Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13c25a8a-d2ed-3184-a4d2-f65eb0f5386e.roa
File:                     13c25a8a-d2ed-3184-a4d2-f65eb0f5386e.roa (raw, json)
Hash identifier:          uHhcvY/3wEVOw9KlFFTOySBqcna7YIZBCMqZhZnPFvE=
Subject key identifier:   EA:26:A3:E8:77:66:2B:96:28:DB:B0:8B:17:70:5A:A8:E1:D9:9A:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE5469247F786B63563E1FC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13c25a8a-d2ed-3184-a4d2-f65eb0f5386e.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.236.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:46:92:47:f7:86:b6:35:63:e1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=0aef1aa9-639d-4b14-a8fe-788a69981119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:a7:76:f9:2e:98:93:a2:ab:72:93:34:1b:
                    dc:2a:11:87:fd:17:5a:30:43:95:a0:43:7f:65:e8:
                    7b:88:b4:f6:ca:28:d8:1d:88:95:5e:b0:30:f7:1a:
                    1b:99:84:46:16:d7:52:a7:90:64:17:31:10:39:c3:
                    4d:c8:8e:02:4d:96:b9:23:e7:f2:e8:39:2a:a9:b6:
                    2c:59:20:1b:5e:3d:7e:31:0b:8f:72:8e:8a:d0:ad:
                    69:e1:da:d4:23:cd:80:f0:21:57:e0:34:5b:5d:54:
                    db:c3:5a:5b:12:3b:70:c6:e2:f9:f9:48:b6:ad:8a:
                    e6:75:f6:84:4a:bd:71:3a:6c:c1:ba:32:12:4f:88:
                    06:87:65:62:8f:36:c6:cb:f2:55:91:69:76:8e:37:
                    ef:3a:5f:7d:e3:2b:1b:af:69:1a:b8:12:16:1d:93:
                    7d:2f:a8:ef:e6:a2:f3:e4:fe:bf:eb:0e:ea:9f:41:
                    0f:ca:bf:02:91:ae:5d:ca:01:1f:28:77:10:55:9b:
                    95:c2:9b:bb:72:2c:10:ab:15:c4:fc:39:a1:89:11:
                    8f:6a:a2:20:0c:4c:cf:fa:a3:48:f5:ed:cd:59:f2:
                    a2:f9:a1:82:03:c8:60:45:cb:9c:39:f0:7f:12:03:
                    5e:db:14:b5:78:09:2d:eb:8c:f8:f8:d1:87:08:aa:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:A3:E8:77:66:2B:96:28:DB:B0:8B:17:70:5A:A8:E1:D9:9A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13c25a8a-d2ed-3184-a4d2-f65eb0f5386e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:21:c8:98:c2:a2:c5:ea:ea:2a:d5:d0:b9:3f:2b:f9:06:ec:
         b5:0c:9e:66:1e:f8:3a:22:93:63:a0:c8:87:d3:16:29:f0:3a:
         5f:a4:58:35:65:e5:ce:24:d5:d6:58:17:9a:e8:c5:1b:f3:55:
         f0:0e:5e:ce:66:26:a6:31:6a:f2:2c:49:23:5f:5c:d3:09:f3:
         5c:db:91:3c:ad:5f:9a:65:fa:d0:f2:88:30:95:0e:72:3f:2e:
         2d:ba:89:33:b4:65:72:b4:ab:42:11:e8:72:68:40:eb:22:69:
         6a:af:ce:8a:5c:0f:13:85:0e:f6:28:b0:ec:f3:34:bc:0b:e6:
         a2:a2:a3:79:7b:0b:06:e0:ec:42:39:f6:7f:65:b8:d2:18:94:
         39:67:cb:ed:5f:18:83:2e:b8:ed:09:d3:90:1b:77:d4:48:ff:
         b2:1c:13:73:bc:7d:24:25:f3:0c:ef:a5:e6:57:a9:00:95:b0:
         3d:6c:a2:56:3e:ab:46:f2:1e:ce:8d:4b:9a:7e:95:19:03:e4:
         dc:a6:24:be:44:b4:3e:d9:56:b7:8b:dc:06:16:b6:0a:63:37:
         d6:26:05:94:a7:7a:60:c5:3f:07:6a:f1:4d:70:18:13:6a:be:
         31:fa:a7:b3:99:00:f2:11:f5:6b:b4:96:ce:ae:46:1a:9e:92:
         b3:1c:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:49 2025 by rpki-client