Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31d62651-a3ab-3069-973e-811c8b277ddd.roa
File:                     31d62651-a3ab-3069-973e-811c8b277ddd.roa (raw, json)
Hash identifier:          EZV9kQAFAKMopdOT5DYjxGP6XEhbnahLdGAMh7sXGV4=
Subject key identifier:   D8:33:15:51:F2:F7:63:06:9B:30:76:7A:CE:5F:98:93:24:6A:77:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE3FCB75D4E37084AA438FE10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31d62651-a3ab-3069-973e-811c8b277ddd.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.210.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:fc:b7:5d:4e:37:08:4a:a4:38:fe:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=818d5b1b-b938-474a-8fc4-ff815d68f8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:b9:c5:69:ed:a5:ed:6e:00:2e:05:aa:52:
                    a0:63:ca:6a:67:a4:33:dc:d0:03:2b:f9:13:d7:e8:
                    4d:05:c6:0b:f5:79:e8:8a:43:b4:f2:97:e1:1e:44:
                    be:cc:15:96:79:7e:6e:c8:8b:8e:5f:57:04:df:62:
                    d8:bc:5e:2d:2e:ce:5a:68:aa:64:94:18:09:d9:09:
                    8f:64:21:70:21:7f:0e:c7:f5:77:6d:d6:e6:45:22:
                    94:53:b8:ef:03:51:07:58:22:3b:13:55:77:13:29:
                    a9:f4:a5:46:bf:97:54:8a:34:e8:1c:b0:cc:14:0b:
                    b1:71:84:77:33:fc:b5:20:06:9d:aa:ad:dc:46:b0:
                    c0:4f:48:c9:87:e2:e0:ca:8a:4d:43:c0:f8:4a:2a:
                    42:58:83:b3:23:6c:37:4c:b0:b6:9c:2e:1f:e3:7e:
                    b4:c2:3f:8f:87:c9:67:d9:4b:ef:3e:00:a3:ed:35:
                    85:92:b8:70:08:c0:7f:99:60:9b:ca:2f:68:22:b5:
                    c3:95:eb:09:1e:76:a2:a0:08:c7:f7:38:9d:4b:42:
                    96:f2:90:87:04:b9:03:1b:db:06:06:1b:3f:4c:7d:
                    e3:f4:d4:a0:90:5c:1c:99:8c:65:58:50:99:61:41:
                    ea:40:d1:b1:94:8e:08:0e:ac:01:01:35:da:3d:a8:
                    db:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:15:51:F2:F7:63:06:9B:30:76:7A:CE:5F:98:93:24:6A:77:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31d62651-a3ab-3069-973e-811c8b277ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.210.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:f8:5c:e3:2e:0a:30:7d:3e:45:e1:4a:26:17:aa:68:3f:
         c7:06:97:3a:f4:39:e6:91:0a:ae:ac:f9:4b:8d:dc:ee:1b:a0:
         d7:21:f7:f4:b8:37:f4:5d:9a:be:98:47:cf:80:05:01:ba:06:
         0d:a4:1e:d7:cc:e5:6a:7c:6a:44:c4:79:44:bf:cf:96:64:ea:
         ae:9f:ff:e2:6d:2f:dd:85:eb:49:67:4a:ad:4c:2d:b5:71:32:
         80:cc:2b:44:70:de:ff:bb:ef:58:29:59:4a:d7:36:a6:68:1d:
         18:d4:62:49:91:8a:bf:e8:e4:c5:98:8c:33:5f:b0:61:53:ba:
         f2:5e:7e:21:be:3d:a5:38:54:5f:bc:b9:56:6a:13:c4:82:af:
         21:4c:08:c0:9c:a5:5a:a8:5b:7c:4e:10:45:55:53:fd:7c:b5:
         df:9a:d8:a3:28:a4:c9:0a:77:0f:15:6c:e7:02:3c:8d:3a:5e:
         e9:aa:ed:5c:8c:cb:a8:fb:b5:77:5a:54:94:e8:1d:15:79:8f:
         7e:64:50:9c:d0:58:eb:1d:b8:b9:2a:0a:37:e3:54:32:b8:3a:
         9f:76:cb:5c:ea:a5:6d:3a:ad:54:33:89:b9:bf:48:63:ac:4f:
         72:cf:c3:51:0e:0e:88:47:de:7f:4a:5b:58:ce:a8:16:69:82:
         a9:2c:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:24 2025 by rpki-client