Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9556d96b-dfd8-3b2a-a181-bf9474bea9b5.roa
File:                     9556d96b-dfd8-3b2a-a181-bf9474bea9b5.roa (raw, json)
Hash identifier:          eS76bAg+hKrVJ1plg9CZDeLfjUVhaqr0ONiPG+62KYg=
Subject key identifier:   3E:25:3F:AF:29:BD:42:37:55:A0:1C:C9:E1:53:88:30:89:22:19:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9B4F63A4414CD8D3D6608280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9556d96b-dfd8-3b2a-a181-bf9474bea9b5.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     19047
IP address blocks:        70.130.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:4f:63:a4:41:4c:d8:d3:d6:60:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=5c48a072-d6de-4ee3-9869-1cb18e337415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:ea:93:86:4f:e6:ed:d4:8d:95:c1:03:89:
                    f8:e4:27:46:ce:81:71:47:35:9c:c3:0a:ae:4f:a3:
                    23:78:ea:f2:2b:f3:bb:89:18:bc:de:15:fb:88:35:
                    65:1f:38:89:89:71:fc:c3:b2:01:cb:60:2e:43:96:
                    ac:55:36:da:a2:d3:4a:fb:34:1e:45:73:45:79:b0:
                    ff:e2:9f:69:cd:bd:59:d3:0c:88:1b:37:ea:10:61:
                    b9:8b:bd:99:06:17:8b:e5:d1:7b:77:41:44:c8:db:
                    f6:99:6f:b3:22:79:e1:8f:4d:e5:a6:46:59:db:5f:
                    9a:59:cf:ce:be:a3:b3:75:25:0f:2a:bf:6b:10:70:
                    de:06:b7:c7:36:6b:6e:11:dc:82:77:6c:3c:bc:e5:
                    41:36:e9:fc:1f:68:7f:21:c7:62:29:6f:57:fa:cb:
                    c2:e2:f4:60:ac:cf:55:7a:e3:4a:8d:24:b2:b1:21:
                    b6:c5:20:34:8d:c9:ac:43:5e:1f:72:2e:ae:71:26:
                    93:dd:10:b4:27:5f:d5:25:b2:eb:ed:5c:1b:7f:e5:
                    e6:65:f6:25:4e:f3:4c:8f:ea:24:f2:e6:ba:0a:33:
                    29:ef:69:78:2d:d8:69:6e:75:b6:6f:b4:a7:c7:da:
                    a5:0b:58:f0:3b:4f:67:d4:54:b2:65:06:80:4e:36:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:25:3F:AF:29:BD:42:37:55:A0:1C:C9:E1:53:88:30:89:22:19:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9556d96b-dfd8-3b2a-a181-bf9474bea9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.130.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e5:8f:3c:49:31:e3:ae:2f:f2:07:d0:31:1c:bf:3e:74:c5:
         8c:12:90:46:56:55:35:e3:89:ed:89:15:a1:56:73:31:8f:0b:
         25:01:74:7d:22:b3:11:8f:55:7a:e0:8e:89:d5:b9:ec:08:04:
         0b:3a:b8:0d:a0:a4:5e:15:d1:4f:d9:d9:4e:62:58:3b:af:cb:
         a3:88:e0:f9:00:eb:be:bd:5a:72:f4:51:81:ce:14:ce:38:a5:
         8b:7f:00:94:5b:52:66:f5:4c:33:b2:3d:24:2c:a4:63:87:75:
         f4:20:41:f9:19:52:1d:37:11:67:81:a0:4a:04:42:a6:3b:de:
         59:80:03:70:b5:7c:a9:7e:5c:ca:7a:cc:11:03:c5:99:0a:e9:
         b4:33:1b:6a:e8:4b:6c:f1:be:73:53:02:07:f2:39:fa:bd:24:
         24:2d:fb:5b:32:99:9e:a5:dc:d0:0d:b1:2d:e7:0c:b3:4a:04:
         66:7f:1d:40:e7:db:6f:05:80:3b:1b:17:d2:0c:ba:9b:d4:07:
         79:d8:5e:9d:6f:bd:3b:18:b6:bb:f6:ab:eb:e5:b1:6a:bb:f3:
         ef:b3:97:fe:1e:d5:73:02:ef:5b:15:6c:cb:ef:5b:96:2d:86:
         5f:63:b9:b2:15:46:31:77:c4:e4:6f:3c:8b:22:39:97:ab:fe:
         8f:a9:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:51:31 2025 by rpki-client