Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e65ae58-118f-3154-97d7-e306f97b0733.roa
File:                     5e65ae58-118f-3154-97d7-e306f97b0733.roa (raw, json)
Hash identifier:          gcIwLUQa/4GsTH8TK+JqoUXrvyYO241NJX4ePgrEk6Y=
Subject key identifier:   E1:B2:C3:42:6B:22:90:CC:45:9C:08:A3:30:C3:A1:39:F1:3D:D9:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96610B62F61B059667C28CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e65ae58-118f-3154-97d7-e306f97b0733.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        67.202.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:61:0b:62:f6:1b:05:96:67:c2:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=cd70d013-8d3c-4c28-89c4-e25f54c4c54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:eb:6a:09:c8:34:de:27:0c:20:a5:d1:5d:
                    49:9b:80:51:bc:5b:f8:a3:e1:f8:68:c3:43:59:f7:
                    50:be:1a:89:f5:fa:99:3b:d8:47:61:5d:40:1d:be:
                    6c:95:ec:9f:48:9c:64:a5:d3:02:96:86:fa:e3:fc:
                    fb:83:24:9a:f5:25:7e:16:e1:16:ac:c0:2b:a0:29:
                    c7:99:9f:6f:e9:b5:72:27:b2:35:94:17:84:6d:06:
                    82:00:6e:4a:e4:75:02:1b:9d:63:a6:dc:ae:9e:08:
                    a9:42:77:8f:dd:68:e1:cc:97:f4:ea:62:3e:f1:9d:
                    be:07:b2:e4:7e:6b:82:41:93:37:bb:71:a2:78:ef:
                    58:2d:cf:a1:1a:3d:fb:bb:3b:39:9c:82:cd:5e:bd:
                    5f:b9:f3:80:1f:fa:1a:cc:36:2f:0d:69:53:57:5b:
                    64:9d:ef:67:af:ee:e0:b1:de:8a:22:65:a7:8c:ad:
                    31:1a:a4:57:9b:ce:f9:0a:14:a3:a8:b5:ca:6f:5c:
                    19:60:36:34:df:18:b1:87:bf:31:c3:7a:df:28:f8:
                    f1:57:9a:4f:c4:95:ec:00:3e:af:38:9c:f3:b5:85:
                    cb:08:10:03:bd:bb:8d:7d:41:b5:01:9f:ae:ab:27:
                    3e:58:09:2f:4d:56:93:70:66:35:58:06:d0:9d:82:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:C3:42:6B:22:90:CC:45:9C:08:A3:30:C3:A1:39:F1:3D:D9:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e65ae58-118f-3154-97d7-e306f97b0733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:95:31:2d:7b:fe:02:8f:d8:db:70:e9:ce:12:af:da:99:
         5c:ad:72:25:4d:b8:ea:80:b4:18:32:62:dc:d3:3f:86:a7:dd:
         a9:12:db:f7:b1:18:46:16:f0:27:e1:67:65:8c:66:ec:cc:a9:
         f5:ea:04:09:68:cd:85:72:c5:3b:e4:3e:2f:fc:3b:04:1e:99:
         82:89:48:78:fe:ce:c9:d2:72:4a:b0:6f:a9:bc:55:03:90:54:
         51:44:71:03:42:03:d3:a4:21:0a:0a:1b:5c:02:56:e9:e8:8e:
         80:19:25:ef:16:1c:d6:53:89:13:13:ac:d1:f6:51:97:46:67:
         53:e9:bc:66:72:12:0d:aa:1b:4a:b4:01:e4:8e:b8:b3:ae:b0:
         d8:3e:5a:14:2b:09:7c:73:11:a3:e0:2b:92:55:dd:a5:14:fb:
         54:a0:a5:28:ca:34:ff:11:64:ad:ed:53:8a:04:ad:0d:be:77:
         ee:b5:55:de:b5:d2:54:34:f0:cc:00:3d:b8:93:b2:c9:cb:e6:
         90:93:a2:ac:c7:90:48:68:6a:eb:b0:ba:4e:15:f1:d2:c5:2e:
         89:10:3c:2f:35:0e:79:13:e4:51:7a:ad:0d:e2:7b:ed:52:62:
         f6:47:22:a4:ab:88:32:d5:99:0c:c0:6e:4e:47:46:29:44:f2:
         df:3f:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:27 2025 by rpki-client