Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e621f07-9606-3e08-8958-00cf797db6cb.roa
File:                     8e621f07-9606-3e08-8958-00cf797db6cb.roa (raw, json)
Hash identifier:          pkzKe1YhZd82xrGtX8HzUTYZ6SfLuQE7RQU+cthKcis=
Subject key identifier:   E5:FB:CE:32:C1:EF:E7:00:BF:23:AC:F7:33:FF:28:46:F9:25:3A:92
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F56F8A1853B262818FE52E680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e621f07-9606-3e08-8958-00cf797db6cb.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.211.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:f8:a1:85:3b:26:28:18:fe:52:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=4002e576-a248-4094-b076-a11c5d0ec5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:b9:84:60:13:ef:40:c8:7b:81:52:15:2e:
                    25:17:4a:34:2f:64:38:55:0f:28:7c:71:45:d6:4e:
                    81:c1:4c:68:1d:ad:ef:1a:17:f9:cd:5c:ff:36:0d:
                    98:c8:cb:29:f5:01:ce:32:9c:fb:27:33:9a:2a:38:
                    3f:b9:51:98:f9:ee:28:ce:26:6b:49:e1:c9:84:c5:
                    9c:bf:f0:52:f9:14:df:da:4b:23:57:01:2f:8d:7b:
                    f4:8a:ab:cc:74:2f:73:b7:e3:28:b2:41:f5:b7:70:
                    b3:d1:41:a9:f3:0e:93:20:43:41:13:d1:51:d8:ed:
                    08:57:f1:dc:ce:62:25:9e:4d:30:9b:8b:52:11:a8:
                    73:0f:38:43:f0:d9:a2:55:f4:50:34:4d:62:22:27:
                    c4:82:36:2c:15:cd:b1:4c:3d:92:51:8c:33:30:27:
                    1c:1a:28:a7:7c:a7:f5:88:ee:77:55:5e:42:4d:74:
                    07:87:ea:6d:c0:56:89:18:78:19:15:08:6d:f9:fc:
                    c0:a0:92:1a:34:e8:74:59:b7:6c:b8:c3:60:7d:41:
                    b3:79:1c:21:b1:30:6e:08:60:b4:60:30:4b:92:4b:
                    cc:80:4c:0b:2b:94:61:82:20:e0:ea:b5:94:2b:3e:
                    12:0a:54:3c:7b:89:15:28:cf:a3:7d:a5:6b:df:ad:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:CE:32:C1:EF:E7:00:BF:23:AC:F7:33:FF:28:46:F9:25:3A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e621f07-9606-3e08-8958-00cf797db6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:3f:fc:93:16:0b:58:59:e9:0f:3d:0c:d1:a5:96:1d:1a:
         f8:cc:5f:ef:62:c1:20:03:3a:e8:50:84:6d:9f:1e:b4:3b:56:
         eb:25:22:e4:6e:b9:5e:cf:6b:ef:3e:a0:7b:81:cb:68:59:de:
         a4:d9:06:c9:43:94:fd:de:20:3d:24:bc:7a:05:95:5c:37:cb:
         7c:fd:0c:87:a0:49:8b:a7:75:c7:1a:2d:fc:56:32:dc:97:56:
         26:f2:f4:71:8c:3c:e6:1f:ba:9b:74:7a:eb:9c:69:1c:c3:f2:
         01:5f:9c:eb:cf:da:36:f5:9d:8c:ee:ee:4e:a0:9d:cc:29:43:
         95:65:2b:43:c4:35:48:30:13:45:ce:18:7a:e6:f2:30:20:de:
         b4:34:59:87:09:27:26:83:1a:32:f6:bd:70:26:47:81:42:b1:
         45:cf:6e:87:10:69:5c:9c:b1:6f:3d:a9:f0:af:72:cc:21:3e:
         86:22:b9:8c:ec:97:03:c3:7f:4c:5e:ca:b1:f0:54:25:c4:c1:
         10:e2:9b:39:8c:00:f1:d1:e1:35:7d:53:6f:67:e4:0a:91:bd:
         dc:5e:c2:04:83:ec:17:af:13:cb:58:90:4d:d0:e7:5b:8e:6a:
         2b:79:b0:6a:1f:8f:46:47:32:e9:c6:3b:38:8b:f2:fd:d0:0c:
         d2:6c:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:07 2025 by rpki-client