Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ef08afe-d933-3460-94b1-6a903d7be1a5.roa
File:                     3ef08afe-d933-3460-94b1-6a903d7be1a5.roa (raw, json)
Hash identifier:          7qP9y6k0mHzeVJqTmoGDS/3suOl/w3aRD69HIpMzflg=
Subject key identifier:   D4:FB:05:4C:98:70:58:27:B4:65:E1:98:50:49:C8:03:70:DC:37:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95C29DCF7642BA9CDBBF1380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ef08afe-d933-3460-94b1-6a903d7be1a5.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.210.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:c2:9d:cf:76:42:ba:9c:db:bf:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=b7f22927-3a03-456b-949d-cd2165581411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:ab:c0:85:39:ef:90:5a:cc:ec:fa:0a:40:
                    c4:0b:e6:55:75:ab:74:ad:45:6c:93:bf:97:e1:90:
                    7f:2c:6a:4a:8c:51:b7:50:6d:62:7f:43:01:4c:ac:
                    62:f7:36:7b:62:0f:76:b6:43:37:77:af:c1:69:4f:
                    96:99:fd:3d:2b:07:77:d7:25:61:18:24:c9:bd:39:
                    1f:4c:53:b8:9b:ae:aa:fd:1d:2d:9b:ab:77:4d:cb:
                    66:66:78:e9:0f:f6:d0:b6:a0:60:57:8c:f8:11:a5:
                    e0:98:98:97:9f:df:80:79:2f:0f:9c:b6:14:10:4c:
                    23:8a:56:40:f4:34:bb:63:99:19:f3:3a:35:5f:b0:
                    17:16:75:24:0f:3d:8a:a5:11:c8:62:74:72:f8:4f:
                    6b:6a:63:85:1c:86:a4:3d:a8:59:06:24:25:23:81:
                    fa:ff:51:4b:b2:42:7d:c0:b0:28:95:86:f2:1c:35:
                    bf:66:ea:d8:d7:a5:64:3d:cb:06:ae:3e:09:01:20:
                    ef:e8:62:90:91:9f:47:e3:82:c6:1e:7c:6d:23:41:
                    6d:a5:6f:41:00:4d:34:e9:64:d8:8c:cb:a7:4e:43:
                    22:3f:6d:8e:da:f2:5a:12:2b:42:61:e1:75:9d:61:
                    53:b6:75:cd:c2:e5:5c:50:1c:60:19:aa:05:fa:f0:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FB:05:4C:98:70:58:27:B4:65:E1:98:50:49:C8:03:70:DC:37:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ef08afe-d933-3460-94b1-6a903d7be1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.210.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:bc:4c:1c:75:76:71:c7:0b:48:2d:ba:34:d1:ba:e8:e2:
         7e:2d:2f:ac:03:0a:f1:43:c1:e8:11:71:23:5a:45:2b:87:e5:
         51:a0:65:5e:51:30:33:25:a4:91:9d:06:a2:0c:22:13:ea:43:
         81:e9:3a:eb:1b:60:de:b6:33:22:5d:ac:1c:de:d4:69:55:59:
         6e:51:47:98:21:cd:4d:65:75:9e:1b:a2:3d:c7:e1:ce:c7:d8:
         86:20:3c:fa:e7:59:85:ab:3e:e7:8b:89:ef:0b:58:d5:38:93:
         1e:66:aa:7f:15:7f:5a:b8:e2:57:c9:c6:97:ce:15:e7:84:92:
         4c:96:e4:57:bb:b0:69:0c:c3:2d:d0:f8:4c:9e:9b:3a:d0:c2:
         b5:eb:72:e8:1f:05:20:9d:7f:49:bc:42:cc:5e:0f:40:22:7e:
         f9:94:32:df:41:04:19:26:1b:18:41:af:1f:f1:90:3e:6b:da:
         5e:4b:27:ec:0f:a4:1b:47:8e:0b:5a:c3:5c:7a:c3:c7:bc:bf:
         0a:0d:78:f4:48:63:00:8a:7c:5d:b2:24:af:fd:23:58:3d:21:
         17:6d:41:3a:27:1f:e9:46:ec:a9:1c:9e:f0:76:24:4e:d2:32:
         9c:e9:f2:51:03:ab:b9:3f:8b:94:59:57:10:b4:60:7d:35:54:
         24:4b:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:45 2025 by rpki-client