Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e9a1b21-e487-37a6-98db-18305b2a2b9d.roa
File:                     3e9a1b21-e487-37a6-98db-18305b2a2b9d.roa (raw, json)
Hash identifier:          NeCtj01tv/vlhKnQJijxIY+Ti06vAiSL6BkDAl5UHao=
Subject key identifier:   5D:3C:B4:C0:A5:37:36:D4:4E:53:18:5A:BD:E3:76:10:46:0F:1B:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D32EB81609156CEAB6C979180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e9a1b21-e487-37a6-98db-18305b2a2b9d.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        64.187.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:eb:81:60:91:56:ce:ab:6c:97:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=90035721-9c7b-443e-9ef0-aa448e7ada6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:bb:ea:9a:34:88:6a:ec:45:af:1e:8d:09:
                    d3:3b:fa:aa:52:f4:11:07:a4:43:5d:63:ec:a3:33:
                    ad:35:87:fe:a6:21:c7:ea:8f:90:a5:17:a8:96:25:
                    19:ba:67:5c:82:9f:f8:de:cd:01:92:96:b0:d4:6c:
                    cb:12:cc:b2:64:1b:93:04:de:fc:87:bd:75:46:c0:
                    16:2d:8d:6e:a1:8b:1a:fc:99:66:38:5e:13:d3:ad:
                    e7:0f:ac:e8:0d:64:ea:f8:c6:b8:3d:5d:bf:07:39:
                    1d:f0:6a:1d:22:b4:f9:4e:1a:61:79:80:39:c8:64:
                    15:74:0b:f2:ba:95:77:cd:a2:37:5e:6b:3c:e8:46:
                    b2:26:f3:e0:08:f1:bc:6b:28:90:7c:b3:20:32:78:
                    c4:12:27:dc:1a:86:25:30:44:c6:27:44:4e:15:c9:
                    c9:d3:c4:58:99:81:a0:d3:1a:80:87:2a:d8:6f:20:
                    ce:0f:d0:7c:1e:93:c6:21:2c:d2:6b:02:08:6d:30:
                    e3:72:da:92:ee:f8:e7:5d:7b:0d:be:ec:4c:36:3a:
                    51:90:23:08:c3:df:c2:09:0c:07:46:47:62:01:b2:
                    38:ca:1b:a7:3e:45:70:9c:7d:29:67:23:f9:c9:61:
                    ef:f7:63:ef:65:dc:31:72:68:42:e6:25:72:48:5d:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:B4:C0:A5:37:36:D4:4E:53:18:5A:BD:E3:76:10:46:0F:1B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e9a1b21-e487-37a6-98db-18305b2a2b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:fb:36:7d:19:25:6e:1e:0d:80:7c:57:36:b3:e8:8a:29:
         6b:9d:2f:47:33:41:0f:dc:a3:b8:e1:1a:f3:37:de:cc:26:e1:
         a2:ea:d2:5a:b0:e2:02:2c:3a:8d:ab:58:ef:96:17:60:76:e5:
         32:03:60:2f:37:2d:e3:b9:bc:69:5a:64:fc:fb:14:a8:e6:ff:
         f4:40:ae:f9:27:fc:0f:5a:d4:19:6a:ce:dc:11:e3:3c:11:88:
         a7:a3:13:ab:2e:99:43:e5:98:25:04:d3:f0:70:b4:3d:b3:93:
         22:d3:59:e6:cb:ec:6a:a2:14:8f:3b:eb:0f:50:da:77:fd:fa:
         78:91:f0:30:5a:79:f6:20:1a:49:70:cf:1a:d8:47:bc:94:0c:
         cf:13:93:23:41:08:d9:3a:44:ca:de:a2:b3:0f:21:b5:8c:02:
         fc:8b:f4:94:15:aa:6e:45:02:ba:ce:31:12:7e:89:33:8f:20:
         b7:2f:ac:a6:f9:52:be:16:af:34:3c:22:91:96:5c:ee:44:bd:
         03:c9:19:3c:ce:78:99:ea:00:db:ad:4b:05:69:95:99:89:ef:
         e0:ba:37:1b:bd:c3:3a:d5:24:8e:7b:18:87:55:bb:90:3c:a0:
         0a:b8:6b:6d:cc:c2:32:49:97:c2:40:35:50:c1:b6:1e:ba:35:
         38:c9:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:04 2025 by rpki-client