Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86c73afc-791d-30d3-95d8-869687dd65ad.roa
File:                     86c73afc-791d-30d3-95d8-869687dd65ad.roa (raw, json)
Hash identifier:          t6LIqyAIz95+L++SvpbBSIZ167wbKlKQ46Hq0xUhDvg=
Subject key identifier:   B6:B4:AA:37:51:2C:84:21:93:8A:1E:29:5C:79:5C:28:89:52:81:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3209D91C2C5F18D3AF318800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86c73afc-791d-30d3-95d8-869687dd65ad.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.3.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:09:d9:1c:2c:5f:18:d3:af:31:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=f7d1d563-d283-4ee4-915a-e415824709fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:91:9b:28:cd:82:20:fc:0c:2f:45:02:d6:
                    93:ab:96:da:5b:2c:ea:a6:a3:64:a1:27:01:5f:28:
                    d8:c2:cb:6c:7f:e8:e9:c8:f7:ff:33:4f:0c:a6:eb:
                    7a:51:e4:22:78:7d:f4:71:07:ea:84:4c:97:39:ea:
                    1c:ef:08:8d:23:ee:b1:b9:8d:20:7b:db:18:91:ba:
                    e9:49:d6:54:50:39:2e:21:fd:a5:c1:d6:9a:ee:2a:
                    41:18:db:58:08:d2:d9:d9:77:0c:df:49:97:cf:cc:
                    68:fd:22:38:7f:c3:84:b5:ea:fc:e1:4c:3a:1f:91:
                    a3:59:a3:f7:45:b7:60:59:63:56:d8:2f:0a:a5:c5:
                    a7:91:44:c7:0f:18:03:35:91:d6:ea:7c:c4:fb:b1:
                    6f:00:4b:42:b7:34:a0:54:79:0b:e5:dc:d1:ca:4b:
                    e4:22:1b:da:dc:6b:bc:df:34:82:77:fb:37:87:0d:
                    8e:ed:53:82:9a:95:9d:93:ad:e4:4b:50:a0:a7:23:
                    03:f1:c9:8e:e0:12:93:e7:5d:77:2d:e8:d3:14:2b:
                    1d:e6:21:bb:48:07:8b:c3:db:34:c5:02:1d:dc:2a:
                    9a:ea:9b:ec:19:69:ec:d4:25:24:42:2e:1e:40:57:
                    ad:f5:32:7d:c1:28:37:48:04:d3:bc:c8:3d:75:4d:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:AA:37:51:2C:84:21:93:8A:1E:29:5C:79:5C:28:89:52:81:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86c73afc-791d-30d3-95d8-869687dd65ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:49:4e:ff:73:46:fa:4c:88:43:15:c4:11:d4:1c:41:fe:
         a4:33:a6:9d:5b:8a:50:7d:f4:c3:b3:5c:2e:ce:42:d5:96:fb:
         2e:f8:5f:0c:67:30:28:9c:c0:f7:92:2a:e2:2e:e4:7b:3b:9b:
         36:62:96:50:f2:ed:24:25:8b:b5:a3:d7:4c:bd:e1:bb:e1:31:
         c0:73:aa:e0:9b:a4:3c:96:c0:0b:eb:d1:61:c5:09:0d:23:ee:
         e4:99:24:78:56:3a:bf:0d:41:a7:a5:76:a4:b1:cc:99:01:01:
         e6:66:f2:a2:2e:d9:43:aa:97:dd:b2:2c:91:4e:ca:71:55:b8:
         07:fb:d1:96:53:45:7d:a1:dc:3c:d3:50:c4:0b:db:ec:d3:8d:
         d7:a2:76:23:ad:c8:23:0f:90:7c:1e:07:95:91:72:6e:cb:dd:
         3b:bd:8e:9a:a8:86:bb:6a:a7:a2:65:17:b9:75:ff:bf:7b:88:
         58:08:44:00:8e:60:dc:ef:02:4a:26:83:7e:da:ee:7e:ff:d9:
         8c:6f:44:94:de:bc:ae:e2:56:d9:e8:3d:cd:ab:22:4e:27:fd:
         85:c0:f1:8e:ad:51:61:8f:b9:0f:1a:4a:48:d5:5c:02:7e:03:
         a4:04:d4:bc:74:3f:d7:05:96:30:e5:00:8f:26:e9:8d:ef:e9:
         10:ed:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:09 2025 by rpki-client