Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4c3fb1e-7cd8-3428-a4a0-ff6d45c0e781.roa
File:                     a4c3fb1e-7cd8-3428-a4a0-ff6d45c0e781.roa (raw, json)
Hash identifier:          6NSXfA5SQof+l+R0LyGWSftS+Vg6wkHe6sJrjKfKc+Q=
Subject key identifier:   1C:63:A9:0B:15:D5:D8:D2:54:B4:D7:1B:E7:F5:E3:F7:04:9C:1A:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4B163300722E3F991908780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4c3fb1e-7cd8-3428-a4a0-ff6d45c0e781.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        71.152.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:b1:63:30:07:22:e3:f9:91:90:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=053f5dee-6445-4773-abb6-734e48f47444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:6c:c9:d7:84:71:f3:45:0d:3a:0b:90:63:
                    c0:9e:c3:63:ce:5c:ef:4d:ce:7d:ad:64:09:41:b0:
                    03:0c:e3:1e:28:a9:60:46:14:39:d3:42:f1:2c:6e:
                    36:f7:ab:59:bb:89:9a:95:a5:d4:21:70:3e:3a:8a:
                    1a:af:4b:08:94:d0:03:3a:e7:4c:7f:22:9d:85:4e:
                    a9:41:04:70:e0:51:f5:b9:8c:a3:3c:a2:05:ea:0f:
                    17:ed:ea:63:f9:5d:4a:2d:e0:f3:10:5a:81:e7:08:
                    42:5c:3f:e1:74:75:e5:fd:2d:d0:0c:ed:80:91:01:
                    3a:af:8e:6d:e9:b0:07:bb:a7:64:83:93:75:c7:60:
                    9e:7d:2b:71:a3:25:ba:b4:d8:fb:de:09:c9:0f:35:
                    71:ee:a0:c2:c9:fb:32:2f:22:78:dd:c3:1e:1c:d5:
                    c5:02:f9:51:15:4e:b1:bd:ba:2f:89:bb:70:dd:4c:
                    22:12:9b:90:7d:ce:e9:97:a2:ec:cd:fb:a6:83:ed:
                    98:33:c2:5e:66:bc:a8:ef:af:31:29:a7:57:62:c9:
                    4b:22:24:4e:57:b2:d5:e9:21:ea:0a:ad:39:eb:d7:
                    9a:6d:f6:c7:bd:56:6c:2a:26:44:4e:bf:9e:16:4b:
                    72:7b:85:e7:7f:86:7f:52:76:43:c3:72:5e:4d:5e:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:63:A9:0B:15:D5:D8:D2:54:B4:D7:1B:E7:F5:E3:F7:04:9C:1A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4c3fb1e-7cd8-3428-a4a0-ff6d45c0e781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:44:d6:3b:a5:bd:bd:ab:0d:42:80:8a:74:82:b8:e8:bb:
         a2:0e:0f:0c:73:15:5b:ea:1e:24:98:a1:98:71:6f:0f:8c:e7:
         5e:71:8d:5e:c1:5c:90:0b:81:05:92:7b:31:51:0f:c7:34:ff:
         7f:7f:68:5a:cb:50:ab:4a:f0:65:53:2a:4b:8d:4d:03:31:46:
         33:b8:a0:b4:e6:c9:8a:e2:82:61:3f:10:7f:50:f3:83:f6:e7:
         2d:cb:45:78:53:c8:e7:39:f0:11:e1:b6:db:4a:1e:b5:7b:ac:
         43:f3:fd:73:eb:9c:97:5b:56:71:68:70:1f:e9:78:d2:a5:3a:
         46:a4:72:38:21:eb:16:8c:7d:55:2c:83:90:62:4e:19:1a:49:
         44:94:ae:2c:a3:69:98:09:9b:fd:e1:8f:f0:7a:fb:c5:26:5a:
         e0:d1:1b:51:df:f6:81:99:ce:7a:e8:17:fd:3f:c7:a2:b2:c0:
         4f:4e:c1:99:62:82:9e:31:b5:09:99:d8:3c:de:96:81:fd:d3:
         8e:52:8d:34:c0:d4:d3:80:4a:26:d7:72:52:11:d5:25:85:0c:
         de:d6:b8:5b:0d:db:16:1c:f8:0e:65:27:17:6a:bf:7f:86:89:
         dc:f2:2a:49:bc:d4:cd:cd:f9:1d:d9:6b:95:03:8e:1c:ac:14:
         b2:84:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:33 2025 by rpki-client