Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48df1a00-5ad3-3bb5-996d-d15fd9bac6f4.roa
File:                     48df1a00-5ad3-3bb5-996d-d15fd9bac6f4.roa (raw, json)
Hash identifier:          IVrPK6aBB8+mX/bAFQJACwSxq5LZb1YYYTnj2OT77Ho=
Subject key identifier:   40:67:FE:E2:D7:38:C2:92:E6:B3:EB:1B:1F:68:4A:F2:96:E3:32:B7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE3B202DDBAAC5A7795CCCFDC
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48df1a00-5ad3-3bb5-996d-d15fd9bac6f4.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:b2:02:dd:ba:ac:5a:77:95:cc:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=84d54bfb-0c8e-4c72-aa17-4efffbbefbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:de:39:2d:fc:7f:5c:8a:ee:3e:d7:1c:8a:
                    bb:53:fd:df:42:b6:49:38:04:0a:82:7a:70:2f:92:
                    ff:fc:ed:a4:7e:2d:2c:ec:f5:6f:d7:d7:e2:b2:fc:
                    6b:da:28:7c:a7:c0:a8:f6:8e:01:71:22:15:ff:44:
                    39:34:8e:04:bf:b8:75:6c:96:df:d3:89:cf:81:3c:
                    d3:bd:db:99:e4:dc:9a:fc:7d:7d:f6:cf:1d:5d:ca:
                    8b:0d:0c:02:da:c1:73:ca:e3:90:17:37:af:4a:7d:
                    28:13:82:88:e6:3c:a4:5b:88:97:83:06:61:ac:70:
                    cd:1c:51:4c:01:c0:a4:31:30:15:19:77:8d:2b:71:
                    13:bb:2e:f2:20:ad:2f:8b:a9:9f:f8:59:96:a5:33:
                    4a:da:ea:59:d5:7c:a2:de:1a:22:7d:13:b3:e7:ef:
                    a4:e4:70:22:99:8d:0b:c6:db:2b:d3:e9:0f:91:42:
                    20:78:5f:95:21:39:71:09:94:88:d6:b4:83:e5:7a:
                    27:a7:ec:12:6b:6f:fa:9a:f3:7e:79:0b:a7:63:fa:
                    77:81:e7:db:8c:90:f8:51:f9:2e:b2:49:c4:41:24:
                    cc:62:23:84:88:7c:f8:a8:d7:a6:3b:f7:b8:bf:f7:
                    ed:09:23:b3:2c:1d:fc:71:12:87:81:36:2d:dd:74:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:67:FE:E2:D7:38:C2:92:E6:B3:EB:1B:1F:68:4A:F2:96:E3:32:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48df1a00-5ad3-3bb5-996d-d15fd9bac6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:06:52:e7:6b:aa:43:39:45:3b:c7:db:89:3e:c0:ef:00:18:
         dc:ce:d4:42:42:33:bc:db:17:2f:5e:ce:26:ac:fe:e4:3a:32:
         60:e7:00:7a:ca:47:a1:63:75:3a:4a:7b:ff:18:a8:82:06:e2:
         4e:74:a0:3a:ae:76:f5:3a:06:38:53:b8:b2:33:06:8b:ee:c1:
         95:68:08:07:fc:6b:7b:dd:d7:f3:2d:e8:7f:f3:5f:cc:6c:f7:
         87:4d:82:7f:b0:05:26:dc:eb:44:81:e8:a5:97:61:ab:5e:f2:
         a4:cb:13:4b:1b:4d:62:94:02:a9:c0:ff:3a:7d:b3:8f:08:67:
         6b:83:78:40:55:c8:9c:d6:a2:13:bb:2e:2f:11:fc:b1:4f:97:
         b3:45:7c:17:88:65:d7:f7:4e:80:63:25:ee:c5:e8:ea:12:3f:
         b9:b6:bf:23:cb:ac:9a:dd:e2:a7:ba:42:52:6f:09:9a:6f:df:
         c7:b1:65:bf:f9:7e:fa:e4:d1:b5:78:4d:4e:29:29:2a:16:49:
         01:f3:f0:b7:5e:32:6e:6c:41:48:2b:88:fc:ca:e4:c3:5d:37:
         8c:6c:77:4e:31:c7:83:43:12:d0:76:40:2d:21:b8:65:b3:66:
         2b:04:ce:c6:c5:9a:a8:4b:c7:59:a8:c1:99:b6:49:03:56:7c:
         9a:f4:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:20 2025 by rpki-client