Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a43c760-ff63-3207-ae66-94446fa39de2.roa
File:                     4a43c760-ff63-3207-ae66-94446fa39de2.roa (raw, json)
Hash identifier:          VRyfFJ5zAzrC/0+IiT08DTqqLqFETSeV0e1JMw+91P8=
Subject key identifier:   91:F1:A4:77:6C:4B:58:F0:FA:84:59:25:A2:CF:7D:9D:57:AA:3E:70
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8125ADCF3FDE46A9E9DDAB60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a43c760-ff63-3207-ae66-94446fa39de2.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        72.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:25:ad:cf:3f:de:46:a9:e9:dd:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=b7c39061-3758-408c-bc72-38b208fc0ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:88:ea:a4:33:31:e0:92:f0:12:59:91:9c:
                    ca:82:85:29:9f:5e:57:4e:1a:24:a8:89:01:09:aa:
                    a4:8b:4e:60:0d:36:32:38:76:ef:e5:d5:52:e0:03:
                    5e:6c:8f:ba:3f:c7:8a:59:4b:44:b5:f8:42:a5:18:
                    9a:d9:02:50:61:03:4d:b7:14:49:e6:25:e6:d5:2f:
                    64:dc:af:07:2e:33:22:47:14:7a:a2:c4:25:09:30:
                    fd:ab:56:3e:dd:3f:a4:12:16:fe:45:58:91:93:fd:
                    34:11:f5:f6:c1:b8:bf:28:36:e1:9e:94:77:01:12:
                    d0:fb:cb:38:a1:b8:50:e7:24:ba:15:7a:72:4c:93:
                    a5:20:01:fe:cb:70:34:8d:33:f5:22:25:87:6d:17:
                    31:f5:40:14:c7:01:19:aa:cf:c3:43:0d:e4:9e:dc:
                    d2:b7:ab:4b:8e:0a:2b:30:5d:1d:17:b5:ac:ea:d2:
                    60:e5:94:90:02:2f:cf:84:76:b7:f9:0b:d9:52:44:
                    8f:8f:ae:11:46:4b:76:86:a6:bc:4c:9c:79:90:0f:
                    c0:bb:62:09:b4:83:20:1d:ef:27:b2:60:7e:c3:e9:
                    f5:02:ae:ca:2b:25:8c:44:cb:81:10:8b:50:17:30:
                    b8:0d:08:c8:69:b9:96:51:dc:08:6d:17:51:f8:88:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F1:A4:77:6C:4B:58:F0:FA:84:59:25:A2:CF:7D:9D:57:AA:3E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a43c760-ff63-3207-ae66-94446fa39de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:01:fe:d7:1b:0d:8f:53:03:21:fc:16:7f:63:0a:23:a5:
         f0:6a:ba:1b:6a:b9:5f:aa:23:b7:94:a9:b3:7d:8f:4c:84:4c:
         8d:de:4f:66:41:c0:ca:fe:76:d6:47:f2:6b:a7:63:be:96:3b:
         5b:4a:12:84:9b:63:d7:48:52:e3:d1:9e:11:bf:1d:cc:99:6c:
         c2:ed:a4:b8:e5:de:d3:4a:c6:4b:02:a1:9f:52:81:8a:cd:d1:
         cb:68:1c:cb:63:a9:9a:8d:9c:26:70:42:b0:77:a9:49:c8:62:
         06:e6:07:ac:50:db:b9:59:ca:1e:23:ed:f1:2f:98:17:11:1e:
         52:1a:44:bc:f7:33:52:17:e9:a2:ed:e7:cb:a4:22:ff:40:1f:
         b1:33:83:5e:c2:b6:e5:35:89:e9:04:6d:c7:06:1f:98:a4:59:
         0f:00:17:f8:ea:35:b9:d8:52:67:26:3e:b1:ff:40:26:16:d3:
         0e:7a:c9:8a:df:d9:54:06:a5:9c:f6:c5:76:ef:f5:b5:84:3f:
         24:97:33:92:7c:4f:76:cd:16:b4:24:4a:0b:ff:b4:3c:04:47:
         e9:49:8a:4a:d0:66:4c:90:bf:84:b6:6c:0b:7d:2b:74:71:3e:
         4b:90:bd:e6:34:86:46:6a:8d:08:bf:84:37:74:47:d3:ad:75:
         62:ec:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:32 2025 by rpki-client