Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709beacb-1870-308d-a8d6-0aa4e86947e8.roa
File:                     709beacb-1870-308d-a8d6-0aa4e86947e8.roa (raw, json)
Hash identifier:          6AfbEmDJ1R+8ItdqUDVe0K+3BQgBv1wZ/JsZtzp2+2I=
Subject key identifier:   AB:38:A6:D6:7E:F9:41:6E:B6:A2:00:75:40:F2:CB:E7:F1:5E:6A:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A08FE5AB56078AEF0C55800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709beacb-1870-308d-a8d6-0aa4e86947e8.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        71.141.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:08:fe:5a:b5:60:78:ae:f0:c5:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=a4433ae4-02ed-4d5f-8ecd-1a8179e8dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:17:c6:dc:2b:20:a3:da:e7:ce:24:fe:8d:
                    30:a1:91:b4:8b:92:97:1d:4f:7e:f4:27:6b:2b:50:
                    f4:cf:89:8e:fe:20:d6:86:38:f9:d7:33:ad:67:b5:
                    d0:58:c2:a5:47:24:3f:34:c8:27:40:08:18:2c:f6:
                    00:bc:3a:fc:a3:4d:61:ae:3f:10:f5:29:7e:30:14:
                    e9:66:ab:af:aa:3e:21:7f:8f:2c:d6:2b:be:16:da:
                    34:a5:92:9a:af:d7:b6:62:88:80:44:2c:b7:5e:a5:
                    9f:8c:3f:42:b0:e3:fe:c5:e5:01:4b:99:f9:e7:ef:
                    2f:93:e2:01:c1:63:b2:c3:6c:44:ea:5a:d4:ff:08:
                    d5:25:50:ae:44:e8:e5:34:39:43:58:5f:a3:02:12:
                    13:d4:b7:cd:ac:86:8c:d1:b3:dc:dd:20:5e:0e:e7:
                    c8:02:9c:8f:ce:1f:92:6a:6a:ff:e6:46:de:2b:3f:
                    f8:a8:72:95:4a:86:6f:aa:cd:f8:6b:eb:fd:4e:e6:
                    c7:ad:79:65:e8:ec:97:59:8c:df:20:1c:74:ab:dc:
                    b4:34:ca:8a:c0:c2:d3:20:5b:67:39:63:46:eb:65:
                    26:bc:09:3b:7f:86:0f:7e:b2:c4:df:f0:eb:64:14:
                    fe:16:55:06:70:e3:76:ca:86:c6:4b:25:8f:06:ab:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:38:A6:D6:7E:F9:41:6E:B6:A2:00:75:40:F2:CB:E7:F1:5E:6A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/709beacb-1870-308d-a8d6-0aa4e86947e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:11:9d:18:f6:14:1c:c5:ad:3e:03:52:8d:7c:4d:7f:e7:
         59:01:e0:bb:bb:84:2f:b6:e4:2f:c7:90:fa:94:41:1a:45:a0:
         de:84:2e:3c:a5:c4:64:e2:cf:b0:5c:1d:62:5b:5f:1f:c1:26:
         5f:e5:e1:08:73:9e:26:dc:19:b1:24:de:86:d1:57:c9:d2:8c:
         58:49:be:63:91:c9:bc:ed:ae:00:34:4b:c9:e3:9e:50:52:47:
         83:9d:5e:f4:41:fe:53:e7:08:2a:f0:2a:b5:fe:8e:9f:15:e2:
         b1:16:5d:85:30:7d:f7:54:8c:4d:36:12:21:ba:1d:78:43:53:
         9e:87:75:4c:09:71:6c:82:af:14:a5:53:01:5b:2b:c7:77:34:
         0b:dd:ee:35:dc:c9:ec:b8:b4:9c:22:e0:5b:aa:1c:75:71:59:
         9e:e5:66:d5:bf:f1:a5:ba:6b:ef:c1:d7:2d:9f:b7:0a:f8:0f:
         6f:f0:19:dc:fe:14:da:86:ae:0a:32:2d:2e:88:7a:0b:3e:32:
         ee:01:67:a0:ee:13:11:7a:ed:e2:dc:86:31:c7:c8:95:1b:0a:
         32:a3:91:73:09:fc:b3:84:6d:2f:53:86:e0:d4:11:00:0a:9e:
         11:1e:e9:18:67:87:03:10:ce:c0:bf:78:f0:2c:f7:20:0b:05:
         93:b3:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:14 2025 by rpki-client