Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/581573b5-ccc5-3209-9f45-2ba2ce7f7f78.roa
File:                     581573b5-ccc5-3209-9f45-2ba2ce7f7f78.roa (raw, json)
Hash identifier:          IMhgNZJ6A/CDDJY/Rf4V9QWscauE0Tz+dJJEeqOxVcs=
Subject key identifier:   A4:A2:E0:8B:15:3B:47:BF:11:A2:A2:88:74:3D:8F:17:24:03:76:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A08F1A844B0BD169ADB45C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/581573b5-ccc5-3209-9f45-2ba2ce7f7f78.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        71.141.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:08:f1:a8:44:b0:bd:16:9a:db:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=0d170e6a-2c35-469a-8c00-fa2d0315f96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:99:1b:e1:8e:ec:8c:df:c0:50:72:f8:7d:
                    4c:74:c6:58:98:f4:41:a9:43:94:bf:14:1a:84:0d:
                    59:4e:8a:f3:5c:24:93:25:8c:91:51:8f:2b:db:a1:
                    e2:eb:0c:42:1d:d0:73:a5:24:a2:ec:03:17:e4:5a:
                    90:c6:79:2b:a8:2f:00:47:99:4b:ed:af:ef:a6:fd:
                    ed:12:78:a5:95:8c:7f:80:f8:1c:94:26:c0:bc:50:
                    eb:1e:1b:43:88:ee:b4:01:94:66:76:62:ed:a4:0a:
                    0f:cb:19:6a:b0:bf:94:45:98:34:63:88:7d:37:70:
                    b2:9c:16:4e:1c:c5:69:ec:ea:17:ae:63:cb:68:93:
                    c5:0d:09:d2:d7:bf:62:cd:79:f3:f0:3c:3d:30:09:
                    dc:43:7f:91:b7:d9:68:0b:95:c7:51:37:54:95:57:
                    51:39:81:2c:27:97:80:c1:c5:b8:46:54:54:20:fd:
                    e6:45:24:a9:81:c4:7f:0d:87:26:e2:ec:f8:62:60:
                    9b:4a:65:da:2c:a9:43:54:61:d5:4a:dd:a4:94:a1:
                    8d:05:11:86:30:56:02:2e:cd:7e:61:53:ac:20:5e:
                    43:5f:f6:ca:f5:a4:2e:0e:df:47:3a:e2:9f:93:2b:
                    45:e2:55:7f:6e:90:6b:2c:f0:44:b3:c7:37:64:fc:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:E0:8B:15:3B:47:BF:11:A2:A2:88:74:3D:8F:17:24:03:76:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/581573b5-ccc5-3209-9f45-2ba2ce7f7f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:98:9a:96:1a:0c:aa:c4:c0:a8:2c:03:17:fa:1d:a9:50:
         2a:28:f7:48:7c:9b:b4:f9:e4:4e:ab:ee:80:3a:a1:cf:e4:d2:
         9f:ed:3f:63:0c:a1:03:71:88:77:19:9f:cf:02:ba:7c:5d:d8:
         81:4c:d0:ee:d5:4b:a4:04:87:77:23:01:22:16:12:e3:b1:16:
         fb:f1:63:32:b1:a0:84:17:7f:4e:c1:cf:47:df:70:f0:48:57:
         bf:0d:d0:41:73:bf:ce:f8:c3:6f:52:03:5b:3f:17:d8:85:9c:
         2b:95:82:b6:1e:e0:0a:0f:72:d8:88:a1:13:16:aa:82:ce:18:
         c1:c7:28:83:8f:64:70:7e:c7:2f:c5:23:e0:dc:9c:ed:ec:ee:
         19:9f:6d:b8:5e:c1:3a:9d:fa:a9:75:e1:7e:53:c0:b4:25:67:
         24:83:f6:23:e1:e7:40:64:39:3f:94:65:c9:16:39:df:78:29:
         49:a6:1e:4a:b5:a7:9d:4c:7d:a4:d9:48:67:4a:a6:63:dc:92:
         4b:29:c7:0f:42:1d:ae:c6:da:6e:03:16:d1:2d:77:e9:0f:a9:
         87:e0:6a:4f:be:9b:f5:ef:3e:ed:c4:65:ad:30:a6:30:e9:69:
         8e:c1:96:39:db:2b:60:f8:59:15:59:9d:b6:86:cd:ca:cb:25:
         99:f9:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:29 2025 by rpki-client