Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f74cafe-a0ac-3ca9-9e3c-7ef696afb0f3.roa
File:                     8f74cafe-a0ac-3ca9-9e3c-7ef696afb0f3.roa (raw, json)
Hash identifier:          oOFBNVXs+V8FR1WCQnMbw/irz4nTk4P8hEni1QiQm30=
Subject key identifier:   F5:CD:28:6E:1C:02:54:A4:A4:07:D6:BF:50:39:02:46:DE:B9:3A:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB39877D7380AFD71502D100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f74cafe-a0ac-3ca9-9e3c-7ef696afb0f3.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.251.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:39:87:7d:73:80:af:d7:15:02:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=72d1e834-122e-49d0-a157-1295208b39e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:53:41:0e:d5:a0:07:1f:62:b6:d4:ef:30:
                    42:f1:79:bf:1d:2f:a6:66:d9:3a:a8:a6:fc:fb:37:
                    cb:71:56:e1:78:15:1c:0f:67:2c:6f:5c:db:9f:40:
                    69:e4:a7:b8:19:23:e8:52:b7:a4:5a:33:4e:94:0f:
                    2f:8a:f5:98:8f:0b:fa:e4:be:9e:c3:8f:98:f3:d8:
                    f5:ab:29:65:38:12:85:82:88:2a:42:a7:59:bb:7d:
                    b5:5a:0a:fa:c2:b5:a0:7c:1a:9e:13:a9:88:48:d5:
                    9c:50:5c:c4:2e:69:ef:df:8d:70:06:50:96:09:0f:
                    e4:bd:80:82:11:de:33:6d:a8:6a:82:8e:83:81:07:
                    1b:c9:02:28:4a:92:da:a2:49:e3:f7:9f:e1:22:63:
                    91:64:58:5b:9b:d0:78:f7:48:75:9c:99:49:a7:94:
                    84:2d:c9:0d:25:48:72:bf:45:3c:b4:5b:5a:4d:e3:
                    08:77:a2:8e:67:cb:c9:93:e7:03:67:b9:22:14:87:
                    3a:ce:9c:51:e0:78:03:9b:23:e5:98:ec:b1:46:bb:
                    57:bb:13:9c:33:1f:54:e8:7d:6d:58:45:72:dc:e4:
                    2d:4e:b7:ee:87:86:9b:08:c4:0f:c3:c8:45:35:80:
                    65:cb:18:82:26:07:8d:75:5e:82:ba:dd:eb:67:c2:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:28:6E:1C:02:54:A4:A4:07:D6:BF:50:39:02:46:DE:B9:3A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f74cafe-a0ac-3ca9-9e3c-7ef696afb0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:b8:e9:0c:f9:38:b8:47:cb:44:16:96:ca:9e:9b:a0:e5:
         b4:db:4e:f4:d1:4e:96:24:07:9c:df:66:0f:dc:e7:92:02:fb:
         9b:88:b7:cd:d7:46:57:1b:9f:1d:5e:92:e5:17:10:19:e8:b8:
         41:50:8c:cc:8e:7d:55:93:66:35:16:fc:08:9d:b5:bd:40:78:
         71:1c:2f:85:ab:d3:03:87:a0:22:70:89:ae:c4:1e:cc:d8:38:
         1f:08:8e:1f:76:60:e0:ed:a8:5e:83:e8:05:e2:9a:b7:15:af:
         81:6e:b8:d9:8b:8b:01:d1:cd:2b:1e:81:2a:ed:80:52:69:28:
         6f:9c:4b:92:4f:c2:d9:b2:a8:64:ae:8b:74:de:25:8d:75:ab:
         e6:62:78:4b:00:8a:4d:e0:45:c6:91:8f:98:66:8e:bd:3a:cf:
         03:b9:75:5a:a0:33:b7:2f:cd:4c:75:e2:bc:4b:7f:28:57:4e:
         25:47:13:6c:c8:8e:be:1a:a2:a9:fa:b6:7a:70:44:2c:1c:11:
         1c:fb:be:eb:55:2d:84:17:3d:e9:a2:2d:64:83:73:16:56:bc:
         84:f4:54:55:3a:0f:64:55:d7:ed:72:f4:80:c7:0a:25:08:21:
         00:66:e9:fa:41:1d:4d:88:a5:8d:dc:00:ee:a8:6e:59:e4:91:
         6e:d1:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:09 2025 by rpki-client