Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf28df2-a58d-3ec7-b52c-81e75a282dc6.roa
File:                     5bf28df2-a58d-3ec7-b52c-81e75a282dc6.roa (raw, json)
Hash identifier:          G3azcXr7pkhkT+y9/mCMF/1ZXHN0VO1FlvevvX2dyBI=
Subject key identifier:   E8:AD:EA:93:55:5F:20:DC:28:4C:B6:29:CC:DA:93:25:0C:F6:05:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA944D04BCDE86314F9CB9F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf28df2-a58d-3ec7-b52c-81e75a282dc6.roa
Signing time:             Sat 22 Oct 2022 12:00:00 +0000
ROA not before:           Sat 22 Oct 2022 12:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.224.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a9:44:d0:4b:cd:e8:63:14:f9:cb:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 22 12:00:00 2022 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=1bd7ced5-ee2b-4a2b-bc86-192c6fda83cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:49:cc:d0:27:d2:c9:f8:59:88:6f:51:2c:
                    c1:c1:f7:fa:1e:02:a0:8c:d1:4e:b5:33:64:3a:04:
                    be:04:30:66:ae:3e:16:23:fa:b9:f2:bd:ef:95:ba:
                    f7:2d:f1:b7:d1:10:de:96:b0:e9:3d:0d:ab:2b:f4:
                    8f:9c:a9:b4:31:7f:08:2b:0b:2d:b8:c7:20:14:81:
                    6d:45:94:ca:89:10:b9:a9:1e:57:91:2d:da:b4:5e:
                    c4:a6:90:6e:b3:f4:10:f2:df:6b:c5:a3:4d:18:db:
                    d0:50:53:ae:92:b5:f1:e1:7d:f0:1e:e5:34:21:28:
                    2e:85:d1:3f:c2:32:81:e1:5d:50:56:4c:94:e6:6f:
                    b0:36:9a:a2:bd:5f:8d:88:31:e6:e2:e3:c3:32:ca:
                    10:96:7d:e4:26:ff:46:de:48:f7:f2:36:a4:3e:3f:
                    a1:9e:38:41:43:9b:64:5a:90:2c:67:75:63:65:a3:
                    18:5b:4c:f8:d9:5b:53:cb:66:83:82:9a:65:05:1d:
                    ed:c4:b2:22:31:a8:e9:9f:47:9f:ed:c8:8a:03:0f:
                    ec:c0:9e:24:1d:e0:e5:08:8e:e8:c1:c0:30:13:84:
                    b8:4e:db:23:57:c7:03:c6:ce:2c:82:d7:ed:99:69:
                    e5:fa:89:c8:eb:1f:e1:71:13:99:88:e9:3e:2d:0c:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:EA:93:55:5F:20:DC:28:4C:B6:29:CC:DA:93:25:0C:F6:05:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5bf28df2-a58d-3ec7-b52c-81e75a282dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.224.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:69:41:04:44:ed:d1:ee:fd:64:db:7d:1c:5d:95:b6:4b:
         8c:7a:d1:55:bd:08:cf:85:49:b1:01:b6:f7:14:86:65:9b:05:
         64:e4:0f:32:2d:85:5d:42:00:74:1a:c8:ad:d3:df:57:9d:c0:
         ec:8f:f7:9d:8d:42:fc:c9:49:94:09:f5:34:4b:82:6e:7a:a7:
         aa:ca:83:8c:57:6f:b2:5a:39:75:ab:15:7b:dc:fb:a9:d5:59:
         b6:eb:f3:3a:cf:8a:b6:b8:f4:98:2e:22:c4:38:03:92:8e:5e:
         e9:c3:9d:4b:30:fb:2b:00:fe:29:8f:c0:f6:58:78:9d:be:16:
         c2:1f:5d:e9:72:ed:1e:8a:7b:7b:fd:95:68:26:46:a7:95:14:
         9a:b4:f2:10:50:77:b8:12:5d:a4:8b:09:b3:c6:c5:54:51:c4:
         ba:7d:09:87:b0:69:18:2c:6f:b3:83:20:af:9f:09:63:fc:fc:
         aa:44:32:6e:40:40:77:37:fd:f9:94:cc:61:67:65:ed:b0:51:
         8c:cd:f5:af:e4:bc:8b:59:97:a7:fe:0a:db:b5:a2:3f:9b:36:
         08:4f:b8:52:47:51:c0:db:4f:f1:9b:75:92:ac:11:52:1b:ad:
         04:06:6d:b0:04:71:61:c8:06:bc:4c:61:60:ab:34:5b:e4:12:
         78:50:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:33 2025 by rpki-client