Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a329ad24-2278-3a8a-af45-618362496c06.roa
File:                     a329ad24-2278-3a8a-af45-618362496c06.roa (raw, json)
Hash identifier:          lCv+t7YwoiH9A0N1QC9tc9ADPGzw8IlMr6sDWCdb1Kc=
Subject key identifier:   93:71:D6:93:1D:EE:A2:65:B9:08:D1:2D:D2:1A:CF:5D:CB:72:FF:6A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401CB079863ADCDEF9ED1FD498
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a329ad24-2278-3a8a-af45-618362496c06.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        76.238.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:b0:79:86:3a:dc:de:f9:ed:1f:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=d5c689c7-5f4a-4fb4-b29e-42155bb254a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:32:78:8a:36:4a:09:02:2c:42:4b:c8:0c:
                    78:52:ab:3f:3c:53:76:36:a8:06:28:83:79:03:5b:
                    16:c0:13:3c:81:bf:8a:0c:a2:b2:2c:80:e2:75:6c:
                    74:58:b2:f8:c3:70:e8:dc:eb:3d:5b:87:1c:49:93:
                    d0:7e:27:4e:3c:e0:24:04:5e:5a:c4:8d:3b:2c:c9:
                    c8:5f:43:28:58:f6:7a:f9:c6:2f:13:30:56:ff:35:
                    17:82:73:4d:8d:a7:0f:42:9b:24:5a:33:6f:e3:6a:
                    e2:b7:3c:67:a4:aa:a1:a7:24:62:31:30:5f:86:6a:
                    03:04:bb:9b:13:74:f1:95:2c:8d:20:50:97:94:33:
                    0d:0f:01:5a:f2:84:8d:d6:54:4a:03:03:8c:73:96:
                    0d:0b:7e:02:19:2d:fa:8f:3d:81:2e:03:3a:d5:bb:
                    f8:08:15:26:fb:a7:21:42:ad:57:61:d2:3a:fb:73:
                    12:04:71:88:07:ce:6b:bc:ae:3f:5b:a0:6f:e0:7f:
                    dd:4b:91:50:86:cd:79:c4:aa:43:0e:f0:0a:15:fc:
                    91:cf:8f:21:d0:5b:b3:e2:13:ab:03:e9:68:b6:33:
                    46:68:6f:d0:e2:02:b7:cf:ee:94:2b:75:c1:dc:ac:
                    6d:b4:8a:74:10:6d:97:59:ab:85:4d:d7:fc:57:32:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:71:D6:93:1D:EE:A2:65:B9:08:D1:2D:D2:1A:CF:5D:CB:72:FF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a329ad24-2278-3a8a-af45-618362496c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.238.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:98:0c:9d:3a:66:2d:19:5e:fb:71:bf:8a:5d:cc:c7:f7:
         9d:99:9b:24:4d:40:ba:91:98:9c:e9:39:2d:34:57:a4:fe:54:
         28:d6:da:41:29:08:01:21:19:64:f6:c3:75:dc:bf:80:d3:3a:
         f9:b8:a3:f6:71:5a:5a:50:e4:e1:93:26:59:52:90:8f:bd:91:
         3d:16:e5:5c:69:6d:42:a8:c3:89:e4:f5:4f:83:f3:ab:7e:27:
         29:80:32:a9:ec:35:38:b0:83:fe:65:eb:88:6c:3a:80:d0:4b:
         25:81:31:d4:30:65:bb:b3:68:ec:42:bf:3f:1a:72:ae:fc:c6:
         01:ec:13:2b:82:82:78:0e:34:36:f3:74:0e:da:3c:d4:cd:f7:
         a2:93:a5:e9:1b:e1:ea:cc:09:2e:09:80:2e:0d:f5:fc:de:1c:
         ac:7d:09:f3:0c:86:d2:e3:38:96:98:89:91:e0:66:fd:3c:12:
         43:88:45:df:20:8c:19:97:9c:4f:4d:49:b5:8d:b6:dd:7c:a9:
         39:5e:2b:2b:fd:d8:50:c9:57:50:6d:20:d3:3a:0f:30:c0:b3:
         22:2e:69:b3:45:ca:a4:61:79:6d:52:bc:9d:80:d8:06:53:e2:
         8d:64:29:f0:11:82:40:f0:0e:45:a1:6c:cc:45:83:e7:7f:62:
         65:01:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:47 2025 by rpki-client