Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/425247cb-573d-371b-b8e7-94ba9174099a.roa
File:                     425247cb-573d-371b-b8e7-94ba9174099a.roa (raw, json)
Hash identifier:          sbn6PvMItzi6vzJ+tgS36d/N2HUUlxnZ7pscvB5lH9A=
Subject key identifier:   5F:C2:F6:89:36:A8:D3:6F:4E:7E:A8:9E:75:FF:D4:76:0C:F3:CA:7F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE412F3FCBB7056BEE86EF780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/425247cb-573d-371b-b8e7-94ba9174099a.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.141.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:12:f3:fc:bb:70:56:be:e8:6e:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=2ed23ebd-ff80-41b7-843c-50bf2c2142d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:e2:92:06:8e:16:bf:56:e1:51:7e:b4:9e:
                    69:71:69:2b:e0:67:f4:a4:5e:2a:aa:21:fb:fe:c7:
                    5d:64:b0:7e:3d:bc:9d:92:4e:c3:34:35:7b:20:78:
                    f4:22:03:76:b5:2d:9b:30:0a:5e:9b:99:78:6a:c7:
                    61:e1:28:7b:12:98:11:3c:3e:8e:97:31:46:e7:7e:
                    ec:a2:ea:e8:21:c1:60:e1:ac:2f:85:89:2c:7a:26:
                    e4:55:b9:f3:46:a8:1a:d4:e5:a3:4e:84:4e:60:f2:
                    db:9b:aa:8b:82:54:dc:45:e0:84:00:a3:42:82:60:
                    26:9f:15:d4:c7:de:43:c4:d1:09:2a:bd:95:8f:40:
                    8a:2e:b1:71:0f:8d:da:d2:eb:33:33:53:97:09:42:
                    eb:c6:6d:2d:55:e6:b8:57:73:70:54:dc:d9:1a:9e:
                    42:ef:d1:87:62:16:ab:d7:34:87:8a:fb:54:bc:b3:
                    3a:a2:53:73:6d:67:b5:d5:41:84:4e:68:a9:c2:60:
                    25:14:96:82:01:2f:48:04:2a:94:1e:d9:64:f0:92:
                    6e:a5:17:15:89:01:02:0e:f5:ee:65:92:ee:8c:46:
                    43:17:f1:ae:8c:2e:8d:3a:1c:32:d8:b4:c1:63:0d:
                    3f:98:e6:85:01:6e:b3:2a:17:f6:fb:70:fd:fa:af:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C2:F6:89:36:A8:D3:6F:4E:7E:A8:9E:75:FF:D4:76:0C:F3:CA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/425247cb-573d-371b-b8e7-94ba9174099a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:39:23:5c:da:ce:a8:5e:a4:75:ab:ae:6b:7c:44:80:03:b6:
         5c:83:7b:fc:ab:a0:9e:a1:f2:7f:b3:b8:38:5b:55:7d:8f:28:
         24:a3:38:dd:91:30:23:7e:04:55:d0:e1:93:5e:c4:81:bb:74:
         1d:f4:d5:b3:71:07:a3:16:d4:16:98:b7:1f:64:37:6b:02:9d:
         10:2e:e8:f2:52:6f:57:0b:a4:a7:23:d9:bd:34:c1:6e:5c:af:
         02:f4:a1:3f:cb:a6:c7:61:90:49:47:63:c1:00:63:48:23:3b:
         e4:76:4d:f8:91:91:6d:22:04:7d:8e:d6:c8:79:97:dd:6f:06:
         9c:7b:34:2b:5a:00:90:8a:12:04:ea:e9:2f:c3:ae:81:d2:e6:
         4f:89:57:d5:14:15:09:2f:c2:d2:ac:39:c6:80:6c:07:7c:32:
         b7:bd:e0:62:db:90:83:17:0d:32:36:fa:36:7d:7b:d9:15:f9:
         ba:7f:12:63:8d:cc:f2:c1:f8:a3:b2:19:62:37:84:02:44:94:
         57:d6:10:ba:cc:c6:fb:ca:cd:8e:17:01:29:d8:c1:94:9f:6b:
         52:1b:00:b2:a1:9c:1e:21:3e:ad:2f:9e:0b:e2:36:08:c9:0a:
         b2:10:4f:31:4a:32:49:27:55:a8:7b:e9:7a:bd:c7:45:99:52:
         4e:1c:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:36 2025 by rpki-client