Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21af00e1-b225-3c65-80af-3dcedcf08253.roa
File:                     21af00e1-b225-3c65-80af-3dcedcf08253.roa (raw, json)
Hash identifier:          Q/ljvH6jrJvw8HRtLoO5ULC8rN2sAyvbqbibe5eUiY0=
Subject key identifier:   BC:C6:32:C4:69:AB:8C:D8:8D:B6:45:FC:EC:08:3E:74:D1:C1:73:A0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDA3A44980CC87D9F814CD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21af00e1-b225-3c65-80af-3dcedcf08253.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        75.47.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:a3:a4:49:80:cc:87:d9:f8:14:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=39c1a486-4b55-4b6e-af93-960f6774dfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:a9:33:b5:a2:52:1b:75:a0:21:cb:4d:58:
                    50:e1:82:fa:55:6a:05:45:22:68:9d:f5:f6:fb:a7:
                    78:c9:77:af:5c:47:3c:d3:db:ab:de:95:d4:70:ca:
                    d8:73:eb:68:88:8e:4b:c5:8f:93:f2:ed:e6:48:3e:
                    86:e5:5a:92:dd:43:d8:25:fa:3b:04:64:2d:42:2b:
                    8f:6b:9e:7f:e0:c0:ee:2e:59:97:6d:e9:27:88:03:
                    1d:7e:78:96:45:c0:8a:e6:b6:7e:2f:44:79:99:22:
                    c0:04:d3:6c:52:94:94:4b:3b:4b:0b:49:0d:48:0d:
                    80:53:67:33:e0:cf:18:a5:44:68:d3:79:4f:fa:8d:
                    06:ac:a6:56:7f:12:44:6b:46:64:b4:f5:ac:cb:93:
                    f4:42:21:1a:d5:42:4f:34:c4:42:b0:84:9f:ff:3e:
                    99:c7:15:5f:65:9e:34:bf:5f:2c:b6:18:9a:98:ee:
                    35:18:38:d2:a4:fa:48:38:d9:04:fd:6d:7e:1b:a4:
                    1b:b9:bd:ad:63:9e:3a:ea:62:71:9a:75:37:b8:96:
                    41:43:0e:47:5c:b9:ef:d3:8a:04:ed:74:2b:83:11:
                    b8:10:73:87:64:d5:dc:5e:8e:78:ef:5e:a6:cb:0b:
                    56:f8:8b:16:69:26:61:b2:22:cf:ed:c9:46:05:78:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:32:C4:69:AB:8C:D8:8D:B6:45:FC:EC:08:3E:74:D1:C1:73:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21af00e1-b225-3c65-80af-3dcedcf08253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:83:71:77:72:99:f4:fb:9f:ce:2a:04:de:ff:3c:fb:fe:
         41:5c:2f:8a:09:6e:b4:fb:e6:ac:d0:c9:c9:ec:d9:a6:d8:31:
         86:86:c9:bc:f2:7c:a1:77:7e:05:f9:9a:39:b8:08:d7:bb:10:
         78:c9:69:91:55:b2:55:52:da:3d:61:7f:fc:44:65:d6:aa:06:
         65:e6:1f:59:a5:22:14:06:2c:6f:ec:cc:89:26:b8:ab:71:e5:
         1a:03:f1:93:84:f5:62:90:3a:1b:a5:4a:d8:39:6d:16:71:a8:
         95:03:a0:f5:35:c5:85:ff:59:c7:56:df:3a:7f:c3:11:7d:ab:
         87:9b:2e:4c:1a:8b:ae:10:ef:f8:d4:54:de:75:c6:be:da:31:
         4f:73:6f:45:d5:4f:50:bd:14:41:0a:8f:fe:34:cb:35:94:eb:
         89:9e:13:f6:09:72:cb:87:df:e7:b4:ac:60:3b:f3:d4:0a:0d:
         7d:40:bc:63:60:f9:69:03:78:ab:02:ef:b0:cc:a9:62:88:59:
         e2:31:1a:72:36:98:4f:e1:5b:7e:63:4b:20:ff:6f:c5:f0:fa:
         07:3c:1d:60:ff:f0:ff:b1:c2:dd:56:7e:65:d2:16:4f:3b:65:
         e5:43:75:1e:d4:62:6b:3c:a5:9e:73:fe:49:8a:d9:a9:71:a1:
         f6:62:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:57 2025 by rpki-client