Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b6221e2-3da8-38bd-af0d-aaa92f6ea474.roa
File:                     3b6221e2-3da8-38bd-af0d-aaa92f6ea474.roa (raw, json)
Hash identifier:          4M4YQhl+dXihGmZLfJljVXLHI0TH4wFyk45l6/6ULqk=
Subject key identifier:   C0:40:F8:40:84:29:3E:41:AA:21:3F:6E:50:10:4E:3D:E8:C9:28:52
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6BFFF9D4D6A5E9C7324A84B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b6221e2-3da8-38bd-af0d-aaa92f6ea474.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.205.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6b:ff:f9:d4:d6:a5:e9:c7:32:4a:84:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=d20b93d8-16c9-4f1c-b456-95b9b9e5f261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:26:9e:98:1f:65:bf:20:3b:b4:8a:59:31:
                    65:16:f6:74:df:51:db:bd:2d:4f:bf:dd:46:de:8a:
                    aa:58:75:f9:c7:69:db:1f:58:44:79:44:12:0e:97:
                    c3:65:ff:9a:0c:e8:96:5f:bb:17:ab:26:d2:87:4c:
                    c9:b7:6a:3a:76:aa:b4:d2:6b:82:97:25:fb:a3:5f:
                    01:91:88:26:ea:f2:4a:9e:24:8d:3d:77:10:34:9c:
                    53:9d:bc:35:41:46:a1:6c:bf:a6:10:d2:08:f9:ca:
                    5d:7c:79:15:c5:68:c5:67:be:57:0c:9f:8f:fd:a8:
                    2f:cc:28:2b:3c:a8:f0:88:cc:3d:70:b1:61:13:59:
                    0d:3d:ff:52:91:cc:63:77:89:c4:30:ef:d5:e1:5e:
                    ba:39:77:2f:4e:5c:a8:f0:55:cb:a8:c7:37:2f:9d:
                    42:60:64:c9:f4:d9:57:00:fb:2b:24:50:11:d2:97:
                    5f:da:3a:d2:1f:79:05:9b:79:ca:6e:31:b6:f8:91:
                    c5:e7:e1:1c:52:1b:b0:6c:7a:71:00:ea:20:8c:2a:
                    5a:88:69:02:cd:b2:65:66:12:8a:77:e9:56:91:f3:
                    89:50:c1:4b:c6:61:8f:62:59:96:70:b2:43:24:61:
                    d0:22:cf:d8:9a:5a:a0:09:89:eb:46:26:cc:08:e4:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:F8:40:84:29:3E:41:AA:21:3F:6E:50:10:4E:3D:E8:C9:28:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b6221e2-3da8-38bd-af0d-aaa92f6ea474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.205.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:34:7e:bf:b3:17:1f:f3:69:a8:43:fc:17:9e:b7:fa:e9:
         01:39:c1:31:b2:6e:15:8f:51:b3:d3:33:3a:a0:0d:f3:e1:f3:
         df:94:c8:24:61:61:76:b4:b2:dd:72:f5:d3:5d:4d:92:35:32:
         86:11:25:65:df:d4:0f:8f:4f:74:9c:b6:ee:67:b5:fb:8a:e0:
         56:ba:49:49:df:25:79:5d:81:29:58:1d:31:bf:b4:d2:4f:02:
         cc:52:1a:29:c5:fd:c9:6d:b3:70:41:bc:ad:75:fe:7d:f9:a5:
         ee:76:64:1c:0b:9f:e3:19:24:c7:93:11:a3:18:80:41:3d:27:
         62:87:13:cd:89:93:80:65:3f:b6:cc:2a:8b:0e:0f:24:fb:c5:
         78:28:d0:db:25:0c:ff:68:93:a4:fe:c4:47:fd:e1:cf:e7:65:
         c9:02:ce:3d:8b:7c:87:41:c6:13:48:7e:ca:10:b3:75:ab:01:
         3e:c6:f0:a5:50:e7:3d:3d:b7:58:dc:a0:0b:39:b8:9a:9c:bd:
         4b:52:37:fa:35:fe:e8:e1:a5:f8:01:84:60:c9:da:ef:ff:f6:
         70:dc:07:bf:75:79:85:ea:11:8f:77:14:66:3b:3e:80:d2:83:
         9f:49:79:98:eb:e1:5a:2c:82:e6:3b:3d:fb:dd:31:1e:e9:76:
         ba:57:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:11:51 2025 by rpki-client