Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ab5c1f2-e4de-3d08-976d-1f6e39066d85.roa
File:                     2ab5c1f2-e4de-3d08-976d-1f6e39066d85.roa (raw, json)
Hash identifier:          UQjdi+NFr6Hp1AdKnXx/3/CXmyq1ow71UcJAjwJuGy4=
Subject key identifier:   8C:53:2A:05:86:96:93:51:DB:BF:94:54:B5:9F:DC:19:6A:2D:25:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBA1C3498C3DCBBE483302C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ab5c1f2-e4de-3d08-976d-1f6e39066d85.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:1c:34:98:c3:dc:bb:e4:83:30:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=9902e074-270d-4019-820e-5100f225b1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:a7:b2:71:75:90:d1:cd:90:cb:39:a6:91:
                    59:ae:bc:15:9d:89:5d:98:3a:76:35:0f:77:e3:82:
                    4c:9a:c0:82:e0:80:47:55:82:54:03:55:01:8a:39:
                    2b:c4:a8:e3:77:fd:91:1f:19:81:d1:95:36:a7:c4:
                    d3:8c:17:70:cc:42:42:bb:fc:7a:a5:bd:7c:41:d4:
                    9b:aa:de:21:ae:9e:62:d0:d5:cc:0a:a1:bb:73:a6:
                    12:09:1c:70:0a:17:39:04:64:eb:4e:0f:cf:e6:94:
                    a3:a5:31:1d:78:6a:7d:a1:64:99:fc:74:57:b6:ef:
                    02:98:50:d4:9a:b9:7d:d8:79:b2:6b:81:ce:19:8c:
                    32:c3:1d:d9:e5:79:a7:cf:5d:35:ad:52:a8:36:06:
                    d3:64:46:7f:90:30:94:0c:9f:1d:18:81:e8:1f:2d:
                    f2:51:d4:47:3c:09:ed:46:d9:b4:05:57:fe:4f:36:
                    bb:cd:59:98:85:7e:a0:d0:b4:fe:29:2a:ae:fb:29:
                    56:97:a0:c2:4c:d2:91:e5:fb:5a:de:5d:fc:07:eb:
                    d7:b7:fb:02:f3:6b:b8:23:45:93:3b:aa:cc:41:4a:
                    f9:b6:ba:3a:bc:38:0d:1e:8d:bc:42:8a:df:1f:5a:
                    bd:16:d5:b1:e8:32:ed:84:c9:55:d6:0f:93:4a:56:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:2A:05:86:96:93:51:DB:BF:94:54:B5:9F:DC:19:6A:2D:25:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ab5c1f2-e4de-3d08-976d-1f6e39066d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:2e:73:45:80:c5:c9:0f:7f:bf:50:9d:81:c8:09:de:3a:
         8a:9c:5e:b6:72:31:19:26:0b:96:e2:61:8e:fc:38:31:0d:c7:
         03:6a:b8:01:2a:bf:a1:ad:c3:06:4f:82:29:15:ba:b5:77:39:
         ce:0b:05:b5:94:ec:39:9f:2a:bc:01:9b:00:27:ff:8e:e3:7a:
         51:41:de:6a:c7:89:0c:16:00:bb:42:3a:cf:ab:83:f1:8f:2e:
         46:81:f6:83:40:24:f8:5b:14:0b:50:66:2b:08:e6:a6:bb:9f:
         73:b7:6c:73:83:b0:2d:32:50:1c:ff:f3:ad:46:80:6e:f5:c7:
         1e:db:fe:39:68:65:50:76:0e:16:82:38:09:12:8e:f7:b0:d6:
         49:84:cd:07:ed:fd:01:11:fa:3f:be:79:5b:60:14:ca:7f:95:
         c6:ce:9c:78:bd:23:05:b3:77:05:69:27:1a:53:39:b6:65:b1:
         70:bd:ac:ca:f6:c9:56:25:ff:ba:d9:7c:15:44:02:18:3a:fc:
         ad:b4:28:9c:cb:14:aa:32:18:c5:1b:68:00:48:fe:85:8b:bd:
         23:56:e1:a5:30:82:7e:bb:33:7f:77:0d:fa:ba:da:9f:21:23:
         de:35:f7:57:be:90:48:fb:cc:31:64:d1:83:f6:e5:f2:8f:3e:
         2f:11:4f:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD66HDSYw9y75IMwLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyODEyMDAwMFoXDTIyMDkwMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTkwMmUwNzQtMjcwZC00MDE5LTgyMGUtNTEwMGYyMjViMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvGnsnF1kNHNkMs5ppFZrrwVnYldmDp2NQ93
44JMmsCC4IBHVYJUA1UBijkrxKjjd/2RHxmB0ZU2p8TTjBdwzEJCu/x6pb18QdSb
qt4hrp5i0NXMCqG7c6YSCRxwChc5BGTrTg/P5pSjpTEdeGp9oWSZ/HRXtu8CmFDU
mrl92Hmya4HOGYwywx3Z5Xmnz101rVKoNgbTZEZ/kDCUDJ8dGIHoHy3yUdRHPAnt
Rtm0BVf+Tza7zVmYhX6g0LT+KSqu+ylWl6DCTNKR5fta3l38B+vXt/sC82u4I0WT
O6rMQUr5tro6vDgNHo28QorfH1q9FtWx6DLthMlV1g+TSlYy8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxTKgWGlpNR27+UVLWf3BlqLSU6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmFiNWMxZjItZTRkZS0z
ZDA4LTk3NmQtMWY2ZTM5MDY2ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSwKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2YLnNFgMXJD3+/UJ2ByAneOoqcXrZyMRkmC5biYY78ODENxwNquAEq
v6GtwwZPgikVurV3Oc4LBbWU7DmfKrwBmwAn/47jelFB3mrHiQwWALtCOs+rg/GP
LkaB9oNAJPhbFAtQZisI5qa7n3O3bHODsC0yUBz/861GgG71xx7b/jloZVB2DhaC
OAkSjvew1kmEzQft/QER+j++eVtgFMp/lcbOnHi9IwWzdwVpJxpTObZlsXC9rMr2
yVYl/7rZfBVEAhg6/K20KJzLFKoyGMUbaABI/oWLvSNW4aUwgn67M393Dfq62p8h
I94191e+kEj7zDFk0YP25fKPPi8RT/0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:29 2025 by rpki-client