Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c3d4575-80b4-3c8f-bfcc-1f470f33ccf1.roa
File:                     8c3d4575-80b4-3c8f-bfcc-1f470f33ccf1.roa (raw, json)
Hash identifier:          6pRSN7rLlQSyYqbSXdaD8HicF59JeVarVVrzCi4kyBg=
Subject key identifier:   A8:84:1B:53:C9:91:53:8B:CB:D4:C8:90:D9:6D:50:38:CB:4F:C0:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D813C3208B97DF50AC36DB100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c3d4575-80b4-3c8f-bfcc-1f470f33ccf1.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.252.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:3c:32:08:b9:7d:f5:0a:c3:6d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=18e66037-e067-41a4-9681-388aad8cde2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:58:c5:4b:f2:d2:bb:9b:33:4e:b5:9d:cb:
                    3e:d5:04:5d:36:6b:93:15:0e:75:e6:5b:94:10:ef:
                    0e:52:7d:5a:b1:99:51:7a:ea:a0:a1:84:10:bc:74:
                    fa:ea:bb:b0:fa:55:33:b9:1e:1c:c6:e6:19:86:2b:
                    dd:ab:6c:a0:94:52:bc:e8:bc:c4:ff:a2:03:18:39:
                    9c:2a:30:bc:6f:d6:e6:5b:c3:49:52:4a:b4:92:23:
                    3c:7c:05:51:24:5c:25:ff:e2:38:90:a8:31:00:5a:
                    0f:33:c6:18:24:f8:c4:d8:ac:ec:a2:ef:10:ef:31:
                    56:73:39:f8:de:73:eb:5a:fb:a3:c0:83:f4:85:03:
                    d6:ca:fb:42:ce:5f:0d:d1:00:03:0c:30:41:96:00:
                    81:58:72:ee:30:2d:20:f2:f6:87:2d:89:27:a4:5b:
                    0a:31:45:75:f8:ed:5e:2d:bd:98:2a:3f:65:ee:8c:
                    fd:33:d6:31:54:ed:24:e5:fe:94:28:d6:87:dd:f5:
                    c1:f1:bd:b4:f5:83:7d:26:74:b7:3b:be:4d:cf:4a:
                    5f:ce:15:82:5d:6b:91:96:fd:ac:f5:f3:b7:b2:78:
                    22:1c:cd:d7:08:75:d7:48:06:51:35:e7:e8:69:2c:
                    0c:30:0c:3e:14:d0:b7:bd:ee:d2:a6:dc:6a:e5:c0:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:1B:53:C9:91:53:8B:CB:D4:C8:90:D9:6D:50:38:CB:4F:C0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c3d4575-80b4-3c8f-bfcc-1f470f33ccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.252.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:25:ed:69:70:ee:d2:26:95:c9:e9:ec:31:ee:01:03:d8:65:
         d5:f7:4f:2c:26:4e:64:b8:8a:3b:d1:98:aa:90:e7:c8:65:cd:
         17:1e:87:4c:ec:d5:fa:72:e1:7f:e2:0e:3d:9a:bd:0a:ce:68:
         0f:b5:77:97:b4:06:a2:84:4f:12:45:48:38:f6:2f:20:fa:32:
         dc:b6:75:09:ea:98:25:bc:56:e6:be:af:44:e5:d8:01:5e:3a:
         93:70:ae:65:fe:3f:be:5b:2a:b2:f9:db:68:cd:87:97:67:9d:
         db:07:3e:54:f1:1c:3d:36:3e:23:0a:0b:34:a4:d3:7b:10:3e:
         4a:fe:83:c9:43:2d:d0:74:42:6f:26:30:b3:00:08:6b:cb:05:
         92:8a:52:9c:f8:e7:bd:07:7b:ef:d9:6d:ba:df:e9:13:2d:60:
         bc:de:8f:10:34:d5:8b:b8:f3:5e:ae:b0:76:5f:8d:41:9e:95:
         31:61:4e:b4:2a:86:56:f4:41:5f:20:f5:25:1a:be:a1:72:c6:
         65:4b:d1:9c:49:2f:ad:32:a4:67:f2:60:21:ad:4b:60:6a:0a:
         88:97:d6:c8:76:f9:d9:bf:6e:01:8a:4f:bc:f7:80:be:6e:7e:
         c5:11:06:b8:4f:71:71:99:e5:d0:7b:02:f6:0d:6c:1f:db:eb:
         2c:8f:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:47 2025 by rpki-client