Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7345e31-1db1-3ae6-9d03-7f758371cc3a.roa
File:                     a7345e31-1db1-3ae6-9d03-7f758371cc3a.roa (raw, json)
Hash identifier:          pngHziCosaoL6sHRO1vlfDTZCTtox3ksXBr6hLZC8vY=
Subject key identifier:   95:A3:96:5D:75:11:7B:67:43:55:B2:5B:B4:89:FB:75:7A:50:5C:26
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A96313DE7078436AA31BCE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7345e31-1db1-3ae6-9d03-7f758371cc3a.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.236.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:96:31:3d:e7:07:84:36:aa:31:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=c147998d-e831-46cf-bb88-f91f72e2d3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:6d:17:fb:ff:6f:1d:90:12:a8:12:69:7f:
                    84:04:bc:63:5a:1c:dd:ff:f1:b8:33:ee:bb:0f:81:
                    a5:61:49:05:e5:4e:e9:83:0d:9f:d5:48:ee:83:75:
                    20:b9:5a:e7:9c:b1:b9:99:a3:39:a1:8d:68:61:bd:
                    d5:af:21:d0:39:75:26:e6:1c:40:b3:e9:f5:0c:82:
                    9b:47:e2:5c:b2:9b:e5:3f:dd:27:86:ff:d5:9f:2e:
                    49:7f:76:ea:58:35:68:52:79:6e:54:50:dc:26:30:
                    bb:75:51:1e:12:da:be:39:5e:30:22:ef:ad:c8:6b:
                    fd:b4:00:72:3a:8c:83:df:c1:87:06:93:d1:b9:46:
                    08:12:27:12:88:4b:e3:fd:6b:29:c1:05:25:4d:9b:
                    d3:18:a7:7d:4f:a3:28:e6:bd:a1:0f:75:89:d8:88:
                    36:70:42:46:61:a7:fe:6e:fe:96:b3:d1:76:77:68:
                    29:9b:8e:e6:00:21:64:20:0a:c2:e6:53:c9:28:fd:
                    f8:b1:f9:6a:3a:97:d0:dd:89:aa:ae:65:5e:2c:9e:
                    09:57:fe:11:43:0e:c0:52:ee:82:e6:90:cf:ad:e3:
                    11:80:8f:75:6c:20:d9:11:ea:30:f3:92:1c:b5:d2:
                    95:95:63:e9:2a:fc:2c:a9:8e:e6:bf:18:ea:1d:c6:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:96:5D:75:11:7B:67:43:55:B2:5B:B4:89:FB:75:7A:50:5C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7345e31-1db1-3ae6-9d03-7f758371cc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:c9:e8:40:a8:d4:21:fd:58:d1:21:cb:c1:5a:0f:fc:26:
         24:73:da:e6:4a:ef:34:e1:70:d2:ff:68:ab:f4:9e:dd:e7:fb:
         53:c4:f5:7b:6c:81:0b:5c:39:94:ea:e2:fd:41:b9:50:84:45:
         14:17:f4:1d:74:1e:1c:70:c1:c8:b0:ab:bd:24:4b:f1:4e:35:
         84:27:c2:f8:5d:cf:c2:fd:52:9b:25:3f:b9:74:29:2d:3e:93:
         1f:8c:33:4d:fe:55:5d:02:1c:14:cc:51:97:ff:2a:4b:e9:9f:
         bd:b8:e4:1a:3c:c0:30:1c:6f:7d:ab:0a:c4:b4:aa:fc:18:ca:
         4f:5e:06:91:a3:f1:e5:de:2f:e9:cf:70:8e:24:da:4c:a6:57:
         f3:4b:6e:9d:cd:63:0b:e8:29:35:2f:19:48:b4:50:55:77:95:
         e3:79:53:60:f7:93:53:f7:e3:5e:29:6c:2d:4f:50:89:90:5d:
         d1:f5:bd:f5:e7:a2:31:ca:35:4e:cc:57:34:53:bd:2c:83:8a:
         2e:69:ad:06:89:e8:bd:5c:95:ec:94:75:78:4e:d0:60:b9:3d:
         40:03:60:2d:da:da:61:4a:0d:53:bb:cb:29:d8:8d:e9:29:bb:
         77:aa:ec:46:8f:11:41:2d:19:3d:59:28:b2:b4:8e:7a:e2:d7:
         bd:4c:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:39 2025 by rpki-client