Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bb7110f-2d60-39c7-8163-1e6f1d9e9a00.roa
File:                     4bb7110f-2d60-39c7-8163-1e6f1d9e9a00.roa (raw, json)
Hash identifier:          p+S8ylDfYZG4uk1he6MRl+Ko3Q2urnM2TVr5PVDrqPM=
Subject key identifier:   8E:72:5E:4F:0E:FE:AB:98:28:2B:B0:71:31:EF:79:4C:58:2D:D9:F7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F59D23C1F5EE275B095B74500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bb7110f-2d60-39c7-8163-1e6f1d9e9a00.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:d2:3c:1f:5e:e2:75:b0:95:b7:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=b36d9927-d55c-4c5c-b953-fc33c946e013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:80:cd:9e:0e:8c:df:62:5d:bc:ac:d6:cb:
                    d2:9a:d6:65:bc:2c:51:ff:87:4c:ea:b9:6a:c3:7a:
                    69:d8:61:e1:ec:31:0e:e6:aa:81:7b:67:b0:9a:89:
                    8a:cd:19:13:a4:49:0b:27:49:cb:c1:a0:33:7d:d9:
                    89:df:01:40:5f:86:7b:5c:08:1a:29:35:ac:b3:0d:
                    4d:c0:32:6a:ef:29:f7:af:eb:d7:2c:b3:d2:0b:81:
                    a5:13:2a:22:23:df:e9:02:a6:87:cf:f9:39:f2:3a:
                    ad:46:76:29:f2:35:2b:8d:19:5e:4d:72:b3:d9:ab:
                    06:3b:5e:5e:ae:0b:64:52:f8:31:fe:75:41:32:ac:
                    dc:6f:47:a5:bf:67:3f:be:00:2e:00:63:45:b9:fe:
                    2f:94:45:de:07:d4:e2:ef:38:75:39:f0:50:80:b6:
                    f7:b9:de:91:39:43:20:d0:1d:94:4e:08:a8:2f:b7:
                    b4:f1:15:36:61:b5:89:30:35:35:55:bc:3a:70:f4:
                    33:c6:b4:a5:2e:44:55:6b:8b:e2:44:82:6c:8e:6b:
                    ca:7e:bc:c5:53:64:34:e8:e6:f4:db:e7:7e:f1:f3:
                    a0:33:2a:9c:06:28:39:1f:2f:6a:03:54:37:40:d1:
                    72:4b:a6:ac:82:6e:8d:72:ea:c7:bb:c4:d6:5a:73:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:5E:4F:0E:FE:AB:98:28:2B:B0:71:31:EF:79:4C:58:2D:D9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bb7110f-2d60-39c7-8163-1e6f1d9e9a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:a4:0d:17:e3:71:b5:b3:90:78:c4:52:e8:93:86:8c:f6:
         a4:6f:9a:27:a9:59:e5:b6:a9:fa:35:af:d0:ca:45:f4:57:1f:
         f6:8f:a4:1c:84:e0:0e:bd:5b:e1:52:b4:d8:32:b0:59:9b:01:
         78:45:13:27:d3:fd:e0:05:15:b7:46:e0:16:24:80:4f:2e:e5:
         9c:6a:48:c8:dd:52:d5:c1:7c:f0:ba:3c:ec:20:d4:b9:3e:16:
         c0:99:c9:52:04:95:f4:76:75:f1:b4:a8:2a:20:89:e0:e3:a9:
         c1:fb:20:20:27:b1:da:8c:fc:e8:6a:d5:0f:ae:3a:81:33:4c:
         25:5f:41:e5:b8:e6:4a:f8:8a:6c:55:7a:dc:5b:4a:bb:b0:8c:
         ca:ea:a8:06:6a:12:10:0a:e7:6d:49:dc:e8:5b:b7:03:33:3b:
         11:b9:a2:e4:90:b0:6b:bb:29:a7:b0:90:1f:dd:a1:6a:c5:66:
         fa:dc:01:bc:24:58:a8:a4:c7:7b:1c:08:ce:47:30:14:cb:1d:
         2a:e8:7c:ad:ad:dc:21:34:ea:68:5c:33:24:e1:b5:9f:cd:31:
         12:db:9d:14:2f:6a:9f:84:69:5a:d7:9a:4a:25:53:a1:a0:ec:
         19:51:95:b0:0c:a4:62:f0:d0:d1:28:f4:0f:17:0d:a8:17:82:
         81:df:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:35 2025 by rpki-client