Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85bab050-608e-3a47-bbe9-54aaaf9b2c7c.roa
File:                     85bab050-608e-3a47-bbe9-54aaaf9b2c7c.roa (raw, json)
Hash identifier:          +zfFkU3m/L61JNi20vxdVHqKiaYaHWJTDskcCRhI6c0=
Subject key identifier:   19:45:9F:23:7E:9A:06:D7:34:97:BC:D5:94:FB:DB:B0:AF:93:4D:9E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA44BC587B7250AFF99E88680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85bab050-608e-3a47-bbe9-54aaaf9b2c7c.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.240.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:4b:c5:87:b7:25:0a:ff:99:e8:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=e4e237a8-64d9-4e13-8a13-8c7f52a095d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:49:79:92:fc:79:ea:2e:48:9f:60:1b:65:
                    cf:55:3d:95:7b:bd:8b:7a:5f:47:69:66:a4:fa:e5:
                    e2:a0:13:75:cf:3e:73:e5:dc:9f:87:6f:1c:bb:cb:
                    b6:b5:43:7e:05:1b:cb:b1:61:f6:e1:cf:9b:46:c2:
                    37:c1:b8:13:3d:a1:e1:b9:21:7b:5a:12:69:8d:a5:
                    ee:32:21:5b:7b:d1:ea:7b:af:74:da:cf:cb:2c:d7:
                    49:45:e1:0e:8d:33:73:c6:97:f7:71:6d:6b:a7:46:
                    7f:2c:3b:56:70:99:15:bf:ee:e1:a7:87:57:53:b0:
                    20:dd:aa:22:04:10:0d:41:80:ec:19:40:1f:2b:4f:
                    5b:3a:1b:75:2e:db:c9:1c:04:98:fc:fd:38:11:4a:
                    67:24:3d:0c:1d:ff:7a:2d:75:68:16:3f:8c:ef:c7:
                    90:cb:96:93:e6:bc:1a:a6:58:09:bf:8e:45:68:4d:
                    11:7b:a3:6f:4a:26:16:11:5f:0f:a4:3b:88:15:c1:
                    94:7a:82:ad:77:20:51:90:f7:25:e2:38:20:58:bb:
                    d0:3d:e1:5a:e3:03:43:0d:0f:a1:1a:c7:c2:6e:94:
                    bc:48:b1:8f:de:0b:bd:28:a3:e7:b6:61:40:10:99:
                    ba:1b:b0:c6:d8:fd:a7:95:07:a4:9d:e6:e6:fd:e2:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:9F:23:7E:9A:06:D7:34:97:BC:D5:94:FB:DB:B0:AF:93:4D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85bab050-608e-3a47-bbe9-54aaaf9b2c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.240.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:34:57:f0:df:4a:7c:3c:8b:2c:2d:05:68:ad:5e:2c:e6:09:
         d8:cf:cc:f4:7d:24:99:6a:d3:12:37:cf:e0:8a:2a:fc:92:29:
         9c:6f:2a:c3:e4:02:40:ef:e6:fd:c6:82:af:37:10:16:b9:31:
         1a:47:e4:47:12:ef:64:69:13:08:a5:67:8a:9b:84:c5:bd:fa:
         c4:56:4d:25:bb:30:3c:ef:98:f2:03:7d:0d:a4:57:83:74:c1:
         61:cc:79:f9:78:0d:17:55:43:ce:ea:7d:ef:de:20:3a:fb:8d:
         5b:eb:2e:4d:f6:3f:52:d0:05:34:c2:d7:25:8d:ea:24:07:56:
         91:07:76:92:43:c8:89:5a:b5:5c:f6:46:6b:55:2e:b2:e4:c3:
         6f:91:2f:1a:9d:38:23:87:7b:1a:58:70:af:42:ca:4a:26:b0:
         36:d6:d0:8e:b0:f5:c1:89:30:2b:e4:7f:6c:2a:00:95:e5:dd:
         df:2f:d2:28:b4:a2:03:f4:aa:8f:8f:72:38:e4:45:c8:bf:80:
         a5:9e:0f:67:16:0d:0f:51:2d:2c:44:08:bb:d7:34:17:5d:54:
         8a:e8:11:d7:31:22:e6:d6:4e:ce:39:4b:8c:85:73:1f:43:6e:
         9b:d0:14:a8:b9:e8:16:36:8f:59:22:b8:54:a3:4c:fc:18:06:
         fe:5d:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:56 2025 by rpki-client