Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c7d985c-55d2-3e14-a530-81c59e7c9188.roa
File:                     5c7d985c-55d2-3e14-a530-81c59e7c9188.roa (raw, json)
Hash identifier:          /bGw66SYM13vPnA93JIUDVoh8JmUza95o08x7uaq2OY=
Subject key identifier:   96:F9:CE:6F:B7:16:05:F2:95:50:3B:58:7E:70:9C:B9:42:51:3A:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCF48DDB622F9D8D4AAD86F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c7d985c-55d2-3e14-a530-81c59e7c9188.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        67.220.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:48:dd:b6:22:f9:d8:d4:aa:d8:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=c5e83356-cfd4-4caf-afa2-2742ab14323c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:ae:58:d7:ed:75:fb:25:ef:33:4d:c4:df:
                    89:e6:7d:10:99:c6:ca:5a:85:14:55:a6:9e:07:fd:
                    c4:a4:a3:ec:ea:1b:a8:92:13:4b:9c:6e:ee:16:be:
                    b9:5d:47:32:47:5b:45:85:83:88:9b:50:ac:b1:77:
                    79:42:2b:4a:2b:47:81:21:95:f1:9e:98:22:71:c0:
                    69:27:3a:d0:41:8f:93:f3:68:00:42:83:34:35:14:
                    d4:6d:1a:b9:0b:61:53:a5:73:cf:1a:13:29:c2:ed:
                    15:c4:68:67:49:e6:58:29:82:2f:f2:45:5e:ef:7c:
                    3a:78:15:42:83:4a:9a:12:7b:ad:bb:33:b9:c5:88:
                    4f:7f:82:c1:c8:59:83:8c:ac:1b:d6:23:b6:ae:96:
                    35:9d:4b:82:88:d6:2e:9b:a1:8e:56:a2:f7:b2:3a:
                    a3:e6:a5:0a:ae:a7:e2:3a:a5:4b:c7:27:9f:ba:00:
                    3d:64:97:f0:61:d7:c6:6f:cf:db:68:c0:cc:73:9e:
                    f7:9b:48:80:cd:2f:c1:7c:2d:ae:bc:9f:fd:4a:1e:
                    2f:b8:29:b4:f3:e7:40:19:00:50:6d:79:56:3d:8f:
                    50:7f:ff:d9:20:56:45:22:b1:30:58:f2:c9:0c:ad:
                    3e:d8:88:b4:50:ad:91:0a:2a:38:83:db:b3:49:01:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:CE:6F:B7:16:05:F2:95:50:3B:58:7E:70:9C:B9:42:51:3A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c7d985c-55d2-3e14-a530-81c59e7c9188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:fa:53:d6:0f:e5:cd:07:df:dd:23:e4:98:c0:b9:5e:e1:
         5f:e9:bd:c6:6f:9f:36:57:ab:42:84:3b:1e:a2:db:21:30:27:
         8b:9b:97:de:b8:11:93:95:79:05:47:4f:9c:bf:c4:c7:46:ae:
         60:f2:fb:46:b5:fa:60:46:fd:a9:0a:7e:a1:38:46:a1:b6:03:
         48:75:a2:0e:2c:67:6d:f8:ef:c5:ce:80:01:08:7e:d2:e1:29:
         f0:a8:90:aa:03:22:97:31:0c:ae:fa:5a:e0:ef:b4:d5:08:50:
         2a:d0:e1:30:20:01:07:98:91:1d:6b:a4:e3:95:01:c1:40:79:
         ca:ee:80:1f:b0:d9:b7:3a:df:a9:a9:ee:fb:c9:10:b2:a6:1c:
         05:c2:21:2f:61:ff:40:98:a0:b2:8f:e8:bb:06:92:67:61:f6:
         4d:68:9b:75:58:95:8b:9d:83:81:bb:82:c0:9e:11:42:e8:cf:
         08:6d:ba:52:f2:ae:42:8e:3d:0a:2a:75:a8:5d:c0:e5:e4:64:
         96:0a:e1:9f:85:88:be:17:e4:7b:dd:96:f4:b0:19:8d:00:7b:
         c4:5e:4c:4e:0d:42:03:f5:e9:97:85:66:cb:3c:de:9d:a3:e0:
         56:15:e9:d7:b0:fe:99:17:02:df:3c:39:03:77:9e:56:17:37:
         89:73:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:43 2025 by rpki-client