Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dd4eecb-a5e7-3cd2-ab89-f9651eb89e35.roa
File:                     5dd4eecb-a5e7-3cd2-ab89-f9651eb89e35.roa (raw, json)
Hash identifier:          ofncEZ7nBN8EknA6uj8u6qyM+aiEg/xl1T3Z9Y2nosw=
Subject key identifier:   38:D3:77:90:10:A9:7F:28:BB:CA:35:4B:5B:4B:BB:29:6A:94:24:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBCD08B15F13A41EDAFD68F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dd4eecb-a5e7-3cd2-ab89-f9651eb89e35.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        70.237.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:d0:8b:15:f1:3a:41:ed:af:d6:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=1b69bb95-f67e-4461-8d07-6eb26f41c3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:cc:80:ef:22:03:47:e8:ba:e9:f8:53:96:
                    37:3c:96:0e:99:d5:1d:ab:67:8d:3a:6a:63:01:e6:
                    21:97:c7:dd:87:4b:2f:2d:af:67:be:b6:4a:55:b9:
                    fa:bc:a2:7b:cf:41:6a:12:35:3b:ff:98:c8:69:d5:
                    29:9c:19:7d:eb:36:07:4f:15:a1:59:87:82:9e:9f:
                    31:94:ab:c0:a7:41:b8:91:8f:68:be:b1:7d:47:d1:
                    b4:07:33:68:be:55:52:2b:55:58:5b:6f:c8:bd:5c:
                    33:66:5d:9c:a3:95:bc:2c:86:0b:45:27:d9:c9:fb:
                    da:27:35:f2:05:36:05:21:7a:9d:7c:d1:01:f1:8e:
                    4c:6d:e4:87:28:c0:c7:43:66:bc:58:20:b8:2d:07:
                    9a:14:82:03:8a:3c:03:94:c1:b7:78:a0:08:2a:6d:
                    03:7a:fb:07:97:b3:42:ae:63:d2:99:80:d0:d5:02:
                    6e:7a:c2:96:40:53:36:5d:f3:7c:d9:ea:a7:13:4f:
                    5d:62:cb:30:22:eb:2a:04:50:fc:5e:2d:67:94:db:
                    3e:77:3f:e7:9e:8f:19:db:6e:34:83:6c:63:36:cd:
                    d3:64:38:43:65:6f:b0:32:66:b7:6a:33:5d:a2:ad:
                    30:b6:f8:1a:8e:1c:b7:5c:4c:93:b9:bf:eb:30:b3:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:77:90:10:A9:7F:28:BB:CA:35:4B:5B:4B:BB:29:6A:94:24:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dd4eecb-a5e7-3cd2-ab89-f9651eb89e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.237.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:5e:01:ab:cd:ed:f5:50:bc:df:06:0d:fe:fd:94:4f:31:
         26:50:be:19:59:9d:a8:46:28:db:82:9e:83:8e:c0:cb:84:d2:
         c9:1f:cb:ab:73:b7:df:12:05:95:db:06:b7:94:6e:39:fd:47:
         04:38:17:ee:aa:54:a5:7c:b2:82:4b:27:5e:e1:af:15:f6:0e:
         86:c6:65:25:9e:50:85:43:e2:f3:50:34:90:04:10:e3:4e:a1:
         5d:db:83:88:79:be:15:25:b7:d2:11:dd:69:7e:d4:cf:d5:55:
         e8:46:75:a4:8f:bd:1b:23:25:1a:3f:f2:df:69:93:84:13:ec:
         73:19:a6:34:a6:77:3f:da:49:29:62:33:af:63:3e:98:10:0e:
         95:84:98:e3:43:90:65:b1:bf:07:80:80:a6:0c:df:df:89:af:
         e8:0c:53:26:ba:b2:fe:f0:91:0c:66:6a:f0:d2:86:19:fc:ba:
         39:1f:91:a5:a4:3d:f9:c0:c2:b4:3b:c5:94:73:f7:09:47:af:
         a7:a2:f0:10:de:9f:9a:c2:17:fd:f8:bb:7e:ed:51:37:9b:ec:
         91:a6:be:91:df:7d:40:3c:8d:02:31:e7:47:bf:8a:92:80:07:
         60:b1:54:b2:95:2c:7d:c8:e1:b5:33:1d:53:05:a0:d5:34:90:
         4c:94:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:57 2025 by rpki-client