Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86f236aa-6e2b-34ea-93c3-c15e9df88859.roa
File:                     86f236aa-6e2b-34ea-93c3-c15e9df88859.roa (raw, json)
Hash identifier:          Nfff/Mf988TUuoNPJX7vX8NRVBhoVOExeMhx7Iq88uc=
Subject key identifier:   7A:4B:5A:07:21:72:5E:B3:33:9E:0E:67:15:67:D0:CF:3D:A3:3E:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA8510E008ECD2F0AE1373C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86f236aa-6e2b-34ea-93c3-c15e9df88859.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:51:0e:00:8e:cd:2f:0a:e1:37:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=3bee16ed-57a0-47f7-a8ad-3a14857846ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:eb:a2:71:24:62:51:7c:26:f0:5c:8a:5b:
                    87:96:ec:ab:25:49:37:e9:e5:ef:a3:4a:b4:6b:5f:
                    95:35:3b:eb:4b:77:44:34:ab:cc:54:28:31:25:c3:
                    2c:56:1f:62:5c:bb:c8:34:c9:bf:8a:58:d9:7d:7d:
                    44:69:73:b3:b3:bf:87:25:d6:0f:8b:10:80:6a:f6:
                    32:e8:96:6c:b4:10:02:b3:2b:15:9a:af:bd:a9:4f:
                    82:1a:c5:53:c6:de:ea:e8:9f:ed:f4:d8:4e:4a:2d:
                    53:bf:5f:7a:d2:f1:03:da:e4:78:59:2c:ae:f2:74:
                    72:79:95:53:f0:fa:96:7d:e3:90:80:20:2e:13:7c:
                    ae:f3:47:ad:5f:ba:d0:d1:2e:cb:6a:7c:cf:b5:58:
                    87:e5:49:10:a9:d7:80:70:12:c6:5b:f5:36:f2:89:
                    c5:08:64:f6:8f:71:e1:a1:f0:7d:10:30:49:13:3d:
                    23:2c:f0:c0:67:28:fb:67:e5:15:10:2b:ea:28:83:
                    cc:c6:ce:10:4c:d3:e8:d7:99:79:4a:59:73:d3:26:
                    b9:31:3a:c9:b9:5a:0a:e1:03:80:18:b0:62:84:04:
                    38:e3:4e:f8:77:9e:aa:06:9c:5b:ea:24:d5:29:5b:
                    24:30:3e:39:01:75:8e:cc:eb:55:dc:65:2a:0c:11:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:5A:07:21:72:5E:B3:33:9E:0E:67:15:67:D0:CF:3D:A3:3E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86f236aa-6e2b-34ea-93c3-c15e9df88859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:9e:d2:a6:92:1a:76:24:f6:95:38:1d:ad:c8:68:eb:3a:18:
         21:8c:01:8d:63:2a:bd:1e:45:d2:4c:30:77:d2:e9:61:6a:31:
         f3:c3:9a:fb:60:18:25:68:69:f6:3d:f0:c9:43:fd:b8:89:8c:
         49:6b:2a:8d:dc:f3:50:90:a1:0e:06:e3:ad:b4:d9:33:17:66:
         11:23:d9:0c:7d:b5:27:63:c4:e7:51:3a:f9:d4:04:bd:36:bd:
         6e:1c:e2:1b:bc:66:a4:9c:e8:6e:0c:9c:7e:6e:60:01:f6:b7:
         00:c4:d6:2a:1e:ab:77:23:10:cc:f7:07:cf:0e:b7:e7:f7:92:
         1f:1f:c3:78:f2:a1:c5:5e:00:a7:8b:4c:b3:74:c9:0f:0c:7e:
         10:62:ab:0d:bd:7d:53:b9:a3:a2:a0:3e:53:ac:63:38:8c:de:
         11:81:59:70:49:1e:3a:a3:48:29:31:91:c3:39:19:49:eb:78:
         ec:e6:32:eb:79:b1:de:a4:55:f5:a1:02:1c:da:2c:ce:73:12:
         de:c7:87:53:68:6d:ff:72:e7:6b:d3:f9:27:a6:8c:5d:bf:ef:
         b9:75:e4:26:f3:32:91:08:ff:d5:a3:10:8a:ba:9e:bd:7f:ad:
         28:6c:e9:55:30:72:8d:f8:26:e2:5f:43:0e:65:66:a4:ae:94:
         34:42:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:26 2025 by rpki-client