Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8247f0cf-8fcd-3c28-aeaa-3d32053e28ca.roa
File:                     8247f0cf-8fcd-3c28-aeaa-3d32053e28ca.roa (raw, json)
Hash identifier:          m4lWwoWQ4GiO2+Qp7IdBPTh1lt6ratdIg6Y6pLPB8E4=
Subject key identifier:   FB:67:67:4F:4F:73:7C:C8:2D:76:2D:A3:73:E8:20:C9:B8:AB:59:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E47F826EABA2106DBBFFA1580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8247f0cf-8fcd-3c28-aeaa-3d32053e28ca.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        64.252.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:f8:26:ea:ba:21:06:db:bf:fa:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=af8a30f2-d29c-47c7-8c00-d336dc517e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:b9:fb:58:e3:a0:73:b9:a4:a1:1e:98:51:
                    d1:36:49:d9:4f:b7:19:23:bc:30:0d:2b:dd:10:4e:
                    94:d4:b2:26:bd:bc:e5:62:48:dd:ed:6d:9a:09:da:
                    b1:0e:8b:6a:28:10:cb:51:db:a6:53:df:18:b4:bc:
                    95:10:8e:3b:f4:27:7b:39:08:57:4a:b7:9f:8c:7c:
                    24:91:e7:97:0c:29:dc:54:a4:25:36:84:a6:d2:b4:
                    49:ef:b4:e6:c7:a6:7d:21:96:90:82:d8:79:fd:dc:
                    d4:39:3b:6a:16:f9:38:8c:86:21:5b:82:78:45:77:
                    92:99:de:9c:a2:6a:5a:a2:70:de:87:47:b4:43:23:
                    9d:a0:b0:ef:b7:2b:7c:25:1f:4e:88:c0:f1:ff:d9:
                    d6:c8:d0:70:a8:f7:a4:1e:e4:5b:9f:56:56:76:0d:
                    b1:ae:d2:68:d5:2a:f6:f2:57:b0:77:2a:3f:25:1f:
                    21:45:53:bb:20:78:69:50:c8:46:4f:3d:3a:92:02:
                    23:85:41:28:d1:57:2c:20:77:f0:b5:a0:e9:37:54:
                    02:63:4f:ed:f3:5d:3f:77:9b:00:32:bf:da:e4:c3:
                    82:38:ca:c2:6d:07:e4:30:86:9f:e6:1b:28:67:4b:
                    8e:bb:09:dc:22:fa:3b:a2:fb:c3:4a:61:05:5b:30:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:67:4F:4F:73:7C:C8:2D:76:2D:A3:73:E8:20:C9:B8:AB:59:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8247f0cf-8fcd-3c28-aeaa-3d32053e28ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:da:4a:40:0c:22:9c:3c:68:32:99:d7:fb:5c:2b:db:4d:
         e0:8c:51:04:26:87:43:38:f9:f6:f4:59:75:0e:0c:33:ce:ac:
         b4:a6:86:21:5a:ea:f9:99:a6:72:20:5c:57:10:f2:03:49:4c:
         53:37:4e:af:86:1a:3b:df:a0:46:fc:50:6a:4f:77:61:90:18:
         2c:e8:ac:e9:8b:7c:69:73:ba:8b:6d:3d:e7:2d:72:4c:2b:1e:
         ce:aa:8a:d3:9b:5b:18:4c:fc:d2:1f:45:26:5d:eb:b2:e6:61:
         f7:ff:05:49:29:eb:35:ed:95:90:c2:07:c3:02:98:27:b8:02:
         d0:5b:b4:fa:ac:76:b2:a8:37:83:d2:ca:09:99:85:bd:66:a7:
         f0:65:c8:64:7d:03:05:b1:26:aa:28:92:ef:63:cb:eb:91:af:
         20:2d:0e:99:5b:f8:31:15:78:5e:29:a3:97:ad:ce:40:24:e6:
         23:47:82:a3:28:04:b4:67:8b:04:fd:38:af:61:4c:4a:d0:a7:
         98:38:33:c0:8f:5f:f9:58:d5:de:5a:68:5a:41:41:a5:07:c6:
         fc:c2:e0:eb:6a:8b:6e:fa:39:5e:ea:cf:47:f3:be:27:c2:fc:
         f5:58:a0:a0:72:56:d5:2a:a2:43:22:e8:e4:f2:a1:17:5c:55:
         3a:27:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:28 2025 by rpki-client