Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3046fe67-28c8-391e-8110-62561fc82184.roa
File:                     3046fe67-28c8-391e-8110-62561fc82184.roa (raw, json)
Hash identifier:          5x7dfDL9zpWJiTp5Q/iZvKa4LQHkD3uBMt74n35x9Co=
Subject key identifier:   2C:87:6B:2B:F2:25:94:F9:03:65:BF:87:18:D0:4B:27:C8:CC:BB:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0BD622A707703934F52A2140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3046fe67-28c8-391e-8110-62561fc82184.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.132.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:d6:22:a7:07:70:39:34:f5:2a:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=7ec50e0c-3317-4339-97cf-cf4d578d4d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:ff:cb:b8:f0:fd:1f:7d:91:83:af:e5:82:
                    8d:63:b6:3c:c7:73:b0:98:91:c2:bb:86:90:74:d8:
                    81:ad:53:c9:a5:26:4f:5b:73:61:1f:fe:28:90:4e:
                    ad:1c:48:83:d0:72:97:96:b6:c1:99:29:f0:d4:63:
                    71:80:22:dc:4f:3b:bd:8c:41:62:e9:61:35:16:9d:
                    ff:ce:48:48:19:85:bd:b1:65:96:c4:e1:45:25:f5:
                    49:7c:5c:0a:ab:ed:5e:b6:bb:0e:db:ff:6c:13:90:
                    6d:90:7a:23:39:8c:1f:17:91:d6:52:2e:b8:22:a3:
                    5d:c6:61:2d:d5:a1:3d:97:34:51:e4:93:f9:ae:d0:
                    6b:0b:7f:8c:84:9d:7a:95:94:2e:77:6d:15:d0:31:
                    48:73:41:cf:97:6f:56:c0:d3:31:4c:ad:fb:17:b8:
                    cc:2d:3e:32:84:7f:15:46:c1:b8:6f:93:3b:7c:34:
                    ec:e2:1d:37:ba:3a:d3:3a:cf:54:95:21:e0:b7:d3:
                    03:2d:2c:41:6a:33:ba:1b:8b:c4:b4:18:e2:4c:4a:
                    95:e7:cd:01:b9:7e:f2:8e:d0:9e:2a:4f:e3:a5:e1:
                    4f:64:2a:e7:60:af:c3:de:3f:bf:2e:6a:a5:11:f4:
                    53:92:0c:4b:e9:df:18:c4:3f:cd:18:20:9b:48:51:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:87:6B:2B:F2:25:94:F9:03:65:BF:87:18:D0:4B:27:C8:CC:BB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3046fe67-28c8-391e-8110-62561fc82184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:4a:9e:94:84:ca:2c:3a:3b:f6:91:ee:d8:62:ac:9b:5e:
         31:e2:3c:bf:db:81:7a:61:c5:01:15:cb:10:25:36:4b:7b:88:
         4f:6c:1a:5f:ed:7e:35:da:cf:b9:c0:b0:ff:7a:c8:86:db:d3:
         51:ad:67:12:35:3e:f6:09:c3:b2:2d:91:fb:36:66:99:df:dc:
         9d:bd:9f:32:6c:65:8f:2c:9b:79:3c:6b:b6:53:b8:03:f8:6a:
         35:29:de:d9:09:fd:72:57:93:6a:cb:19:f8:9a:cb:8b:2b:06:
         be:f5:c6:57:7b:61:6d:cc:6d:8a:9e:c1:eb:a7:39:38:ce:78:
         75:0c:53:e1:1d:d8:c6:da:a1:66:8a:a5:c1:c2:fa:80:57:c4:
         8b:e5:57:89:ae:56:d8:fc:43:b4:ad:24:cd:33:57:2e:7e:ef:
         4a:65:2a:33:c3:9a:4e:18:b5:6b:b1:f4:00:65:e0:14:f2:cc:
         fc:85:23:13:f1:67:bc:5a:fc:62:c1:df:95:62:a0:aa:dd:fe:
         04:69:5f:fc:45:02:07:ea:30:a0:95:b4:11:af:42:be:2c:1f:
         0e:dd:09:87:15:41:78:d7:de:49:4a:b0:bb:ae:1b:4e:55:e3:
         ad:da:b3:29:0a:1d:5e:e7:50:50:f9:15:4b:75:6b:b4:48:6a:
         8a:85:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:32 2025 by rpki-client