Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25b206ce-4dd6-3e4e-a8be-6cfc1700a87f.roa
File:                     25b206ce-4dd6-3e4e-a8be-6cfc1700a87f.roa (raw, json)
Hash identifier:          OnBXc8Hg26VkEl/PvYbm2HCWYDRUC7oFX1T9HM+1Pas=
Subject key identifier:   05:D3:C3:87:D6:50:EA:1F:AF:48:5A:ED:D1:A4:DB:0A:25:73:3F:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB750AEFA824127F2B893C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25b206ce-4dd6-3e4e-a8be-6cfc1700a87f.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        63.32.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:75:0a:ef:a8:24:12:7f:2b:89:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=cb35ba0f-d133-41e3-a300-2aecb741a056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:71:3f:d7:95:01:de:fd:88:f7:66:92:2e:
                    56:60:8f:96:b9:a0:83:6e:ed:3a:4b:76:8b:68:1e:
                    e8:0b:f6:d3:72:f5:ca:36:5b:5e:b8:72:76:0e:71:
                    4b:e0:d6:25:dd:4a:80:a3:e7:6c:95:0c:18:ad:70:
                    fd:30:66:f9:94:a4:2f:eb:a1:55:a1:df:75:fc:bb:
                    63:51:85:bc:03:28:dc:7c:0a:cf:0d:2c:41:69:d1:
                    a2:19:6e:71:69:df:db:ab:10:b9:7a:ae:2a:82:1d:
                    4a:0c:53:f0:52:08:91:b8:04:ac:c3:0d:10:f2:ef:
                    b1:be:85:96:04:23:e7:a0:54:02:de:79:fc:cc:c2:
                    dc:a0:93:c8:26:5b:7b:2b:41:61:5f:44:46:31:a0:
                    85:86:e3:7d:c7:5d:75:fd:99:ad:71:53:47:f4:e9:
                    72:17:67:41:93:6a:c2:55:08:b0:34:fe:5a:ee:d5:
                    6a:9b:bc:05:ae:c4:7c:ab:7d:e3:46:1c:ef:89:b6:
                    cc:69:7a:67:32:e3:f3:f5:f5:b3:9b:00:8d:47:99:
                    ca:01:a3:23:10:95:9d:1e:e6:6f:0e:7d:9e:31:ad:
                    e7:16:61:0d:d4:b4:76:16:3d:be:24:be:b1:92:06:
                    01:b5:7e:e4:eb:05:de:4f:99:96:ba:cf:4c:ea:7b:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D3:C3:87:D6:50:EA:1F:AF:48:5A:ED:D1:A4:DB:0A:25:73:3F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25b206ce-4dd6-3e4e-a8be-6cfc1700a87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:b7:fd:2d:97:a5:93:77:64:60:69:72:9e:83:3b:45:a1:
         95:79:a8:4c:46:7c:85:78:e7:5d:fc:b3:11:3c:2f:64:07:53:
         4a:c8:b2:48:5a:84:7e:62:a0:52:70:95:a3:0d:4b:86:5a:5c:
         2e:dc:8f:73:48:b1:8e:48:9d:df:be:7f:66:00:48:d7:28:f0:
         fd:0b:ea:61:eb:c2:63:e9:0f:06:09:45:f9:7d:65:4f:74:23:
         96:56:4d:cf:24:97:cd:66:9e:49:37:98:cf:e9:dc:1a:c6:a7:
         c5:83:f3:6b:52:7f:65:54:ba:82:bc:a5:8a:f0:df:65:24:4f:
         dc:58:14:e1:76:f2:a4:69:d9:aa:97:ea:ec:00:6a:6a:d0:09:
         ae:9e:d0:b8:71:bd:38:e9:c2:ab:02:ef:2f:78:a9:76:cf:89:
         17:4a:e7:e0:a8:5c:54:30:88:5c:bf:5f:da:89:40:23:31:0c:
         94:da:45:1a:5c:46:b0:f8:56:be:d8:98:a5:4b:52:03:60:af:
         f4:a6:00:a5:4b:29:a3:a2:5f:93:f0:21:5a:8d:ec:a3:e8:b3:
         57:81:29:54:0d:9f:05:ca:ce:5f:80:79:ae:d4:a9:cd:cf:8b:
         dc:3c:28:9f:59:7d:d5:db:30:99:56:b6:09:12:e5:ca:11:db:
         61:ab:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:09:16 2025 by rpki-client