Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4143f624-75a5-3d15-ad8c-d694b3a31325.roa
File:                     4143f624-75a5-3d15-ad8c-d694b3a31325.roa (raw, json)
Hash identifier:          ZW/FPfR3PPIIRk0KErw5FsvSBOQajt66E79KDbmi6tg=
Subject key identifier:   52:D0:CF:B6:63:3D:DB:C5:BB:11:47:DD:57:2D:77:CC:9E:5E:B2:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF91A384C2CC08ADCC265E250
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4143f624-75a5-3d15-ad8c-d694b3a31325.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.101.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:1a:38:4c:2c:c0:8a:dc:c2:65:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=b0179f60-78ba-4532-afcd-f8b3b603dfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:a7:b2:a0:7f:10:37:57:da:84:0e:34:5f:
                    6b:04:67:35:50:23:d5:5d:25:f3:3a:f1:6b:08:5d:
                    bc:1d:88:e9:50:39:05:e5:9f:76:e0:18:06:43:b3:
                    31:b9:1b:7e:0f:c0:cb:07:ad:36:ee:bd:b1:d8:c8:
                    70:d4:58:29:65:e5:3f:7b:1f:2a:9d:d7:1d:eb:9b:
                    a2:7b:4b:13:b5:b4:f4:c4:80:5d:84:f5:e3:d3:5b:
                    e0:c3:b9:a0:d8:83:c3:cb:14:6d:31:1a:4d:80:12:
                    b5:65:0b:91:98:a2:f5:d5:59:21:77:52:b7:74:3e:
                    77:48:94:a5:4c:ea:55:ca:1e:32:c6:cc:01:b9:c8:
                    fd:bf:43:af:c5:2e:c4:37:2e:a8:38:af:1d:05:95:
                    71:43:82:a2:f5:9c:92:17:01:dd:ff:a0:55:76:2a:
                    fb:01:21:e4:03:78:32:40:46:f4:d2:ec:9d:88:6e:
                    df:2c:40:12:06:eb:43:a7:9f:09:73:c4:97:3c:a7:
                    60:7b:81:cd:dd:1f:38:a1:70:0a:34:6b:9a:b6:8d:
                    05:c1:0d:fd:2b:ab:3a:1a:07:55:fe:86:84:26:64:
                    71:db:6d:09:2b:b9:16:d1:b0:0c:09:09:9e:4f:fd:
                    30:33:b5:e5:62:77:11:8f:6c:0c:3c:83:23:bf:25:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:CF:B6:63:3D:DB:C5:BB:11:47:DD:57:2D:77:CC:9E:5E:B2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4143f624-75a5-3d15-ad8c-d694b3a31325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:44:d4:a0:30:df:62:1e:48:4c:d7:75:11:e9:d1:9b:27:55:
         15:68:bc:92:62:88:ab:21:58:61:8a:7d:b1:f9:ab:f0:b4:1c:
         03:18:11:63:57:c0:be:92:7c:24:29:0c:17:58:0e:ce:35:85:
         0b:8a:50:4d:43:63:da:ed:e7:6d:24:df:6d:53:b6:ea:b8:16:
         22:71:cc:cd:52:7d:fd:d4:79:69:e7:dc:63:4e:f3:8d:b6:4e:
         32:e4:5c:d6:5c:5c:ea:cf:94:19:f0:87:96:84:1c:3f:29:f3:
         2f:d0:5d:3a:a9:db:87:66:5c:9c:fa:cd:4d:f6:58:65:55:4e:
         a5:44:c5:28:95:8c:aa:50:b3:aa:db:b6:7b:68:3b:c1:03:f7:
         cb:c4:d3:f1:1a:53:78:a1:05:57:ad:5a:df:2a:f7:50:3a:45:
         d2:c0:c8:11:1e:aa:d8:b4:17:8a:a7:87:d8:e1:7c:74:fc:30:
         67:e1:56:0e:dd:16:c4:67:23:f2:e9:28:98:e6:06:00:57:03:
         a4:fa:5a:98:ad:29:71:ff:53:b1:4d:af:95:79:8d:d7:95:a3:
         b9:b4:06:e4:c0:c7:63:59:1d:3e:7c:15:2b:8b:df:1f:fd:1d:
         66:3c:c4:45:21:fd:26:f0:f3:f8:73:c4:f7:6c:46:4e:79:0c:
         26:2a:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:01 2025 by rpki-client