Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c621246-9486-3e8a-a920-0dd6e40646f3.roa
File:                     9c621246-9486-3e8a-a920-0dd6e40646f3.roa (raw, json)
Hash identifier:          Ks3kJpHEzm3uqX/HJr+SDLMHoP8t8iVTA1bhHFNBvHs=
Subject key identifier:   48:42:9C:5E:68:6C:E3:A9:5B:65:4D:5E:B6:0F:D6:81:AC:99:49:BB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBD941070F1781466CABBA740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c621246-9486-3e8a-a920-0dd6e40646f3.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.224.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:94:10:70:f1:78:14:66:ca:bb:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=4b94fa89-e076-45f4-ae68-71b0fe7797fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:73:b7:dc:30:b4:1d:29:8d:c8:7a:77:08:
                    54:f7:c4:09:29:df:61:93:4b:da:50:48:83:1c:d9:
                    37:c4:e0:35:1d:d3:23:6d:73:67:d5:b6:5a:83:17:
                    d2:f3:6e:f5:c0:4b:09:79:09:4d:54:1a:36:4e:9f:
                    5b:8d:3b:80:04:f3:89:40:c7:bc:86:d3:d9:f5:6b:
                    97:ce:4e:66:60:b3:d1:55:4f:f9:3b:ad:03:73:93:
                    89:d2:63:85:ca:13:5f:5c:10:ad:0d:4c:c3:a0:35:
                    3e:56:13:6d:07:fa:0a:65:c7:21:ab:84:0b:e7:d4:
                    c2:be:0e:8d:8d:cb:d3:c7:77:18:70:34:99:7d:25:
                    eb:c6:0c:10:ee:d5:f4:46:b3:a3:c3:25:14:ca:a1:
                    a8:d9:e2:bf:1c:3c:4b:26:2a:bd:41:5f:9f:0b:ce:
                    89:6b:63:c7:63:95:87:59:f2:6f:b0:7e:4a:f2:a8:
                    5b:44:e0:09:6e:0a:0b:2c:70:ca:ae:da:a6:3b:45:
                    ba:0a:e8:eb:9c:fd:ce:62:d2:2d:6e:3a:41:14:13:
                    25:c7:fe:0e:d2:a4:24:ff:a9:41:c4:e2:62:ea:d4:
                    44:91:5b:e3:d6:ac:5f:6e:68:66:b4:a7:a6:07:7a:
                    f3:fa:32:b5:c8:8a:b9:37:ab:68:56:64:1d:6b:23:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:9C:5E:68:6C:E3:A9:5B:65:4D:5E:B6:0F:D6:81:AC:99:49:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c621246-9486-3e8a-a920-0dd6e40646f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.224.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:99:23:2e:10:73:85:cf:90:45:43:ce:7f:8e:66:55:bc:
         5e:54:6a:3b:f1:2e:a2:24:f6:e1:fd:d2:1b:79:3e:69:7a:3c:
         31:41:60:53:70:fd:28:fd:30:9a:35:76:a1:8b:69:84:32:22:
         4a:a0:e0:0b:83:3f:30:6a:f8:9e:9f:bf:cf:11:d3:ea:5f:11:
         9b:7d:97:d2:ca:71:77:df:ca:ee:1d:d6:74:95:c5:9f:6f:12:
         82:09:fa:47:81:fd:dd:2b:93:db:df:1c:12:80:54:6a:6b:d9:
         f3:06:cc:4c:ed:59:1a:41:59:98:bb:1c:7c:32:bc:70:75:16:
         81:cd:aa:c2:37:ed:64:ed:bd:00:63:bd:58:52:fc:15:50:e4:
         9a:8f:06:77:df:95:1d:5c:7c:0a:60:bb:19:a8:8b:30:a7:24:
         3b:1b:13:dd:f5:1d:8d:38:92:b7:7d:93:e4:ac:a8:e2:fe:63:
         17:bd:2f:f8:d0:cd:ab:bd:7c:19:a5:a3:01:7f:77:96:e6:3f:
         29:9a:d4:88:ae:ad:c3:c2:b0:f9:11:59:ea:a7:48:4e:1d:97:
         1a:49:c8:74:aa:05:14:e7:4a:7b:19:65:08:d6:6f:54:b4:cb:
         52:a4:d2:22:9b:3d:f5:a8:c2:ef:4c:52:e2:94:c3:e5:f3:ba:
         80:f3:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:24 2025 by rpki-client