Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a158ab-0e71-33fe-b261-33b1c96d4098.roa
File:                     48a158ab-0e71-33fe-b261-33b1c96d4098.roa (raw, json)
Hash identifier:          v4dvwUGPcKljIgtl3+etUpCHNskCX4izynEOoqWipDI=
Subject key identifier:   1B:77:83:EB:E8:0D:7C:80:A4:8A:30:1F:3F:64:A7:5A:58:45:69:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F587BEB197A9F8BE5FF58DBA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a158ab-0e71-33fe-b261-33b1c96d4098.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        71.145.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:7b:eb:19:7a:9f:8b:e5:ff:58:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=6e141bd3-f8e9-4f65-86cd-fcc7b366c381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:57:b0:9a:3b:35:b5:55:dd:c2:19:d4:46:
                    33:2c:ab:a3:fa:ea:8b:e6:24:a0:ec:f9:fe:6d:a4:
                    0d:65:da:03:ba:dd:e5:80:f3:1b:fa:ab:64:60:09:
                    e8:7b:b6:dd:dd:19:a6:91:c5:82:b2:05:52:be:5c:
                    b4:7d:48:6e:99:36:3d:0f:4b:74:d5:88:cf:43:71:
                    8b:54:4b:01:54:03:ec:d1:20:93:4b:d7:f3:3b:5a:
                    03:a9:ea:cc:34:3c:02:b8:70:68:02:ef:2e:05:8d:
                    e2:e2:b9:7f:25:43:66:18:12:bd:19:82:aa:15:bd:
                    64:73:3d:33:64:9f:aa:fa:b3:2f:26:ab:de:27:89:
                    36:57:ab:68:c5:2c:89:1f:6d:5a:7f:9a:84:d0:9f:
                    ef:e1:a6:53:17:43:af:69:64:73:9a:09:6a:69:6b:
                    bb:36:9f:f8:b8:73:06:d9:5c:9f:37:07:a5:6c:aa:
                    d0:ed:dc:a2:3a:fd:9e:8d:e1:e2:7b:86:51:2f:25:
                    e4:b6:81:02:e9:b9:62:66:46:07:af:2f:3b:8e:5d:
                    38:7c:a9:65:21:3c:da:0a:a7:03:97:d6:1a:c6:b1:
                    34:05:32:93:ce:b0:8a:96:67:78:cc:f2:e6:56:83:
                    64:b8:7f:77:a6:b0:4b:cc:07:61:9c:24:fb:09:d6:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:83:EB:E8:0D:7C:80:A4:8A:30:1F:3F:64:A7:5A:58:45:69:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a158ab-0e71-33fe-b261-33b1c96d4098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:da:58:ed:1c:ee:98:b7:60:07:5c:fc:7e:3b:14:c2:4a:58:
         bc:8c:b9:24:12:4c:59:f8:9f:6f:a7:da:bf:36:ba:fe:fd:ce:
         b4:1c:14:d5:82:4f:df:fa:03:cd:9e:08:e3:8d:6e:af:71:98:
         8e:55:f4:7c:fa:d5:07:e5:90:9d:f4:2f:9e:26:ca:af:c7:dd:
         dc:73:c8:dd:b9:20:64:5d:b1:1e:18:31:f6:19:00:55:ae:6d:
         f2:a7:cb:f8:09:08:92:f8:58:08:10:ff:73:07:a3:7f:92:3d:
         b7:a3:2c:eb:da:ff:85:56:c3:c5:04:63:8a:0c:d4:0a:2c:0d:
         18:5c:c8:2f:5e:fc:5e:ad:96:51:01:ca:94:f8:08:4e:0e:78:
         ef:fa:c0:28:d1:d1:d7:38:83:f7:09:0a:bf:ca:72:da:9d:18:
         46:6f:8e:79:2d:0f:c5:fd:8b:56:a9:cd:2e:2b:c1:cc:ec:0f:
         b4:bc:f5:6b:ac:3e:76:e0:0c:c2:af:b4:07:8b:5d:cd:28:4a:
         de:fd:21:41:b7:71:14:51:05:15:8e:fa:e4:2d:6b:2f:a8:e3:
         fa:c5:6f:5e:77:13:c9:4f:44:16:e6:58:a4:a3:57:04:fd:ce:
         01:85:e3:7d:08:5a:fb:57:ac:23:28:2f:15:a0:07:a6:ea:28:
         3c:67:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:25 2025 by rpki-client