Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57339759-da9d-3531-ba0a-2bc76f28249e.roa
File:                     57339759-da9d-3531-ba0a-2bc76f28249e.roa (raw, json)
Hash identifier:          i/ohJ/0sLYKCkKSgAQdCJukbYUrFwqVt8fI9+9aerek=
Subject key identifier:   A5:59:03:78:0C:5B:B1:85:63:9A:48:80:8A:B5:A0:5D:36:76:56:2A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B90E72AE3FDF8A03AC9C3600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57339759-da9d-3531-ba0a-2bc76f28249e.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        71.143.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b9:0e:72:ae:3f:df:8a:03:ac:9c:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=4302f3be-7e1d-4f1d-972d-5a18e77433a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:3a:0c:df:d0:ae:f3:87:34:9e:35:fd:01:
                    2b:98:11:e0:03:cf:67:98:30:57:88:d6:9c:eb:98:
                    e5:3b:fd:48:22:5b:99:62:fc:52:0e:a2:1b:51:4b:
                    06:2b:ce:83:e9:60:6f:ed:d9:aa:e8:ee:e4:79:d4:
                    e4:54:31:8a:2d:de:b8:c9:d8:8c:3c:7f:8d:b1:12:
                    2a:77:09:c6:ff:31:f2:2b:f1:2d:9b:74:9a:dc:4c:
                    c1:6b:f8:e1:24:8c:c6:59:71:b8:73:e4:f6:77:b1:
                    0a:b5:73:0f:98:76:1e:88:da:99:56:c6:06:73:a9:
                    d2:14:12:48:11:5e:99:72:fc:66:ea:bf:04:1d:a3:
                    c4:6d:0f:f4:e9:85:28:85:88:a0:2b:f4:32:6f:ae:
                    58:e3:64:42:3d:e7:74:0d:98:e5:f0:2d:3b:44:17:
                    1a:9a:3b:9b:e9:f6:ca:f0:9b:e1:b7:5f:69:40:d9:
                    bc:7f:43:7c:b8:bc:69:f7:fc:a9:85:51:6f:4a:69:
                    9a:35:e2:26:f6:57:21:de:37:2b:dc:b4:4d:08:2b:
                    7f:c3:90:87:52:26:ef:8f:77:8a:d0:15:a0:36:48:
                    8f:3b:84:24:ab:6e:41:77:99:f3:31:a6:a3:1e:09:
                    48:c1:48:a9:f9:9c:02:27:e0:df:d3:4a:f1:f1:67:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:59:03:78:0C:5B:B1:85:63:9A:48:80:8A:B5:A0:5D:36:76:56:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57339759-da9d-3531-ba0a-2bc76f28249e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.143.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:db:66:52:4e:a9:d1:3b:b3:d3:39:82:22:bb:71:75:60:
         3e:b0:e9:c2:5d:21:c1:86:d3:3e:77:44:d1:25:d3:f8:e7:ab:
         1f:f1:d1:b6:04:73:b4:2d:63:ba:dc:d3:53:fe:23:d2:4e:d2:
         f0:77:61:8f:9b:b0:73:21:be:1b:01:8c:72:90:fb:9a:b3:db:
         26:b3:c6:c2:45:55:8e:de:49:35:c5:7f:3a:6f:38:3c:94:16:
         ca:d9:a5:c3:25:d0:f0:67:d2:91:9d:ba:1d:9a:94:54:aa:4f:
         49:0b:e1:1d:9c:17:e0:61:b9:d9:36:d8:98:09:d4:ea:24:2a:
         f3:6c:c4:be:31:06:c7:57:ca:b5:34:6a:a0:7d:10:ac:56:15:
         d4:74:32:3e:cf:62:b7:8f:76:de:34:cc:54:31:6c:8b:d5:c4:
         47:f4:e9:4c:8b:87:d5:d8:ee:f8:2b:7c:99:d6:92:d9:3a:09:
         30:20:e6:76:7f:8c:9d:37:8e:d9:09:e3:1d:1c:82:cd:e6:a4:
         77:10:e9:a8:7c:6a:2a:3a:00:2d:9b:59:6d:9a:62:75:bb:ee:
         19:46:a2:26:5e:30:da:00:57:05:9f:52:76:88:aa:3a:b1:79:
         fa:d0:31:7d:fd:09:4e:77:51:4e:d7:ef:49:71:a0:62:e4:37:
         25:44:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:53 2025 by rpki-client