7a:bc:7c:7b:f7:fb:9b:9f:2d:88:9b:51:18:44:32:7d:
         11:3c:81:d4:6b:82:45:23:a6:a7:2c:62:a1:4d:24:b1:d8:15:
         90:05:a4:99:ed:8c:15:56:29:af:3c:9d:e7:30:e0:ea:b5:bf:
         a1:81:de:e0:e8:12:c2:40:9c:fb:14:70:07:a8:ad:fe:d4:07:
         28:05:a8:37:3c:31:45:e7:8e:ac:21:d9:8c:94:12:45:e3:84:
         01:c7:55:f5:72:f8:5c:ee:19:9a:55:01:ba:dc:9d:1f:ae:4e:
         75:01:d3:1c:46:28:b5:7f:d7:a2:8a:48:a0:38:5b:d4:c4:08:
         e1:de:76:6e:89:de:d5:27:bf:7c:f2:33:0e:86:48:fe:39:c7:
         42:54:f2:00:7a:52:fd:db:67:46:19:ca:49:16:4f:81:2c:5b:
         16:00:e2:58:4b:29:06:a8:06:d6:e2:5c:a0:13:2b:65:59:9c:
         50:9a:9e:3c:70:db:38:f3:ee:15:8c:32:0a:b4:00:b7:f1:9c:
         08:50:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:55 2025 by rpki-client