Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b820c72-808b-39be-acad-0d64626c59bb.roa
File:                     1b820c72-808b-39be-acad-0d64626c59bb.roa (raw, json)
Hash identifier:          bUz4S4ANF8GYVSNRnnTH1JcgyjkFwoMb3BbD0j74Nac=
Subject key identifier:   B5:99:43:2A:78:5C:F5:7F:A8:86:3F:D9:1C:AB:DD:20:D3:E2:EF:F7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAAE02534D55C90AAC73AED00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b820c72-808b-39be-acad-0d64626c59bb.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        75.101.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:e0:25:34:d5:5c:90:aa:c7:3a:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=7983e3b2-9564-4569-8c83-613586e5bb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:9a:ae:a0:1f:fd:2d:98:3c:80:5d:9b:a8:
                    0e:26:f5:dc:3b:0a:7f:03:19:47:f8:ae:64:a4:1a:
                    99:42:9c:2f:5b:77:af:7b:51:93:59:80:25:a2:25:
                    66:8e:03:d6:29:3d:15:3a:5f:90:47:b5:a8:bf:77:
                    a8:69:1d:06:cf:b6:69:58:68:b1:06:14:f6:80:16:
                    36:24:1a:41:4c:7e:3b:8b:47:3c:df:d5:cf:23:ce:
                    4b:53:bb:bb:9a:a2:04:cc:0a:ce:24:26:8f:f6:ae:
                    2f:b7:ea:e5:3e:79:1c:ad:9c:42:0b:18:2a:ca:be:
                    7a:ce:b3:97:3a:32:23:75:16:8e:eb:5f:73:c5:29:
                    d9:76:fe:92:79:75:09:82:be:62:97:96:d7:8c:20:
                    e0:ac:d3:c2:44:d5:c8:3e:e6:90:fa:81:2c:cb:bb:
                    51:9d:fd:42:76:23:b8:90:22:a9:9a:09:42:50:f4:
                    1c:42:bc:a6:84:ab:5f:cb:22:d6:aa:5c:c0:f1:a5:
                    44:c2:cd:39:de:9c:56:63:70:f1:5c:2e:91:5d:76:
                    9c:9f:4e:b9:69:30:4e:c8:bd:2e:d7:84:59:0a:21:
                    f4:ab:ec:fe:c7:68:7e:7b:56:49:b6:5c:b3:6e:0b:
                    12:1c:10:c7:3f:f5:c5:12:f8:6a:cc:ec:07:c5:34:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:43:2A:78:5C:F5:7F:A8:86:3F:D9:1C:AB:DD:20:D3:E2:EF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b820c72-808b-39be-acad-0d64626c59bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:95:47:4e:71:4d:7f:e7:bc:ad:64:4b:8e:ce:2f:b7:58:79:
         53:92:60:f4:e6:76:85:3e:6c:9e:8c:51:ee:45:de:07:4e:2e:
         e2:05:22:bd:5a:c2:4c:ad:2c:fa:09:57:a4:21:dc:b6:d5:5d:
         22:0f:d1:df:e1:73:9f:03:ad:5d:4a:7f:80:57:8f:52:8a:ef:
         73:b7:94:1a:97:19:3f:92:52:38:cf:e4:0f:a7:f8:18:6b:f1:
         88:68:ba:cd:59:80:b8:b4:86:a3:ac:09:50:7f:17:58:c2:f2:
         97:ff:05:16:ee:59:a7:75:96:0d:eb:4c:11:25:87:6d:71:ed:
         62:b4:34:f7:1f:cf:19:e7:2e:aa:be:d0:b1:15:e3:3a:f0:8f:
         e8:38:82:f0:f0:c5:29:62:60:b5:72:42:11:01:65:74:17:14:
         04:e1:ce:f9:fa:89:42:38:d3:35:15:37:3c:7b:14:51:3c:1d:
         3e:39:f6:7e:d0:5f:d7:03:82:57:30:ea:66:5f:29:7f:cd:80:
         df:0f:10:99:ef:4b:d0:44:e1:ea:cf:69:e8:08:82:b6:5e:34:
         c7:7f:d2:e7:5d:94:19:b8:ce:6d:ef:17:22:51:1e:c0:cc:cb:
         6b:ac:39:59:ee:c3:0d:c9:73:5e:11:bc:06:dd:8f:34:0d:af:
         ed:00:b0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:49 2025 by rpki-client