Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c8465f1-e85e-338f-9cce-68672e2d81af.roa
File:                     6c8465f1-e85e-338f-9cce-68672e2d81af.roa (raw, json)
Hash identifier:          DACrtTZIUfLrIdQZNElpoUnkI4wwvjDg1MOM+H8GYEA=
Subject key identifier:   3B:AF:E2:67:BA:32:75:61:9E:8E:A6:69:01:4E:00:F4:3E:DE:EC:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD238C347465F692B52723AA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c8465f1-e85e-338f-9cce-68672e2d81af.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        68.66.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:38:c3:47:46:5f:69:2b:52:72:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=4fd6e670-4494-4894-8407-d324129fb4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f4:d6:5f:10:84:df:a1:45:76:81:79:49:87:
                    69:50:0f:bb:b5:54:36:f4:e9:13:c0:f0:a4:81:52:
                    f7:54:86:1d:4b:2c:ef:fe:ab:4c:3d:35:1c:e7:08:
                    bd:57:96:31:7e:ce:32:a0:3b:b3:34:41:d8:ad:ac:
                    a5:7b:5c:37:b6:a0:4f:6f:0c:ac:d3:02:5c:87:7a:
                    b2:44:db:5a:31:8b:c3:67:e1:31:47:2c:e2:15:95:
                    99:b1:69:f7:0a:43:6f:c3:a1:e0:63:7a:2d:7e:a4:
                    12:f9:1a:7d:ae:03:91:4d:1a:94:34:52:8b:d6:c3:
                    b5:a5:45:ec:46:90:81:57:3a:8a:bf:3b:0f:88:b6:
                    c0:62:e6:f9:da:ab:c8:96:d1:3b:6a:fa:30:df:ed:
                    e1:d3:7a:76:65:a9:74:07:aa:88:50:81:ad:a0:19:
                    83:b3:e2:f8:9b:62:1d:2b:3e:93:56:70:b8:23:fd:
                    28:d2:ca:c6:29:b2:95:4e:ba:c9:49:9e:90:91:24:
                    e4:bf:be:e3:5e:ad:15:e5:f4:1b:59:15:81:0d:4c:
                    a9:28:75:6e:ff:ab:f8:f1:dd:a6:38:31:31:74:e6:
                    35:9f:6e:27:24:78:3e:36:6a:38:89:f2:93:d8:4d:
                    b9:77:6a:3a:9a:d2:64:da:a9:4f:18:92:09:07:c0:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AF:E2:67:BA:32:75:61:9E:8E:A6:69:01:4E:00:F4:3E:DE:EC:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c8465f1-e85e-338f-9cce-68672e2d81af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:88:3a:0d:08:7a:ae:f9:03:69:a9:35:6a:9b:7f:b7:22:
         4d:e2:4e:cc:0e:63:89:82:d8:9c:47:49:10:32:04:98:bb:5f:
         5b:f3:be:41:0c:b3:ea:bc:26:00:34:30:17:57:2c:49:71:34:
         f6:fe:e9:63:e2:19:34:f3:78:cf:ab:23:0e:56:bc:3c:7d:e1:
         6c:d6:b5:20:60:40:37:1f:ca:b9:c6:80:f5:0d:01:40:87:92:
         15:e5:a0:39:93:04:23:0a:4b:5a:1f:bc:3c:ee:3b:1c:cf:03:
         86:79:14:f1:b4:0b:ea:da:5c:16:7a:ce:da:ed:0b:85:44:d0:
         86:36:48:1a:57:1f:29:3b:38:13:67:a5:e4:4a:c1:de:97:c1:
         66:a2:f1:64:2a:a6:66:e5:4a:bb:dd:20:92:a2:91:84:ee:3f:
         53:c2:f0:b5:b6:ca:0e:f2:7e:ab:cf:c6:97:94:42:72:32:8c:
         e3:69:55:3f:31:1c:55:eb:02:06:2b:25:90:78:69:4a:34:42:
         57:93:f5:46:92:42:fc:d6:dc:a9:b1:64:e0:b5:f5:68:97:db:
         0e:12:3a:31:fd:96:e8:f7:e5:ea:99:c8:1a:e9:09:b1:2b:fe:
         92:8f:81:40:94:22:6d:5b:e1:ce:97:8a:dc:8d:af:0a:14:42:
         9c:70:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:47 2025 by rpki-client