Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f3baba7-da6a-36f3-a38e-dc32eed1e3a2.roa
File:                     6f3baba7-da6a-36f3-a38e-dc32eed1e3a2.roa (raw, json)
Hash identifier:          zixsdbmnyGDS6PdlMp68eDqk2pltWyAhAd4pnfYUAoQ=
Subject key identifier:   2E:F9:F1:90:DA:93:15:36:6E:7A:CF:F5:D4:17:CD:5E:20:0F:57:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0BB7F0DCE0EA0283E6CFB780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f3baba7-da6a-36f3-a38e-dc32eed1e3a2.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.107.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:b7:f0:dc:e0:ea:02:83:e6:cf:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=b55b91a4-2dee-4f73-bc4f-852746c94a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:0c:fd:72:b6:0a:72:71:24:c4:1f:0b:a8:
                    2a:38:2d:91:56:0b:1c:a1:ca:1e:99:9d:51:d7:06:
                    7b:b9:22:bb:27:72:74:3b:82:9e:97:81:2b:ab:28:
                    58:fa:5d:8d:7e:9c:1e:5e:25:4b:c8:57:93:83:17:
                    32:73:5d:34:8a:e9:3b:5d:30:de:5d:9c:62:ff:35:
                    33:41:e0:13:96:07:ad:45:e6:0c:eb:7a:b7:86:5c:
                    d8:bc:25:17:dd:c0:1e:6d:4c:f3:80:bd:4d:77:b6:
                    28:2d:7d:c0:2e:87:47:ca:34:47:74:f2:0d:d3:c2:
                    7b:39:6a:ab:55:d9:ad:a7:66:0c:a8:e1:68:05:22:
                    3f:ff:46:54:16:a2:2b:51:fe:6e:55:e1:b8:c4:bf:
                    80:00:5f:4d:a2:a4:4b:1e:f8:18:5f:62:b8:92:4c:
                    48:5a:27:2d:51:78:9a:5b:44:f4:74:5e:0c:12:bc:
                    b1:e4:e2:ef:92:d5:27:20:64:30:54:d2:76:59:7d:
                    b6:d9:b6:2d:b6:a0:61:1f:87:79:63:16:84:a6:4c:
                    9d:75:58:94:5f:47:b3:d9:cc:be:95:1c:a6:91:8c:
                    11:f4:a7:60:90:6e:e8:8e:27:b6:1e:f9:4e:e4:d9:
                    0b:fd:6b:73:b6:51:36:50:3a:b5:29:3b:88:12:47:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:F1:90:DA:93:15:36:6E:7A:CF:F5:D4:17:CD:5E:20:0F:57:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f3baba7-da6a-36f3-a38e-dc32eed1e3a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.107.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:b6:51:dd:36:1a:93:76:e5:4a:de:4e:33:af:6f:16:f9:
         e1:bb:c4:ea:01:e2:7f:95:5c:0d:1e:e5:71:8b:a0:15:7f:c0:
         93:69:8f:6e:de:fe:f4:aa:25:53:bc:ab:cb:05:93:42:50:a5:
         f2:dd:7e:be:d9:e5:1a:26:8f:20:49:02:26:e7:a5:92:06:cc:
         1e:a0:26:2b:33:f5:85:6c:64:03:19:84:8b:5e:14:09:bc:ba:
         b4:a1:4e:74:77:00:78:6c:af:e7:10:e6:eb:26:2c:89:8e:69:
         16:59:93:6e:d8:79:43:e2:2b:0c:e3:64:cd:41:31:b2:7a:7d:
         d2:83:9e:14:1a:c2:68:38:f8:00:74:50:6e:9f:3f:ad:16:19:
         87:6e:ee:3a:08:4d:3b:08:d1:a5:2e:c0:58:d8:87:9c:92:d4:
         df:3f:28:64:d0:e6:e0:0a:d1:7f:be:45:c0:1d:0d:2f:9d:30:
         d6:c8:ac:94:7b:93:be:c3:94:d0:96:9b:40:0d:e8:c9:8b:4f:
         15:0f:c5:10:c4:f3:b6:a6:38:f7:75:05:68:b6:15:7c:1b:7a:
         e6:f0:ac:a7:62:86:9b:0d:c1:0f:1d:21:02:c1:84:00:ec:67:
         38:07:e1:a6:94:17:5e:88:db:5a:fe:3b:fa:54:5d:3c:43:b9:
         2c:f0:7a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:56 2025 by rpki-client