Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47da975d-ab14-3a1c-a820-86b7d1a7938e.roa
File:                     47da975d-ab14-3a1c-a820-86b7d1a7938e.roa (raw, json)
Hash identifier:          Dp1Pp18ANvthaUu+MSm/+vsZoMO8zdKpqdxGqw2XdN0=
Subject key identifier:   79:AD:D5:9D:AD:B9:EE:AA:99:A8:1F:C7:75:25:63:F7:31:70:9D:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBCC1CD6E5BFFD18CA1175A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47da975d-ab14-3a1c-a820-86b7d1a7938e.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        75.3.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:c1:cd:6e:5b:ff:d1:8c:a1:17:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=cd6a7e29-fd6f-438e-be79-db10f1685b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:57:4d:52:fd:31:6e:d2:38:fc:48:b0:a8:48:
                    d1:83:c4:6e:9e:82:fd:59:c5:64:ba:87:c0:a9:4d:
                    80:fb:08:3a:cc:fc:ae:c2:3f:25:38:19:32:0d:c8:
                    c4:4a:a4:30:56:fe:1d:f7:14:33:04:66:fe:22:94:
                    70:2f:d9:6b:b7:d0:e5:32:47:99:55:02:5f:30:50:
                    68:72:4e:c4:73:f6:2f:53:38:b1:11:bd:fd:2e:e0:
                    9a:c1:ef:ae:02:e9:18:b4:77:6b:49:a4:5c:ae:60:
                    02:d9:db:4a:74:da:64:a6:50:fc:39:7f:dd:9b:3d:
                    f7:29:e8:dd:0b:4a:b7:4f:32:1b:cc:82:72:52:cc:
                    ec:91:b2:ae:09:45:b6:ac:08:ed:65:9c:51:6e:c6:
                    ee:af:66:f8:13:3f:f3:a1:a2:c7:d9:fa:2f:bb:ca:
                    de:33:2a:7c:ce:a9:05:4f:5f:92:61:fb:1b:4e:31:
                    51:13:d6:7c:ef:a9:21:05:89:4f:79:38:78:fc:41:
                    92:3f:48:37:d4:bf:cb:9f:98:4d:0e:8c:cd:81:17:
                    d5:58:74:a7:27:79:7a:3d:99:6c:bc:0c:21:a9:e8:
                    57:1d:6b:72:e4:68:39:1b:81:2d:2c:b0:1e:f7:89:
                    25:16:76:1c:02:a6:bc:fb:1d:fd:0f:fb:fc:00:0f:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:D5:9D:AD:B9:EE:AA:99:A8:1F:C7:75:25:63:F7:31:70:9D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47da975d-ab14-3a1c-a820-86b7d1a7938e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:97:04:c3:0f:f5:b5:c0:cc:b6:20:e8:12:17:88:20:90:fb:
         23:84:75:3c:af:68:f5:72:36:c8:7d:4a:c7:64:a0:64:79:38:
         bf:b8:6b:ae:01:f5:13:a4:8d:2e:3d:63:fe:1a:77:d3:e7:66:
         8d:3a:71:24:35:1d:47:72:7e:76:23:18:d3:48:3c:dd:d9:a3:
         18:cd:a9:1b:40:9a:e9:d3:05:ba:d9:98:f5:f5:87:91:ec:5c:
         d2:55:b7:6c:03:49:84:d5:31:b8:76:e3:61:7b:57:35:c6:ff:
         53:2a:80:d7:95:54:9b:7b:a4:2c:8d:cf:28:84:d5:e8:86:3c:
         9d:92:53:7c:0c:be:50:49:a7:e4:e0:f2:a7:8c:59:74:a2:b3:
         21:53:f0:fd:f8:b0:db:8b:b4:d1:b5:87:04:61:a2:46:38:05:
         6d:12:db:bb:43:a5:9d:e1:1c:c1:78:5f:a8:a5:bc:dc:85:0a:
         39:c7:2a:23:a2:8b:97:a9:2e:97:8e:a1:93:72:9a:31:aa:ca:
         79:b6:26:28:2f:89:bc:ae:0f:47:a6:f7:e6:24:68:7b:a8:ca:
         f7:03:ea:39:0f:a7:e9:0a:bf:87:67:90:4d:e7:9c:fd:34:93:
         29:c1:7f:1e:56:2d:5e:ea:10:90:d9:04:35:a5:27:7f:69:b1:
         a1:6b:af:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD68wc1uW//RjKEXWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Q2YTdlMjktZmQ2Zi00MzhlLWJlNzktZGIxMGYxNjg1YjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FdNUv0xbtI4/EiwqEjRg8RunoL9WcVkuofA
qU2A+wg6zPyuwj8lOBkyDcjESqQwVv4d9xQzBGb+IpRwL9lrt9DlMkeZVQJfMFBo
ck7Ec/YvUzixEb39LuCawe+uAukYtHdrSaRcrmAC2dtKdNpkplD8OX/dmz33Kejd
C0q3TzIbzIJyUszskbKuCUW2rAjtZZxRbsbur2b4Ez/zoaLH2fovu8reMyp8zqkF
T1+SYfsbTjFRE9Z876khBYlPeTh4/EGSP0g31L/Ln5hNDozNgRfVWHSnJ3l6PZls
vAwhqehXHWty5Gg5G4EtLLAe94klFnYcAqa8+x39D/v8AA+81wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmt1Z2tue6qmagfx3UlY/cxcJ0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDdkYTk3NWQtYWIxNC0z
YTFjLWE4MjAtODZiN2QxYTc5MzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSwOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyXBMMP9bXAzLYg6BIXiCCQ+yOEdTyvaPVyNsh9SsdkoGR5OL+4a64B
9ROkjS49Y/4ad9PnZo06cSQ1HUdyfnYjGNNIPN3ZoxjNqRtAmunTBbrZmPX1h5Hs
XNJVt2wDSYTVMbh242F7VzXG/1MqgNeVVJt7pCyNzyiE1eiGPJ2SU3wMvlBJp+Tg
8qeMWXSisyFT8P34sNuLtNG1hwRhokY4BW0S27tDpZ3hHMF4X6ilvNyFCjnHKiOi
i5epLpeOoZNymjGqynm2JigvibyuD0em9+YkaHuoyvcD6jkPp+kKv4dnkE3nnP00
kynBfx5WLV7qEJDZBDWlJ39psaFrr3g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:09 2025 by rpki-client