Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d00f34-a83a-3e2a-990f-de6c9cc7e3cb.roa
File:                     74d00f34-a83a-3e2a-990f-de6c9cc7e3cb.roa (raw, json)
Hash identifier:          J1VU44h1565MRq2rSMTid1KUQkX338wEEdxN2ZRmP5w=
Subject key identifier:   0C:BB:57:D6:DB:B8:94:C0:55:61:44:EB:D0:7C:94:61:5C:FE:26:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D33016D42B35039B4FBA93880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d00f34-a83a-3e2a-990f-de6c9cc7e3cb.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.197.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:01:6d:42:b3:50:39:b4:fb:a9:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=b3715a25-0065-413a-97eb-3e33149234a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:8a:39:d4:90:f6:c6:c4:80:52:ab:14:54:
                    cc:fd:eb:ff:c6:dd:d5:5b:09:6f:ed:7e:63:4a:2f:
                    ac:10:c1:cb:94:51:1b:f5:68:b3:e2:56:f3:1a:c5:
                    62:43:a6:6e:27:6e:f1:e1:69:6f:44:0f:a1:fe:e5:
                    ac:57:2c:bc:ae:f3:ba:c0:e9:d5:73:17:54:ce:35:
                    96:ac:64:ad:0e:b2:8f:62:ef:56:06:f9:66:d7:4d:
                    40:95:f9:aa:7f:2a:0c:8d:17:cd:93:bf:27:81:1f:
                    1e:a9:20:46:54:d9:be:a3:69:c9:c4:56:7e:b2:bb:
                    91:d8:b3:fc:89:c3:aa:a7:25:38:b9:c8:c6:cd:b9:
                    c0:cc:a5:31:b7:12:d3:7a:95:70:96:2f:b6:de:3d:
                    30:55:88:ca:9a:df:57:9a:3e:fc:68:65:21:7d:5d:
                    40:65:32:ee:4c:f3:bc:24:aa:a0:da:c8:80:15:c0:
                    ad:c8:4f:25:93:14:44:a7:5e:51:1e:9d:09:dd:a8:
                    99:83:a7:f5:da:4b:45:45:b0:bc:3f:99:dc:64:a0:
                    de:ef:83:7b:ff:3c:9d:c3:e2:5e:b2:33:11:e6:34:
                    35:dd:93:92:46:4f:8d:3e:c5:9e:53:24:28:31:aa:
                    5f:d5:43:1f:69:1f:53:c9:03:a5:34:7a:22:fc:4f:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:57:D6:DB:B8:94:C0:55:61:44:EB:D0:7C:94:61:5C:FE:26:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d00f34-a83a-3e2a-990f-de6c9cc7e3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.197.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:15:52:f8:ff:e5:58:ac:4a:90:ee:b5:05:e7:63:b0:43:
         07:db:17:8d:4d:04:de:90:46:cd:31:d2:76:63:68:62:83:08:
         5b:ff:7d:39:4d:30:c1:98:ec:0a:80:50:18:43:e5:57:eb:e4:
         0e:2f:42:0c:30:91:5d:0b:c4:6d:f1:0c:6c:6d:e7:1b:26:b5:
         aa:0d:c6:64:47:f8:32:63:9e:f7:1a:b2:2e:62:95:bd:10:f1:
         38:bd:82:2a:d6:9d:8f:a2:6f:17:c2:46:58:85:3c:67:bb:91:
         8f:33:c3:30:e8:89:d6:68:b5:1b:bb:27:24:a1:3a:b3:29:73:
         6f:20:6a:82:78:d0:0a:ed:ac:8a:10:bb:f2:74:d1:11:aa:be:
         7c:a2:06:10:a1:8c:e9:a4:c3:8d:ba:c0:63:1a:41:ea:98:95:
         97:21:0a:78:5d:be:f4:56:27:67:56:8f:46:dc:6e:58:f8:29:
         5c:8f:44:46:e1:fb:0a:2a:fc:2b:ee:ea:70:3b:0b:40:9b:18:
         a7:44:12:d6:7b:be:af:4e:4e:f3:60:e8:0b:b8:da:60:25:86:
         fa:de:18:72:94:4b:9c:5b:a6:8e:d4:06:71:36:91:a7:14:ba:
         b7:c1:34:c6:3d:5d:ac:58:9d:e1:33:19:43:81:38:df:a4:71:
         10:98:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:36 2025 by rpki-client