Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fa57048-9950-328c-b8af-89c6e2e68720.roa
File:                     9fa57048-9950-328c-b8af-89c6e2e68720.roa (raw, json)
Hash identifier:          lADLvS2fxf4mdV0R2cduSG/Nz4lfGWTE3iWflwCgHNc=
Subject key identifier:   69:AC:6C:03:2C:16:0B:F6:7F:35:A7:A1:58:F1:28:A6:31:9C:C6:E3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0B8960D65594D1F9D3A8AF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fa57048-9950-328c-b8af-89c6e2e68720.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        64.252.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0b:89:60:d6:55:94:d1:f9:d3:a8:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=a3960a87-f949-42bb-9f32-93afb80fb6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:05:c4:ed:af:d3:35:f1:b0:8f:86:e1:5b:
                    11:aa:ec:a7:e7:e2:c1:eb:96:97:8c:23:06:ae:03:
                    82:b6:9c:b1:1c:28:18:c8:18:bc:31:27:cc:22:12:
                    b2:51:06:61:3e:d0:e8:d8:14:41:3b:84:88:78:55:
                    fd:2e:f2:a4:25:4b:c0:a1:e3:d9:ca:71:00:fa:3c:
                    55:cf:9c:1b:ce:5c:88:4d:51:51:22:34:e1:ed:1d:
                    45:ed:bd:a7:45:dc:10:2f:67:19:14:a9:a4:fd:f0:
                    5f:6d:3b:d9:eb:02:bb:e4:3e:50:3c:3f:22:0c:87:
                    f6:04:bb:7d:e7:fd:f4:e7:2b:5e:de:cf:2b:ee:a2:
                    e0:d2:bc:cb:42:35:b7:3e:4a:2d:30:c6:f9:b4:3a:
                    65:63:2f:3f:da:6f:52:98:f1:28:e2:cd:4c:ec:16:
                    9a:63:a9:38:1b:a4:c2:d6:e1:c6:83:aa:19:9d:68:
                    cf:2e:f3:ce:f7:d2:07:9f:6c:fe:c8:75:d3:58:d4:
                    60:fb:57:8b:1e:17:55:07:fe:c3:79:91:0e:c3:26:
                    af:e7:aa:14:1e:cf:7c:d8:c9:8f:4a:78:fe:6a:2f:
                    27:96:d8:63:28:e3:ae:54:27:14:65:64:87:ce:59:
                    b2:85:e0:05:a8:28:f2:10:a4:89:3d:f7:da:65:0c:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:6C:03:2C:16:0B:F6:7F:35:A7:A1:58:F1:28:A6:31:9C:C6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fa57048-9950-328c-b8af-89c6e2e68720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:02:c8:ff:02:5d:35:69:6f:e1:d6:8a:c7:d1:55:0c:8a:b0:
         5d:74:c8:cf:fc:d9:12:dd:2b:23:6c:88:7c:1b:2e:e2:94:85:
         34:71:c2:61:ba:82:22:d7:99:87:ca:04:79:cc:e2:cb:99:e8:
         0a:e6:0c:1b:6e:7d:99:eb:c8:02:da:df:46:96:53:18:4d:79:
         d8:a4:14:09:64:6f:a5:33:ef:86:ee:55:cd:13:65:fd:ef:13:
         55:b8:bd:3f:62:eb:ef:6e:2c:34:9c:a8:fb:a6:9f:36:da:a4:
         4e:a5:12:3c:7e:0e:da:4e:d8:77:f8:2c:8a:92:35:22:46:1f:
         6c:30:11:05:c7:38:8a:65:51:f6:d8:a7:e0:6d:24:18:fa:a1:
         e0:da:53:f4:60:4a:e0:13:31:04:d7:88:9b:60:3f:68:4e:57:
         a4:18:09:c0:5b:02:6c:63:93:8c:3f:56:16:2e:76:a8:7f:10:
         92:57:bb:fd:fe:57:35:de:51:9e:67:32:ff:55:f2:67:ed:4f:
         ab:ac:f8:43:52:03:44:06:aa:23:a2:48:8c:c7:70:3b:32:80:
         b5:ac:9d:37:2c:bf:08:b0:90:b7:81:23:7f:c3:ad:5a:3a:85:
         33:75:87:26:3a:ef:da:1b:28:31:86:d4:fa:75:33:a6:3e:bd:
         cd:71:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:59 2025 by rpki-client