Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b96fb5-c93b-38af-86e8-8a984842422c.roa
File:                     67b96fb5-c93b-38af-86e8-8a984842422c.roa (raw, json)
Hash identifier:          AMGkWSpTKEb4g46pGcF9mXpLt6ODxgpRdrMWnDCZo+4=
Subject key identifier:   72:F3:CB:8F:8B:3D:56:8B:72:98:A8:75:F8:CC:35:72:A8:7F:DC:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE131C98B1334E6DA5242480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b96fb5-c93b-38af-86e8-8a984842422c.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        184.72.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:13:1c:98:b1:33:4e:6d:a5:24:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=9e52c126-e772-4aca-b42e-0ee5f39a78fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:e6:25:ef:a3:37:a8:81:e2:24:4e:f7:50:
                    a9:48:57:79:de:73:52:10:2d:5e:b3:ab:77:2b:e4:
                    93:05:22:af:24:de:29:ea:6a:fd:5e:08:f6:5b:6e:
                    41:d6:96:ee:75:88:de:59:d1:ea:c1:68:63:ef:01:
                    db:5d:a8:dd:9c:ce:4c:c2:df:c4:16:75:99:8e:91:
                    4a:ed:ae:3e:df:4e:9e:6a:89:95:4e:6a:81:45:0d:
                    55:a9:8f:ec:5b:2c:0b:12:f2:e7:f4:ac:b3:09:82:
                    48:6e:ba:b7:d8:b0:80:1b:c2:23:f3:84:64:ee:d6:
                    49:38:a2:df:12:c6:a9:d2:bf:b6:19:2e:7c:33:8e:
                    01:6b:6a:01:6c:e9:a9:b1:41:a3:ba:29:20:57:74:
                    98:c7:9a:57:cc:ca:48:76:03:db:79:25:aa:7b:46:
                    6f:f8:d8:93:d4:78:a4:6c:47:17:f4:6e:3e:94:b1:
                    1b:d7:05:fd:e9:22:43:c4:b5:c4:5d:8b:f4:fa:66:
                    ba:7c:7a:59:92:c2:3c:27:a2:71:94:30:12:f2:61:
                    fc:e6:d1:e9:43:f6:e1:09:30:93:9f:6c:5f:30:fd:
                    a7:fe:7d:40:ec:aa:0a:7d:fa:ec:6c:06:0f:1d:8b:
                    5b:f1:e1:e6:57:7c:6e:c6:ca:e0:c8:0e:18:0c:1d:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:CB:8F:8B:3D:56:8B:72:98:A8:75:F8:CC:35:72:A8:7F:DC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b96fb5-c93b-38af-86e8-8a984842422c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:18:57:d8:01:5e:4e:a7:36:c2:e0:3f:94:2f:35:ed:0e:3e:
         d1:98:9a:cf:95:7f:eb:31:b8:f4:e7:d1:47:89:6d:f2:9e:1c:
         f9:df:bb:68:eb:51:78:25:2f:3e:92:fc:73:cc:6f:5c:b0:81:
         b7:6d:8a:07:53:9e:6e:d6:e9:6c:f0:5e:b0:4c:2e:40:b2:0b:
         e1:b8:52:0f:9c:99:5c:7c:0f:c0:af:42:2c:42:bd:83:38:e4:
         32:54:80:15:c2:7f:86:29:33:da:06:72:6e:0d:d9:52:67:ab:
         08:af:20:74:a0:94:04:a8:e2:d8:38:29:aa:26:31:14:62:26:
         97:75:e7:b3:c6:b8:9d:da:14:e3:7b:e5:c4:fb:5c:01:7a:a6:
         e9:53:ce:6f:7c:fc:de:da:b2:b6:96:b3:50:24:86:0c:fa:1b:
         d0:d4:fb:ac:b9:e7:26:c3:a3:d0:0c:a8:a7:12:a9:48:4d:fd:
         e4:30:99:a8:00:ef:cf:26:f2:37:a0:02:98:ae:dd:28:46:6d:
         bc:be:48:ea:b3:95:87:91:8b:ce:80:ac:46:bd:fd:61:87:9e:
         ed:f6:21:7d:1c:77:c0:18:7c:63:01:a6:d4:fe:e5:35:95:d7:
         b6:ba:26:87:9e:4d:fd:1e:50:92:89:6c:b8:56:5a:b5:c0:8d:
         13:55:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:09 2025 by rpki-client