Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67da5827-81de-39ad-a6c5-e2498e335968.roa
File:                     67da5827-81de-39ad-a6c5-e2498e335968.roa (raw, json)
Hash identifier:          LbzXI4nF9exYjYejRkGF+gcY4kLn5UPsLS32Rc8/w0U=
Subject key identifier:   13:9A:41:02:14:FA:6E:F1:F0:A0:BA:21:83:D1:93:0E:95:A6:14:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB843230B7C3EF722318F940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67da5827-81de-39ad-a6c5-e2498e335968.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        64.252.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:84:32:30:b7:c3:ef:72:23:18:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=559bf4ed-17aa-4df2-8c1b-c179308ef269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:91:e5:ae:5d:79:17:af:8e:1e:a4:a9:50:
                    4f:71:61:1d:9f:e0:c0:da:dd:bf:09:91:c9:32:8c:
                    eb:38:13:c9:83:65:a1:f2:26:d1:b5:e3:8d:7c:eb:
                    ca:e5:76:5b:71:82:58:3c:6c:d9:66:a8:c6:cd:f3:
                    19:36:ef:bd:76:46:d2:36:03:65:18:4a:47:3e:f0:
                    4b:a1:a3:7f:69:5d:29:9f:00:7d:33:da:43:dd:89:
                    17:2b:1e:5b:30:71:3b:fd:ba:1e:d1:e2:1b:1c:19:
                    d0:f0:b4:25:e6:5c:55:1d:2b:b4:f4:f3:f4:6c:9c:
                    7b:ca:ab:67:00:d3:2d:a5:96:52:2e:fa:52:87:46:
                    99:05:1e:22:68:99:67:37:a3:44:48:a3:c5:6c:41:
                    32:ff:04:7e:64:20:5a:4c:3c:52:52:fc:78:bd:a4:
                    5a:d8:40:69:a8:7b:34:d1:65:2b:23:2a:2f:bc:b5:
                    5f:2d:c0:ba:15:cf:e4:e4:12:3e:ca:c4:17:11:05:
                    a2:76:db:87:f8:8b:fd:6b:8e:25:95:05:0a:61:8d:
                    e4:98:f3:fc:d7:d3:87:da:5c:c3:be:b5:36:50:89:
                    91:05:af:28:19:30:6c:72:03:61:fc:09:fc:4b:1b:
                    5e:9f:61:9a:00:c4:40:f6:9c:76:2f:99:42:79:81:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:41:02:14:FA:6E:F1:F0:A0:BA:21:83:D1:93:0E:95:A6:14:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67da5827-81de-39ad-a6c5-e2498e335968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:c4:aa:5a:d0:35:c2:a1:9c:66:7b:da:f4:8a:49:01:cd:
         c6:b3:72:c2:36:9a:4c:af:03:1e:a3:8a:48:d4:73:5b:34:94:
         33:c9:bd:4b:40:17:d8:a0:86:65:94:7b:34:28:f8:24:3f:fe:
         d7:d7:ba:16:f5:8d:81:8d:e9:79:e7:a4:a8:3c:6d:53:da:53:
         61:41:89:4e:10:26:63:bf:16:d3:15:0d:05:56:a1:f6:69:43:
         c5:81:10:9a:27:2b:f7:e0:6e:4e:d9:da:4e:ed:63:fb:28:90:
         e1:de:b6:3d:ab:2b:b8:0c:0e:84:e9:d2:0d:bd:6a:4b:21:66:
         e2:3a:8e:b0:fa:26:2f:c1:6f:5d:5b:0e:be:ad:22:bb:37:c3:
         3b:21:1d:08:e9:da:42:5b:48:e3:76:86:24:6f:fb:e6:6b:64:
         5a:f4:4d:c0:1c:32:55:f1:ce:27:b6:ea:d1:66:7a:de:f2:a7:
         0a:fc:26:b8:a3:d7:22:37:15:46:f2:39:35:88:da:5f:5d:ca:
         cc:1f:1f:3d:03:40:05:42:6e:59:1a:bf:8a:db:35:4d:1e:2f:
         0b:66:40:eb:12:66:5b:f0:00:8b:bb:48:60:02:4e:0b:5e:53:
         8f:95:cc:81:c4:0b:2f:06:e7:bc:ab:9b:47:3c:9c:99:46:80:
         5d:19:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:55 2025 by rpki-client