Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6494184f-8e1f-3404-82fa-c0a682df57a7.roa
File:                     6494184f-8e1f-3404-82fa-c0a682df57a7.roa (raw, json)
Hash identifier:          Df/Y42xrxR+T9NezxQaIhXgmGO+/of2bdmIX43JWZqk=
Subject key identifier:   59:67:4A:49:7A:64:DF:F9:49:F2:01:F2:2A:97:28:7E:61:EC:F9:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404120D79959F38D5B0E2FAC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6494184f-8e1f-3404-82fa-c0a682df57a7.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        76.205.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:20:d7:99:59:f3:8d:5b:0e:2f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=dbaf0c11-de2b-4e78-b843-63e5421eb62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:7c:d3:2a:db:0f:95:95:11:17:e3:48:4b:
                    f9:f4:a8:89:5f:4e:aa:bd:bc:e4:75:1c:25:aa:c4:
                    e9:13:94:88:fb:66:54:6f:e6:66:ca:bc:0f:5c:09:
                    a3:c8:80:1f:33:a6:a7:ef:2f:ce:6b:57:bb:32:ef:
                    86:46:74:45:a4:cf:73:4a:43:a4:b2:e9:f0:c3:18:
                    14:49:46:f8:d3:46:b2:5b:0e:23:91:63:07:2e:ba:
                    5b:23:ad:ec:b1:52:28:b8:45:b9:55:da:78:f7:30:
                    92:8f:6d:49:b2:7a:55:79:a7:e5:c4:4c:79:49:b3:
                    2f:8b:fc:f6:54:2c:bd:f5:04:1e:d8:0d:14:93:9d:
                    52:5b:f2:cb:0a:6b:9f:7a:c1:2a:90:70:b6:79:77:
                    b8:e4:e8:02:6c:89:00:7a:3d:41:00:4a:7a:80:99:
                    4a:79:68:cf:03:78:24:f9:db:90:ff:18:48:f7:e0:
                    8d:f9:1f:65:e4:88:52:87:1a:84:5f:0e:ef:ec:af:
                    3d:48:46:2a:56:d2:d8:ee:bd:46:73:9e:1f:0f:05:
                    a5:1d:63:c4:e3:22:ad:b9:c4:11:8a:8e:fd:d2:6e:
                    24:4b:fa:91:a8:fd:10:4b:af:2f:40:89:bb:b3:4a:
                    c8:17:d4:c3:ad:54:d7:99:dc:15:0e:67:09:1b:b6:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:67:4A:49:7A:64:DF:F9:49:F2:01:F2:2A:97:28:7E:61:EC:F9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6494184f-8e1f-3404-82fa-c0a682df57a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.205.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:d9:f1:6f:09:6f:3d:2b:0b:7f:a8:92:96:95:ee:56:77:
         70:fb:f0:a5:14:de:09:2b:03:a9:d1:4f:10:b7:5b:5b:0d:78:
         af:ba:8d:6a:37:66:bb:ce:ee:30:8b:bf:4b:80:dd:b9:9a:1d:
         b6:6e:11:a4:65:9d:97:98:a4:15:d3:bf:36:46:60:90:16:10:
         97:f1:fa:56:63:2e:73:6c:fc:59:09:50:3f:a7:10:a4:24:4c:
         90:8b:24:7a:48:83:c1:ff:a1:9a:79:20:6c:a1:f2:a3:aa:f0:
         85:86:8a:69:ed:6a:72:51:de:46:ab:b7:ca:b7:8d:6c:92:31:
         a0:66:67:9f:c2:9c:24:b2:0d:b2:8d:e3:b0:7b:1a:62:fb:41:
         2a:9f:4c:50:ce:aa:9a:82:ba:74:c7:5a:3d:54:30:dc:8a:ec:
         84:1e:53:d6:ff:2e:01:d2:9e:db:33:52:e6:e6:c2:c5:cc:5a:
         40:fd:bd:ca:1c:3f:07:00:36:0d:68:5d:3f:8f:76:bf:5f:1e:
         3d:d0:28:6e:6d:d1:6c:78:2e:44:ac:78:7f:3a:ea:17:95:de:
         0c:5b:6a:4b:16:81:a8:6f:ac:2c:d4:6e:b9:40:88:4e:68:bb:
         e9:c4:ea:97:77:fb:dd:01:5a:e2:85:d9:70:a0:7e:d7:ad:a4:
         b9:ed:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:51 2025 by rpki-client