Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/484354a1-9ad5-3768-bd9d-ba6bd2b976ad.roa
File:                     484354a1-9ad5-3768-bd9d-ba6bd2b976ad.roa (raw, json)
Hash identifier:          8qCsXwhernzh64AXx5YVETa7QA2f3vmuXSulYz9RxwQ=
Subject key identifier:   C6:0F:0E:81:90:CA:6C:4B:EC:5A:C0:92:2C:34:2B:B0:B4:5C:3C:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE46C5434D5F187977EBA8780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/484354a1-9ad5-3768-bd9d-ba6bd2b976ad.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        64.252.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:6c:54:34:d5:f1:87:97:7e:ba:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=449a6278-5140-476d-8618-a9717c576e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:d8:90:b6:d4:9d:e1:c6:82:44:29:c3:e5:
                    12:40:cc:56:ff:bb:0a:2e:56:c4:92:83:e8:e2:8b:
                    62:96:e5:8e:55:22:2b:a4:7c:4b:fe:13:fd:a5:80:
                    22:26:96:75:f0:e0:fb:42:a2:3e:ec:57:ec:6e:41:
                    21:a4:ed:79:9a:68:0b:3d:53:6f:f0:68:20:b0:8b:
                    47:dd:ca:99:d6:f9:6f:20:b7:26:c5:ce:ca:85:37:
                    26:92:de:56:e1:da:eb:51:31:47:7a:b7:fd:52:ef:
                    a3:9b:c5:cb:bf:8d:cb:6e:f8:f5:36:96:04:d7:2a:
                    c1:3b:49:5b:cd:0e:ce:d9:eb:f6:8c:68:c4:c2:b3:
                    31:79:fa:51:b1:56:d2:3a:63:e6:84:a2:d0:af:54:
                    79:05:d5:49:9c:c7:7f:0e:fc:53:d1:03:0f:20:ac:
                    e1:ed:bd:82:47:12:7b:8a:09:80:94:18:8f:28:0a:
                    27:7e:be:d0:2a:3f:92:3a:87:7e:0d:95:4e:da:7b:
                    8d:66:5c:94:5b:a0:84:e4:55:09:2e:2c:c6:6f:87:
                    86:4a:9b:57:ce:d9:47:19:fa:c7:e8:8f:b6:e4:3b:
                    eb:ee:c1:19:68:79:d0:57:96:fb:21:52:64:95:da:
                    2e:44:5b:1f:52:69:6c:ec:cc:87:af:7d:cb:de:d6:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:0E:81:90:CA:6C:4B:EC:5A:C0:92:2C:34:2B:B0:B4:5C:3C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/484354a1-9ad5-3768-bd9d-ba6bd2b976ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:4d:55:e4:0a:2d:0f:20:0e:89:63:8e:d4:21:80:0f:e7:
         e7:64:df:29:2e:c9:c3:4b:af:c8:39:8a:1f:9d:0d:1b:33:47:
         d4:6a:e7:83:05:5b:f3:c7:2f:a7:ee:94:ad:6e:98:58:76:40:
         8e:0b:90:32:f8:bd:40:be:3b:87:7a:70:dc:1a:68:59:87:45:
         32:7f:9a:38:8f:37:00:0a:e2:8b:62:20:08:ba:1f:e7:68:4e:
         00:6e:29:4a:6a:09:eb:d3:c3:5d:40:c9:48:50:bb:7b:e8:db:
         ed:d0:d1:db:a5:0f:26:17:f9:11:fb:52:b2:79:f5:71:f5:a3:
         cd:23:ea:19:4e:b9:c7:b3:ad:d8:49:5c:82:66:a8:85:f0:72:
         a2:4f:0a:de:78:0e:91:04:9d:c2:7a:f8:07:09:df:23:ff:d1:
         2a:fc:5d:ab:8a:9c:38:6e:97:76:78:56:58:a0:9e:9a:3e:60:
         09:34:f0:84:ad:f7:e8:04:44:e7:58:22:eb:2e:04:e5:e4:bf:
         a6:bf:05:44:a5:7d:9e:15:6e:91:31:09:e3:28:a1:fe:e2:d1:
         bf:42:d1:2b:f7:7c:6c:64:8c:f4:c8:5a:23:4d:e1:f9:47:90:
         99:fa:81:e7:f0:fa:2c:bb:43:1b:9c:0a:aa:8e:67:60:77:51:
         1d:ac:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:48 2025 by rpki-client