Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90544c52-7a3d-31a4-adc8-218177c2212d.roa
File:                     90544c52-7a3d-31a4-adc8-218177c2212d.roa (raw, json)
Hash identifier:          CAL5ZDpJ89P0A3Ct+cqG8EeDowQtdZsLG+zobbYvVRw=
Subject key identifier:   D1:5B:FF:38:E7:09:5D:EF:7F:14:2C:6A:DD:18:37:6A:B3:61:31:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F58CDAD7FEB88CBDBD7417FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90544c52-7a3d-31a4-adc8-218177c2212d.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        216.39.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:cd:ad:7f:eb:88:cb:db:d7:41:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=09d72629-c4a4-4284-816e-70e547bc25f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:c9:39:dd:39:37:88:55:4b:37:2a:6b:2a:
                    1c:58:ca:97:4e:ee:68:2f:16:84:35:4a:9e:2c:f9:
                    6a:01:fc:d3:3e:c7:96:12:af:fa:2d:f0:6c:0d:04:
                    90:6e:90:a2:95:aa:2d:f3:3e:31:2a:bf:38:02:a7:
                    32:d3:51:b2:73:ba:1f:0e:c3:8e:94:86:93:99:72:
                    20:4d:ce:93:93:7f:a6:73:49:ed:31:97:35:29:8a:
                    53:f4:28:bf:c9:0e:92:7d:94:34:3e:77:d6:e4:43:
                    a3:fe:02:94:39:39:40:9c:d0:cf:7a:28:1b:82:e0:
                    e2:b9:2b:62:dc:36:b9:cd:ac:ba:1d:0f:c9:bb:d6:
                    59:48:72:0e:91:3b:4f:a7:47:3d:ce:79:00:94:2b:
                    7a:52:66:23:53:b4:a3:76:c1:b1:34:63:e8:ff:4f:
                    5d:5b:3f:78:9e:65:f4:69:b6:6a:4e:b8:cb:e1:65:
                    f3:ed:b7:e4:c7:8d:8e:a0:46:67:84:ce:64:5e:c3:
                    66:ec:ed:b3:28:7c:9a:84:f3:42:7b:f3:c6:27:53:
                    af:7b:38:e9:1e:2e:b7:27:83:f9:78:f2:cc:db:3c:
                    7c:a2:e8:18:f9:36:d5:95:49:dc:1d:e0:ec:86:e6:
                    0d:8f:05:0f:28:e0:a1:63:b3:68:72:c0:fb:aa:12:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:FF:38:E7:09:5D:EF:7F:14:2C:6A:DD:18:37:6A:B3:61:31:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90544c52-7a3d-31a4-adc8-218177c2212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:eb:a9:b9:d7:07:ce:b4:5e:0c:04:7c:0d:0d:a3:2e:6e:
         39:fb:29:e4:90:2a:4f:d8:6c:b9:65:e8:5c:0d:8a:80:3e:37:
         53:1a:04:5b:34:fd:65:42:63:73:33:42:d0:d4:d4:22:52:04:
         1e:49:93:41:ea:d5:d3:92:b7:6c:d6:a7:7a:10:d3:ef:2a:3e:
         33:85:26:5e:17:de:52:b7:2a:7f:6c:47:ab:05:fd:80:65:ce:
         a4:8e:fd:f0:6c:18:22:92:04:0e:bc:4c:02:94:f4:b2:1a:76:
         96:b2:7e:fb:9a:63:89:5a:3c:20:da:0f:18:de:18:64:f9:c6:
         a8:ae:f2:1e:3c:cd:1e:aa:0c:67:7b:c9:cd:6a:f0:01:1b:e6:
         92:02:9c:a3:97:d8:fd:60:29:cf:08:24:a1:6f:ce:2b:80:af:
         03:6c:71:17:04:61:33:a9:df:41:ae:11:23:02:d5:c4:a7:01:
         08:1e:83:a3:2d:1b:93:09:52:bd:37:d2:e1:71:d4:7a:ad:54:
         54:5a:c4:ce:cf:ec:a8:59:04:05:08:da:96:7a:08:aa:48:a8:
         f7:38:94:ac:0d:cb:5e:95:f6:0d:0f:33:5d:0b:07:82:76:e0:
         8a:ae:19:46:2c:df:a7:e3:18:4d:af:31:21:3f:91:1d:7b:21:
         2a:0a:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:28 2025 by rpki-client