Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70812b60-7a4a-33d6-b630-4fbc5cb340aa.roa
File:                     70812b60-7a4a-33d6-b630-4fbc5cb340aa.roa (raw, json)
Hash identifier:          dV3QzG1R5OGoh0w8IJn2Tc2GIiq9VumZkD8CThR/slE=
Subject key identifier:   2B:68:EC:8F:8A:25:9D:08:67:1D:18:93:8E:0C:66:BC:FB:0A:AF:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBD9449C28AC8663764641420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70812b60-7a4a-33d6-b630-4fbc5cb340aa.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        68.66.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:94:49:c2:8a:c8:66:37:64:64:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=bae04037-e581-4849-9e88-5172760365d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:92:3f:83:01:23:53:a1:6f:60:2a:7d:c2:
                    82:7d:82:a3:fb:27:be:dc:22:bf:10:64:39:21:c2:
                    87:56:0c:9c:42:69:cc:a8:e9:c8:54:01:19:35:82:
                    10:ef:c8:41:3f:c6:77:73:06:6f:72:73:b9:4b:0a:
                    34:88:28:a5:76:b2:d5:97:00:5a:87:5d:70:42:03:
                    7a:19:e1:30:1f:94:29:65:60:67:6b:68:f8:8d:44:
                    a3:36:ba:af:5a:4d:be:58:87:5f:e0:2b:16:43:17:
                    d1:9a:2d:88:59:3d:9e:07:8f:36:e7:2a:18:f3:be:
                    99:5e:3d:31:51:4b:49:08:72:d6:fc:af:2e:46:d2:
                    d5:82:f7:b4:b9:82:8e:c6:78:67:98:5e:e0:8b:6b:
                    1d:ba:ad:08:fd:e2:b2:9d:96:e6:a1:99:f3:91:ac:
                    43:2d:ed:e4:cb:3b:ef:c5:ad:8c:39:fe:6a:f8:b1:
                    06:90:4a:a4:4d:bf:ac:17:ad:51:eb:58:96:af:b8:
                    ed:a4:a8:bb:11:d9:0e:cb:15:ae:61:a9:52:27:bc:
                    8c:93:18:44:c4:6c:4b:10:61:9b:8f:c7:06:b2:a6:
                    44:75:dd:fa:9c:d0:fd:7a:16:8d:ba:ba:32:54:b5:
                    0e:02:fd:33:62:be:c1:a1:02:7b:61:38:86:7d:cb:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:68:EC:8F:8A:25:9D:08:67:1D:18:93:8E:0C:66:BC:FB:0A:AF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70812b60-7a4a-33d6-b630-4fbc5cb340aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:ec:a8:4a:dd:6a:f1:27:b2:4f:3a:d4:d4:08:6e:64:1b:
         a2:7e:a6:df:92:a2:4b:7f:3f:50:46:79:0b:17:06:59:9e:ed:
         13:84:9a:91:98:16:cb:7c:5b:07:9d:5e:fa:c1:96:5b:b7:82:
         f7:9e:28:1a:91:8c:c7:ea:16:77:28:e7:46:07:4f:b0:28:db:
         2e:13:45:88:02:18:8e:56:cb:aa:66:87:03:5a:2c:cb:e1:38:
         23:83:9a:84:2d:b2:4c:92:fd:42:3a:1e:a2:9f:4b:78:76:6a:
         44:66:9f:92:ff:e3:ee:14:f3:fc:2c:e5:d5:bc:63:51:60:6b:
         7e:87:38:2c:e3:de:8d:46:af:80:33:e8:ef:dc:28:62:40:c4:
         e1:45:54:e1:9b:6b:d1:50:7e:97:57:73:f1:3d:12:26:16:b8:
         c6:f9:b4:1c:64:04:8b:c2:f6:73:a6:6a:4b:50:54:04:18:6e:
         f8:17:2e:f1:a9:8b:20:f0:66:2a:28:30:e1:13:e2:63:51:01:
         92:2f:7c:73:82:ba:c5:f7:8a:19:f4:e8:20:c2:f2:0f:f4:ef:
         83:c2:a9:21:03:0e:77:28:14:81:ed:71:c2:06:30:42:fb:03:
         52:49:e8:ac:60:37:62:7a:2c:5b:09:60:b1:1d:74:13:40:85:
         50:9d:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:49 2025 by rpki-client