Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48be7e22-a3fc-3127-aa89-5aade71c5ef3.roa
File:                     48be7e22-a3fc-3127-aa89-5aade71c5ef3.roa (raw, json)
Hash identifier:          f77F3hLc/F8Mnv73cGEwSu3NqEtfRsz9/w6G44mGWUY=
Subject key identifier:   96:22:EE:C5:E8:F3:C3:6C:28:92:29:1D:9C:2A:D3:FF:50:7C:BF:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CDBD28113963319681B575200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48be7e22-a3fc-3127-aa89-5aade71c5ef3.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     19047
IP address blocks:        70.130.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:d2:81:13:96:33:19:68:1b:57:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=47bbc594-b5ee-46d0-bdf7-4c77eafafb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:3d:fa:fb:fc:64:83:34:f6:66:bf:b4:54:
                    2c:b7:57:82:bf:6f:fd:27:1e:69:57:00:ad:04:5e:
                    26:d3:80:c5:ac:16:c6:22:a6:06:a3:69:4a:ca:9e:
                    d1:f9:e2:b9:45:cb:09:27:e7:38:13:b5:eb:37:34:
                    6b:0d:ed:ed:1f:f7:52:c0:ba:5a:12:56:20:f7:3f:
                    b1:e3:31:f7:3a:ba:7b:c4:54:3d:d4:c8:57:db:68:
                    e5:00:10:5d:6b:b4:e1:fe:cc:c1:08:0d:9b:a8:96:
                    ad:7e:80:aa:c3:00:64:95:e3:86:97:3a:0b:39:dc:
                    23:6e:00:17:34:8d:3a:cf:f2:04:2e:9d:bd:44:9e:
                    29:12:0e:29:79:ba:ec:d2:57:77:d2:34:5e:f4:97:
                    9c:d3:ce:91:99:66:e6:cc:59:ea:6b:39:18:5d:ea:
                    19:df:17:24:44:ab:a1:c1:aa:57:ef:87:99:b1:3b:
                    5a:23:4f:c9:a4:ad:08:b1:ae:a7:64:04:3e:eb:21:
                    b9:0f:26:4a:2c:fe:d3:69:c9:84:0b:15:b2:53:d0:
                    13:a9:3b:2a:23:75:61:d9:6b:a0:6e:f2:0c:49:9e:
                    8b:80:56:72:dc:74:88:49:c9:7e:7f:1a:41:1f:8a:
                    7d:d1:69:2a:cc:2d:27:dc:c8:34:10:58:ee:a5:6d:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:22:EE:C5:E8:F3:C3:6C:28:92:29:1D:9C:2A:D3:FF:50:7C:BF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48be7e22-a3fc-3127-aa89-5aade71c5ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:0c:2f:48:bb:65:78:3b:d5:0d:b3:12:bf:bb:43:3d:99:
         fa:8b:ff:3c:ab:6f:a5:66:60:66:c6:9f:48:ca:e0:c9:3d:e8:
         6c:92:b7:cc:26:5a:ec:cf:40:1d:96:e0:26:32:d6:ab:2f:d5:
         ec:81:fb:2e:ed:34:3c:2d:71:2b:33:4a:b8:17:f7:2c:8d:5e:
         8a:a3:6a:31:27:f8:f0:17:4f:ef:9d:5b:12:60:5f:a9:1d:fb:
         4f:38:a6:80:36:ae:6f:c5:fb:b8:da:4d:43:7b:59:4c:42:44:
         c7:25:26:65:8c:c5:9e:33:88:f5:d6:17:d2:f6:e8:91:d3:79:
         95:fe:95:f4:2b:27:cd:99:2d:50:1a:47:bd:cc:31:b7:4a:bb:
         09:60:a7:d6:28:35:84:4c:e7:ad:a7:30:6b:e2:e7:70:ec:1f:
         46:fd:e6:6f:8c:d3:d5:95:e8:e9:f3:ca:60:1f:9e:f3:56:99:
         62:a1:57:db:ba:50:67:1f:8d:35:df:9a:52:bd:5e:dc:fe:a5:
         34:0d:1b:1f:10:49:d0:69:33:d3:ed:1c:4a:6f:74:97:16:94:
         81:e0:b7:04:ed:90:4c:51:3c:c4:63:65:1a:d4:db:cc:98:7e:
         a5:66:3b:00:fc:2c:98:9d:40:06:b5:04:53:87:53:c0:fe:5b:
         3d:10:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:13 2025 by rpki-client