Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ab4da59-febc-3052-86f2-6db9a7391762.roa
File:                     1ab4da59-febc-3052-86f2-6db9a7391762.roa (raw, json)
Hash identifier:          bM9P1Dwbcg8jGFgYFKy2olDMj8g39w9Cr95oKQUmAHY=
Subject key identifier:   FA:6B:FB:82:8A:DC:FB:23:2B:74:A5:EB:26:50:BD:9E:F5:D0:14:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2072F269BBD062E723D5B400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ab4da59-febc-3052-86f2-6db9a7391762.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        68.66.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:20:72:f2:69:bb:d0:62:e7:23:d5:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=562773af-d0f3-40c6-b8b1-4552ee9d793b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:40:ac:55:03:a6:92:65:08:a7:e6:e2:5e:
                    c4:25:84:db:bc:d9:47:3e:cf:1e:75:64:e4:d7:59:
                    42:f5:ab:47:b6:5a:23:17:25:44:89:58:7e:bc:63:
                    bf:45:19:f8:79:a2:49:06:b6:df:a2:21:75:67:16:
                    eb:cf:f6:74:8a:b9:9b:0c:76:3d:e3:e5:d0:3c:fd:
                    b0:a6:7f:ad:2c:92:d6:6d:f6:38:19:d0:14:eb:94:
                    cc:6f:84:9f:92:3f:19:16:63:10:94:7f:cc:7d:7d:
                    24:62:37:4f:66:02:bc:ca:62:bb:ea:e2:14:2e:21:
                    7d:7f:49:0b:1d:9d:72:ab:92:8c:4e:7c:50:5e:92:
                    f5:e5:86:99:c9:a3:fd:5a:fd:e0:4d:b1:8c:46:57:
                    1c:08:39:5b:d6:07:bd:da:55:b8:d4:ba:51:f3:fe:
                    f6:c7:1e:55:e5:ea:f4:a1:7d:b2:b6:37:1e:8d:e0:
                    e2:e7:fd:29:71:db:ef:ea:e8:2a:69:9f:1a:cf:3a:
                    73:2d:11:e5:5f:45:bb:5a:8a:14:6e:8e:22:98:56:
                    4b:2b:28:8b:db:62:7e:aa:9c:77:89:75:b2:0d:85:
                    6b:40:1c:c1:0d:40:33:cd:71:82:ec:28:de:5d:54:
                    91:94:db:d7:87:56:23:ed:d1:81:1c:34:28:69:0a:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:FB:82:8A:DC:FB:23:2B:74:A5:EB:26:50:BD:9E:F5:D0:14:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ab4da59-febc-3052-86f2-6db9a7391762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0c:08:6d:f9:c8:f9:db:63:95:7b:b0:99:fe:6a:ed:ec:49:
         eb:c0:42:90:27:8a:c0:28:67:e7:ee:fc:60:a1:27:07:d9:be:
         c9:e1:9c:5f:dc:63:34:c2:50:fa:91:40:5a:ea:ec:7e:81:b1:
         24:55:0c:64:3c:6e:58:cd:43:c1:b4:74:97:2d:32:b1:9d:b6:
         0e:e7:c1:1e:54:b6:46:5f:c5:54:1a:ee:bb:a7:99:5c:5e:55:
         e4:85:53:e9:c7:e6:6b:43:af:d3:62:c4:43:85:7e:2e:e4:91:
         fa:7e:67:63:40:7c:a6:78:52:1e:97:e5:a5:a7:1c:b3:da:6b:
         db:86:dc:c4:45:2d:ec:b9:99:a6:7e:64:1a:0b:38:f6:2d:23:
         d2:01:0a:7d:44:a0:bb:67:e3:8b:7a:e8:51:5f:ba:eb:03:32:
         f2:88:e8:d7:1c:58:93:51:c6:3f:9d:de:b1:41:d0:67:97:c9:
         39:82:98:90:ec:08:9a:47:97:83:23:3c:e8:97:39:ff:cf:bc:
         7e:f1:9a:4e:3b:ee:01:fb:3f:54:6f:3e:13:ce:77:34:37:fd:
         39:09:dd:84:be:73:b5:f9:f6:a5:67:ae:5a:e0:87:99:ab:74:
         75:95:96:8c:3a:fc:36:e5:f7:d3:53:27:8a:dd:2e:a0:84:42:
         3e:68:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:22:12 2025 by rpki-client