Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43b0aafb-c4e3-343f-b1e9-e521df1658ea.roa
File:                     43b0aafb-c4e3-343f-b1e9-e521df1658ea.roa (raw, json)
Hash identifier:          nz2r5deFQ4b5pzEOaWiaOiMf7yocYel5IVX5SleLX28=
Subject key identifier:   0E:B1:05:75:BD:11:EC:F8:68:AD:E8:7D:47:FA:F1:03:9E:94:4F:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE40B59E2F0EEED9D12E96CFF
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43b0aafb-c4e3-343f-b1e9-e521df1658ea.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        71.145.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:0b:59:e2:f0:ee:ed:9d:12:e9:6c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=21b7fd3e-99cf-4cda-917e-1a3f11aec88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:e6:19:ad:c9:89:25:15:9e:c1:cb:f3:f3:
                    a5:1d:bf:30:30:29:dc:b0:11:e8:12:40:4f:9e:17:
                    ac:5d:45:39:35:93:32:96:98:60:de:ba:dd:ae:82:
                    c2:69:9c:7f:5c:67:43:b0:06:5f:6a:06:5a:87:72:
                    8f:5d:d8:17:7a:d9:d7:d0:29:7b:4e:af:8f:f3:14:
                    a4:4b:6b:d7:65:d1:a9:90:0a:4f:fc:8d:fc:fd:5d:
                    2b:45:fc:d5:18:e6:9d:b8:89:77:0a:b0:06:0f:8c:
                    4c:99:ee:7c:d2:a5:3c:31:72:51:e6:00:63:00:aa:
                    08:9c:72:c4:bf:21:23:89:78:7b:e1:34:27:d8:34:
                    f5:03:33:04:33:70:02:31:5f:67:e8:9a:3c:9f:23:
                    a6:9d:40:63:4b:f2:55:28:de:3d:86:ba:99:c2:a3:
                    5e:d9:bf:86:2f:7d:fe:48:2b:db:77:f1:28:b4:91:
                    1e:8c:0b:4b:7b:0a:13:ea:f5:09:e1:7a:4a:fb:09:
                    2f:84:73:ff:65:8f:1e:71:4c:3b:8d:85:17:86:22:
                    7c:c2:d7:fb:36:65:9f:13:b0:ae:d1:88:54:0a:06:
                    8d:ff:c1:fb:84:fa:52:32:da:7e:48:b5:cc:83:57:
                    6c:a1:0b:af:b1:06:7c:84:e4:6a:71:59:89:4b:13:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B1:05:75:BD:11:EC:F8:68:AD:E8:7D:47:FA:F1:03:9E:94:4F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43b0aafb-c4e3-343f-b1e9-e521df1658ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:04:02:70:dc:0d:b3:7e:14:b7:bc:58:ed:42:e9:9d:04:2c:
         9f:78:3b:53:ef:a1:c7:c8:ed:89:62:42:dc:88:fc:43:5d:9e:
         a6:4b:12:db:7e:b7:02:f4:aa:5c:aa:f1:4b:4a:56:56:45:89:
         c7:c2:86:fa:72:47:5f:0a:2b:a9:dc:52:45:d3:06:c3:e0:3c:
         4c:a8:1d:8c:e9:a2:1e:f6:df:8e:bf:1d:28:17:c6:1b:96:be:
         34:bf:03:7f:d2:99:94:7a:2f:fa:d6:ab:09:a3:e9:fb:a5:21:
         28:b2:52:9a:19:e8:c2:a1:97:07:70:91:c9:36:df:b6:1f:1f:
         03:63:b6:04:f5:4c:46:33:ca:8c:4f:a9:4e:31:43:28:c4:6c:
         b5:14:6d:8c:92:e2:e2:3f:a1:5f:34:f9:ae:b6:e7:c2:df:39:
         9f:94:7e:0c:a5:6a:10:ab:41:93:93:74:f0:b2:d0:3a:45:c0:
         10:ac:ab:dd:75:34:b9:3e:79:33:bd:0c:3a:c0:72:a2:13:85:
         10:58:44:06:7a:a5:70:df:63:fe:bc:da:ed:73:58:7d:d0:6e:
         6b:49:4d:fe:42:3d:81:2e:e6:21:91:00:b8:95:7c:50:ee:ab:
         9a:db:5c:ff:d9:5c:56:98:bb:53:29:5a:f3:20:1c:51:48:73:
         49:0c:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:28 2025 by rpki-client