Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b63534b-68f1-3b2a-a6a1-b326b31376fc.roa
File:                     3b63534b-68f1-3b2a-a6a1-b326b31376fc.roa (raw, json)
Hash identifier:          zBfsXp70nygKLn1hROZB4DJ/s4tcWjgKxWP4nFWMLpE=
Subject key identifier:   E8:3A:BB:FF:2D:44:41:2C:D1:0A:BC:FE:CF:08:60:4B:16:8F:1F:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E92F0547F753C3A2FD7B04800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b63534b-68f1-3b2a-a6a1-b326b31376fc.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.224.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:f0:54:7f:75:3c:3a:2f:d7:b0:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=931b35d1-d967-49a7-8d4d-f5d3c64d4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:20:fa:c6:23:fc:1b:7e:48:57:b4:86:ba:41:
                    cd:d8:f0:ef:9d:96:53:0b:6b:6a:4c:ab:32:db:e4:
                    bf:b5:d6:3d:0c:d2:6f:15:a5:08:f4:ca:17:1c:78:
                    54:29:12:b2:4f:32:d6:c9:71:09:5e:cd:7b:68:f1:
                    8e:1b:62:fe:1f:d0:e8:a9:f0:2f:ac:5d:6e:01:ed:
                    50:79:0b:f4:17:11:a1:08:70:73:0d:0a:41:2a:57:
                    47:89:21:cc:3b:e0:3c:38:46:9c:54:bf:f1:f8:de:
                    b5:b5:62:f6:9d:15:49:51:96:f4:06:84:ba:76:5f:
                    13:aa:23:70:dd:99:87:5b:df:ca:b9:a0:43:e9:cc:
                    b9:d3:d4:03:ba:5f:1b:91:4b:e2:78:73:6a:fb:bc:
                    d9:86:63:e8:e7:87:56:3d:fa:ef:6e:58:bc:32:c1:
                    bd:d9:1e:15:de:d2:90:1e:57:0e:30:d1:77:ff:6d:
                    5f:98:67:86:e3:19:60:0b:d7:0c:ba:3f:c5:ef:ff:
                    d0:b3:02:11:b2:b9:c7:50:a9:8a:d2:85:78:f1:41:
                    88:73:2d:3b:29:e5:df:3e:6e:08:67:fe:8a:ce:3b:
                    87:45:d7:8b:ae:36:e6:0d:8e:03:05:c0:1e:40:05:
                    00:2d:77:21:93:c1:bd:94:95:24:ea:6b:81:26:ed:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3A:BB:FF:2D:44:41:2C:D1:0A:BC:FE:CF:08:60:4B:16:8F:1F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b63534b-68f1-3b2a-a6a1-b326b31376fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.224.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:3b:79:dd:47:16:56:9f:92:3c:08:f1:9d:40:f9:6b:d4:
         1a:f4:cd:7a:8f:44:9f:a6:cb:b5:61:be:6f:ef:f0:02:37:f3:
         b5:08:c6:39:ab:54:a3:40:3d:07:01:88:d7:5f:ee:e7:10:af:
         dc:68:0b:bb:12:2f:a4:7a:8f:b5:a3:7d:a3:ab:94:5f:23:5d:
         50:5c:59:df:c5:28:1e:0a:74:52:52:42:02:9f:2c:5a:89:31:
         45:75:dd:7f:a0:f3:3f:bb:e3:e4:91:6d:02:8c:a7:d3:1f:bd:
         cb:e3:20:e8:77:21:be:7b:83:1a:55:30:9a:60:bf:2d:37:57:
         95:1b:3a:72:be:8b:69:86:a2:ed:09:1a:c8:55:2d:59:cc:2d:
         e3:45:96:39:90:17:eb:2f:22:c3:38:ae:d6:1f:02:5a:50:c6:
         b4:b7:83:16:92:3b:28:97:0b:8f:70:87:5b:eb:dd:34:66:c8:
         34:db:a3:21:72:e9:a2:0a:24:dd:d5:d1:61:ad:65:38:1f:08:
         6a:58:32:be:27:4f:a6:c3:81:0e:18:62:ea:da:c1:5b:44:f4:
         ce:6e:5b:13:c5:35:69:e1:c4:3c:41:37:cc:73:f0:94:df:f5:
         97:56:ed:76:26:a3:fb:0c:5c:18:c2:78:a2:3c:5e:cf:5a:8c:
         64:2e:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:20 2025 by rpki-client