Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/187344a4-3724-34c3-8153-b2a30bb3040e.roa
File:                     187344a4-3724-34c3-8153-b2a30bb3040e.roa (raw, json)
Hash identifier:          42Wc8hKaUQxT8AipU4Uqsua5HSazIvkYEJD7dYvlzzo=
Subject key identifier:   AB:0D:7E:42:3A:5E:92:04:88:E1:78:48:7F:42:D4:FF:CF:7A:27:6F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F4DA2C78CBFC820F1C88CFC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/187344a4-3724-34c3-8153-b2a30bb3040e.roa
Signing time:             Mon 19 Sep 2022 15:15:07 +0000
ROA not before:           Mon 19 Sep 2022 15:15:07 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     19047
IP address blocks:        70.130.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4d:a2:c7:8c:bf:c8:20:f1:c8:8c:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 19 15:15:07 2022 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=afc9c273-6e9a-4689-b253-f91fec88f9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:1c:51:f5:93:54:38:07:e3:18:ae:b7:5e:
                    c9:2c:70:b7:bb:c0:b0:09:a5:f9:94:bb:14:01:7d:
                    22:64:55:07:ff:90:f2:16:31:76:6a:ba:c5:6e:c8:
                    c0:b5:2a:c8:03:db:52:09:49:88:4e:42:79:17:71:
                    9f:81:54:aa:96:06:f1:f5:fa:2a:3e:68:12:30:41:
                    55:60:34:d4:d8:05:d6:2f:0d:19:e7:c0:1f:70:2f:
                    47:58:7c:d3:8b:54:91:48:77:ee:70:b2:cf:4c:63:
                    ba:c2:2d:3e:8d:d0:88:61:b0:50:f3:c2:99:c1:66:
                    e5:bb:f2:f1:ad:af:bf:1a:44:bf:71:bd:3c:b6:7f:
                    95:d6:5a:cd:26:fd:b4:c5:9e:a9:72:e2:ee:79:25:
                    48:ca:53:05:1f:26:93:fa:d2:58:d8:d1:78:67:b7:
                    c9:10:40:b9:c0:87:b7:2d:6a:b5:1b:99:06:ce:78:
                    ce:72:84:7e:89:73:f4:3e:04:44:21:3d:76:cd:d4:
                    8b:97:7f:af:75:f8:88:a6:41:c4:26:a4:ba:99:80:
                    cf:3c:35:c0:a1:e0:b3:cd:28:85:d7:56:e7:2d:a4:
                    1a:69:26:90:01:a5:45:13:e0:7b:53:27:3a:a3:a6:
                    2a:22:ca:48:68:49:78:5c:2f:7b:18:ca:8f:62:e6:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:7E:42:3A:5E:92:04:88:E1:78:48:7F:42:D4:FF:CF:7A:27:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/187344a4-3724-34c3-8153-b2a30bb3040e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:73:38:ef:48:dc:a4:3e:af:cf:bd:dd:ce:c3:b2:f9:99:
         13:98:93:0a:9a:82:e6:da:6e:22:57:73:83:75:44:c9:e7:24:
         ce:28:bc:f5:d5:d2:5b:02:34:16:cb:99:7f:05:e2:d1:a7:ed:
         c1:9d:ba:80:e7:80:d6:4c:42:5e:74:17:40:38:f3:4b:36:99:
         75:8a:f2:47:03:4b:2c:a6:b7:60:3f:08:10:f6:b4:ba:be:52:
         07:86:aa:f9:a6:41:95:65:d5:55:eb:cb:71:f7:eb:f7:73:1a:
         9f:3f:b9:a3:f6:41:4e:9e:1d:ad:78:a8:3a:1f:32:e3:d9:ab:
         10:92:53:90:87:9b:de:71:13:2e:7d:74:ec:2a:d7:95:48:91:
         38:d8:f7:c1:b8:b9:03:95:5b:f0:d9:84:40:bd:de:64:55:da:
         5d:b7:91:6c:c9:63:fc:d1:58:a5:0f:46:ef:09:d5:bd:82:c2:
         6e:28:9c:0c:c9:d0:f5:8e:87:05:82:22:b4:d3:ce:41:9f:11:
         0a:36:a0:05:50:40:fd:23:5d:a3:e6:2f:58:20:6b:2a:15:96:
         30:08:9b:4b:9b:9e:42:34:8a:91:ef:e3:52:26:4e:5e:0b:2a:
         c9:45:ee:0f:01:d8:42:b8:d7:81:6e:0e:9a:85:80:f2:60:7d:
         b6:61:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:12 2025 by rpki-client