Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c238c53-ad01-341d-86f7-4318c8713630.roa
File:                     4c238c53-ad01-341d-86f7-4318c8713630.roa (raw, json)
Hash identifier:          mP5SizqYBnpaL09uEi6Ms8asrF1BYMzMNXcZl0A8SQU=
Subject key identifier:   8C:E3:31:4E:17:ED:CE:5E:4C:8E:9A:31:77:78:75:A1:E1:C9:DA:73
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4B8EA7C75BC006AB0D78A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c238c53-ad01-341d-86f7-4318c8713630.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        70.232.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:b8:ea:7c:75:bc:00:6a:b0:d7:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=730c3240-04e0-4f18-bf69-f2897185fb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:6d:cd:1f:06:37:b9:b3:ce:c2:85:a6:bc:
                    0e:3d:45:5c:8e:c8:87:fa:b6:ab:ff:24:7b:f4:9f:
                    a3:8d:62:08:83:3c:46:d8:ae:27:4b:69:65:16:09:
                    fb:08:d7:98:75:e3:3f:32:39:35:8f:ae:a1:39:4d:
                    9f:79:70:c7:06:28:41:3d:27:6b:88:c3:d4:d5:09:
                    7b:bd:c0:4e:cb:62:31:00:a3:ef:b4:19:74:94:3f:
                    e3:65:84:9f:52:08:7a:9e:57:dc:02:8a:a5:3b:dd:
                    04:6c:ff:97:b6:02:16:bd:79:e4:84:da:b5:7b:90:
                    c9:e5:d6:6d:33:ff:53:af:4b:6c:3f:47:f5:41:a7:
                    e2:b3:1a:43:5e:41:7a:e7:86:f9:45:fa:0f:a5:7a:
                    86:6a:f0:41:21:66:71:14:a0:07:61:77:d1:de:8c:
                    de:57:e8:5f:37:62:d0:b0:f3:a3:28:54:98:1f:f2:
                    31:8a:04:a0:94:15:d1:a6:b1:88:87:e6:73:7f:a6:
                    de:d3:a7:6d:24:32:80:68:b9:f1:17:48:73:69:6e:
                    05:93:17:d6:5e:86:c8:32:77:20:cc:ba:37:21:f7:
                    d0:81:0e:95:26:c5:5e:77:44:9f:13:2c:87:46:cc:
                    60:4d:72:7d:ac:d8:6c:02:c4:34:43:0d:00:bd:ed:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E3:31:4E:17:ED:CE:5E:4C:8E:9A:31:77:78:75:A1:E1:C9:DA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c238c53-ad01-341d-86f7-4318c8713630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:eb:09:cc:0c:df:cb:60:63:1b:03:be:99:9e:c3:82:85:
         56:fe:73:cb:2c:3d:68:69:10:5d:03:0e:ae:cc:a4:71:b5:14:
         a0:1b:2a:ea:64:2c:52:d4:38:d4:29:b5:b0:d0:58:8f:a8:6c:
         57:f2:d8:45:61:fe:c0:27:2c:18:6e:0c:97:dc:d3:79:fe:5a:
         0f:e1:52:b7:c0:4f:e4:f0:24:69:96:fe:df:f4:7e:6e:56:b1:
         aa:be:0c:c7:58:91:38:6a:94:60:3a:7d:69:82:e4:26:a6:ea:
         8a:ee:c9:89:07:98:fa:44:d2:08:b3:05:2b:eb:18:e9:c2:51:
         e2:89:d6:de:df:95:9e:06:ff:f3:1f:29:dc:bb:3c:de:a9:7a:
         0a:4b:1c:14:aa:be:49:63:b1:f3:68:18:24:c3:7e:92:d5:c6:
         20:d9:fb:af:3f:e6:79:b1:8c:44:e2:e9:25:1b:05:72:8f:07:
         b7:0c:48:5a:e9:6d:d2:d5:31:f8:3f:fe:69:bc:68:76:24:72:
         05:c0:2c:ea:fd:b8:cb:2c:98:dc:1f:ca:96:91:ea:67:47:a9:
         f3:ae:83:0c:4e:cc:29:5f:23:31:58:65:6c:87:1f:47:d2:11:
         0b:a2:24:c2:5b:28:cf:a8:93:34:b7:ed:cc:5c:3b:de:93:ca:
         ae:48:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:41 2025 by rpki-client