Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31bd672d-3894-30f5-8bf5-cc9f7d2bf075.roa
File:                     31bd672d-3894-30f5-8bf5-cc9f7d2bf075.roa (raw, json)
Hash identifier:          7FN/j9FBxtOz7HbLnQ9bk8sgOTfZBG8DUUaISZ2LfFs=
Subject key identifier:   46:C9:9E:63:F0:2C:69:E5:8C:44:EA:92:73:59:0D:74:6A:34:E0:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5AF47EFBC5A49B3CE388F280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31bd672d-3894-30f5-8bf5-cc9f7d2bf075.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.255.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:f4:7e:fb:c5:a4:9b:3c:e3:88:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=34c2a83c-e966-42d2-8fae-e784e74529ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:9e:04:75:ef:5a:e2:59:05:c0:6e:cd:30:
                    29:10:f8:39:a4:e2:ea:24:c1:d9:5c:ac:91:e7:d5:
                    30:59:d1:e9:a5:2c:53:df:07:bd:2d:78:b2:34:54:
                    6c:a3:85:e1:01:22:85:94:84:4a:b5:6e:da:3e:8f:
                    ab:7b:a0:27:cf:a0:ae:12:1a:ca:44:2b:81:09:19:
                    78:ca:6e:c6:5e:4d:a5:39:34:89:8f:cb:0c:34:21:
                    57:65:54:c8:ef:ce:88:95:ef:b4:dd:60:ba:4d:71:
                    c9:8a:67:ee:40:61:43:c6:a7:a4:c2:5a:f2:a5:1f:
                    ed:47:27:37:cb:12:ae:c3:7d:34:79:43:83:6b:87:
                    8c:6b:85:ae:67:e0:29:a3:52:19:f1:6b:a1:aa:a6:
                    5d:cb:00:2f:13:5b:e2:95:fd:0f:7c:ed:29:ac:1e:
                    a3:0e:e0:43:f3:aa:6e:57:ce:b9:cc:9f:13:e0:cd:
                    80:9e:17:f8:1a:1b:a0:cf:f8:f2:08:ec:c7:f6:27:
                    dc:c8:47:73:57:e3:50:ba:f9:68:78:e3:77:38:e8:
                    87:b2:0c:51:ba:ed:79:7f:6d:47:33:59:d9:a6:11:
                    2d:ff:a1:52:72:e2:66:79:36:7a:d9:05:4b:69:e6:
                    9f:f1:b9:06:f6:45:f7:51:cb:fb:1f:07:7d:47:68:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C9:9E:63:F0:2C:69:E5:8C:44:EA:92:73:59:0D:74:6A:34:E0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31bd672d-3894-30f5-8bf5-cc9f7d2bf075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.255.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:52:36:e6:73:51:83:fa:d3:2e:60:6d:63:a6:55:d6:45:
         85:12:4b:98:55:c4:41:75:a7:cf:ed:97:aa:c8:86:ea:7b:d9:
         40:84:f8:1b:90:ff:f8:a8:02:94:2d:b7:eb:02:0f:0d:ec:91:
         78:51:a4:20:16:c6:c7:02:dd:e5:00:1f:e8:fc:f4:46:ac:06:
         b6:52:25:00:ed:e4:79:9e:91:1c:29:d4:06:dc:73:f5:76:3e:
         77:bc:4c:ad:33:06:86:a6:7e:03:fe:58:87:73:7f:88:6f:68:
         68:75:59:00:b3:1b:34:92:e8:22:5f:f7:c6:92:e2:43:38:3f:
         a7:9e:2b:c9:a3:4c:a8:af:8b:48:00:0f:13:ec:0b:83:2d:73:
         b0:e6:1d:69:8d:06:7c:42:af:6b:7a:d0:e0:03:1a:b1:e2:32:
         b6:c8:a5:a4:ca:2b:f4:c0:29:d6:d9:69:d5:b4:8b:0e:5b:ac:
         ec:d0:ac:65:1d:a9:cb:08:73:c0:65:6b:7a:ba:4f:c2:84:d8:
         ad:37:1d:3c:b4:54:67:92:fe:1b:28:69:65:6f:fa:3a:da:6f:
         28:d9:47:f5:02:87:23:fd:7a:ad:cd:e5:fe:79:2e:da:b8:91:
         20:ee:57:33:13:2a:40:35:ea:b9:ec:75:1b:d8:31:24:86:5b:
         16:af:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:09 2025 by rpki-client