Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7070672e-d364-3503-b35a-31c554186b18.roa
File:                     7070672e-d364-3503-b35a-31c554186b18.roa (raw, json)
Hash identifier:          OiKN2d+fW66340bnZQJUJwSjoQA5Rhez1gHDnuPFNJE=
Subject key identifier:   A3:94:B2:3A:2D:C2:8F:0A:22:E1:E6:69:2D:97:7A:CF:58:A0:08:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB1BFACBAA344BDF2EA2F100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7070672e-d364-3503-b35a-31c554186b18.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        64.187.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:1b:fa:cb:aa:34:4b:df:2e:a2:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=3f112d53-6bf5-45cc-9607-ddc0ba275624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0e:9c:65:ee:57:4c:fd:af:79:7f:56:0b:dc:
                    18:7a:3c:74:2d:e7:ff:85:ca:d9:ce:b8:53:30:2e:
                    f9:81:be:a8:79:dd:b7:af:9f:99:fd:5e:72:41:c9:
                    a7:98:d0:8e:d4:94:31:bd:4b:30:50:02:44:00:9c:
                    d1:e4:ca:68:4e:58:bf:c6:c9:66:27:69:5c:9c:f0:
                    da:e5:c1:da:90:86:98:52:26:6e:76:e6:8d:c5:d6:
                    d3:d1:4b:73:ce:61:b3:a6:ee:fc:11:af:ed:89:4b:
                    2d:ea:b6:e2:e8:6c:6e:cc:2f:ac:82:d7:ad:5e:2e:
                    03:d0:9f:48:a7:b1:85:a0:0f:2e:31:57:43:8b:50:
                    6a:8f:6a:35:6f:6d:e5:d7:2b:c1:4b:d3:db:7c:23:
                    33:75:68:69:c9:74:67:4d:3d:3c:b9:4c:8c:a8:7d:
                    d5:9a:34:82:0c:ff:c9:4c:f7:93:08:4b:f3:b1:47:
                    16:6e:f7:b8:3b:31:82:b3:11:8e:12:e9:52:aa:f6:
                    c0:10:fc:73:60:0c:e4:ba:2f:98:61:8d:1f:2a:36:
                    9c:3a:7b:08:f6:69:6c:a2:27:f2:62:de:af:48:cb:
                    7c:68:7f:a8:f4:70:5e:b0:71:34:f2:36:90:16:11:
                    a0:ae:6e:dc:d7:31:3a:6a:03:64:1b:af:b5:ea:ef:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:94:B2:3A:2D:C2:8F:0A:22:E1:E6:69:2D:97:7A:CF:58:A0:08:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7070672e-d364-3503-b35a-31c554186b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:a0:2b:6d:a3:8c:19:9c:85:be:a9:bc:32:32:98:4a:20:
         cf:31:82:3e:16:4c:23:bc:14:0f:35:90:46:25:2f:80:de:30:
         00:65:87:be:7e:fc:44:c5:53:03:8a:a8:19:e0:19:46:97:de:
         1c:57:68:b7:b0:09:c2:d1:fc:7c:da:c6:fa:9b:11:3f:8e:6c:
         69:51:67:78:6f:0c:c2:8d:8a:56:78:2d:bc:fb:94:a7:cd:82:
         47:3e:bf:2c:93:db:76:88:37:50:83:49:01:cf:5e:ea:c2:9e:
         a8:16:63:63:43:5b:46:c0:d8:1e:14:25:89:d4:f8:ce:86:21:
         ab:90:f5:bd:3f:44:ae:0e:34:40:99:57:9a:88:ee:53:51:aa:
         62:fa:30:99:09:ed:03:f6:56:b3:95:9b:3a:50:36:1f:c0:64:
         ef:af:7f:7e:97:f2:fa:0d:43:9b:84:05:6e:3e:ff:d1:8c:68:
         ed:49:59:cb:fb:67:a4:92:d4:91:61:dc:20:a0:31:3f:5a:ea:
         67:2a:8d:37:45:f9:4e:be:2f:4a:9f:82:9a:0f:63:21:bc:98:
         60:e1:2d:82:c8:b6:23:a0:d8:35:a8:e9:81:0e:5c:2f:11:d8:
         07:71:95:fb:9d:b2:31:9c:f8:1a:82:71:a2:69:48:a6:cd:67:
         8c:8a:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:05 2025 by rpki-client