Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/549076e4-d7f0-39a3-b085-8ffa4b85b30d.roa
File:                     549076e4-d7f0-39a3-b085-8ffa4b85b30d.roa (raw, json)
Hash identifier:          qrBsqwYSu2pfztIeYWmARBpNdmOxBiTTEOlkZYOmFCw=
Subject key identifier:   36:A7:D0:93:38:F1:23:53:69:97:22:02:D4:2C:9A:97:F2:79:AD:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4B1A92CFEB7B0ABD8E60040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/549076e4-d7f0-39a3-b085-8ffa4b85b30d.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:b1:a9:2c:fe:b7:b0:ab:d8:e6:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=1804d675-cc0f-4d00-80eb-ba0606d59037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:41:c2:18:33:c1:9f:73:aa:89:f2:a1:db:
                    de:c6:48:bb:de:4a:76:43:a0:f3:f0:bf:44:a5:99:
                    98:c3:c4:83:42:58:46:bb:49:36:ba:aa:c2:48:75:
                    66:71:4e:55:0d:f3:1b:08:2f:ea:e8:ef:66:ab:a9:
                    86:44:f9:c0:80:3f:f8:ce:7d:02:17:82:a0:17:43:
                    3a:b6:ea:86:46:f8:c9:54:ec:41:70:2c:f0:9a:87:
                    e5:91:c1:92:25:a0:30:c9:f2:b2:11:e1:76:1f:d0:
                    80:5b:c6:8e:c0:8e:c5:a9:23:ee:7e:34:66:ac:cd:
                    9e:75:4f:86:f4:07:9a:9c:ad:25:68:be:96:0f:51:
                    23:28:83:64:db:66:de:19:6e:b7:3a:d6:4f:02:29:
                    22:69:fa:20:ca:e5:76:f4:e6:6b:83:48:a3:c0:1c:
                    1c:2a:80:91:95:d0:12:c3:15:a2:5a:60:50:e0:8d:
                    2c:77:3d:12:f1:42:04:0a:d6:d2:c1:c9:41:c5:61:
                    96:0b:4d:ea:bd:7c:d9:7c:32:f9:16:a9:00:d1:91:
                    b2:67:ee:45:6c:9f:0c:c3:7d:53:e2:84:8c:2c:82:
                    db:23:98:46:40:a3:d1:a9:34:ba:45:4f:77:92:67:
                    59:4f:9f:e3:78:b7:60:eb:5e:59:53:0b:f2:6d:4b:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:D0:93:38:F1:23:53:69:97:22:02:D4:2C:9A:97:F2:79:AD:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/549076e4-d7f0-39a3-b085-8ffa4b85b30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7b:4c:6b:18:f8:3a:08:c6:6e:3b:fb:e4:66:e8:5a:68:48:
         2f:0d:23:cd:f4:72:96:cd:dc:ed:75:b3:c6:aa:bb:f2:56:9d:
         88:db:23:63:c2:b3:a8:65:fe:09:3d:7b:9a:81:65:66:0c:33:
         af:f0:79:c1:a5:5e:d0:62:b4:ad:10:0a:05:ff:ab:34:00:c3:
         41:89:05:71:be:0e:4b:30:3d:59:fd:45:a9:3c:6b:ab:09:35:
         ad:cb:c3:ff:5f:10:13:0d:43:db:86:31:de:90:b0:f7:c9:3a:
         0c:ae:c6:c5:47:93:fe:f8:9d:f1:01:57:fb:e2:a1:7f:fb:73:
         cf:e9:64:90:ab:ff:fe:13:92:38:55:50:7a:33:61:8b:b6:d5:
         3b:ab:e0:35:1c:5c:43:a0:5c:7f:63:71:b5:a2:9d:98:ce:36:
         21:a9:04:67:fc:65:54:3c:59:bd:16:64:d0:d2:7e:fc:7f:d3:
         93:34:a2:c3:37:69:f3:34:b1:4c:b3:b9:51:96:de:9b:7c:b3:
         76:d5:8f:c1:04:58:76:0c:82:e7:82:26:fe:53:aa:fd:63:7e:
         c3:0b:03:29:be:67:83:f4:45:ee:46:6c:af:70:7d:62:35:dc:
         77:24:a3:91:5d:76:6d:e9:59:cd:8a:fe:5b:89:b9:2a:0b:65:
         7b:94:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:17 2025 by rpki-client