Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abee3147-5dd7-3842-9064-5a98390a6cab.roa
File:                     abee3147-5dd7-3842-9064-5a98390a6cab.roa (raw, json)
Hash identifier:          RfIMj6kpVP00oC5nulVwON09gQuAgeOH1X24izipEPM=
Subject key identifier:   EF:F5:08:63:10:CB:CF:FD:CD:3E:14:EC:6B:55:36:A3:FE:BB:63:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4B17CA8618016E3719A6330
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abee3147-5dd7-3842-9064-5a98390a6cab.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        64.187.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:b1:7c:a8:61:80:16:e3:71:9a:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=825b027b-8af6-476c-b8e1-b9e31a5aea86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:d5:2b:94:aa:63:48:33:f8:ad:aa:39:54:
                    a0:b0:2e:98:4d:84:94:e4:11:88:2a:b7:3d:b3:2f:
                    a1:5f:8c:93:1e:cf:44:4e:3f:c6:23:fd:b9:8d:0c:
                    0f:c9:23:b9:68:04:4c:a4:45:e5:d9:a0:9d:34:19:
                    fd:29:08:94:cb:ab:1b:73:3a:06:55:7b:4d:7b:7f:
                    d8:a1:9a:a1:97:dc:2d:88:02:e2:76:6c:5e:4c:94:
                    e7:ba:44:67:0a:16:b1:28:ec:61:13:2d:a7:20:c0:
                    59:4f:3e:fe:5e:79:b2:45:60:60:75:0c:6c:2b:5e:
                    82:3f:92:09:ae:5b:49:17:12:8a:34:4b:76:79:ee:
                    33:b9:0d:e9:24:6e:90:72:91:9c:c7:60:51:f8:a7:
                    5f:a3:74:1f:40:10:21:80:5a:c3:02:8b:2b:8f:85:
                    49:9b:90:92:e7:ef:aa:7a:96:f5:bf:7b:59:4e:7a:
                    25:eb:32:8e:a1:60:4e:16:df:33:72:bb:d5:3d:41:
                    63:5e:6e:a5:7d:71:13:c9:8b:51:a8:d9:55:8a:43:
                    d9:15:37:d4:92:26:f3:b7:39:79:03:7c:c5:a8:c8:
                    eb:b2:a4:25:54:94:7c:47:4f:75:2d:7c:3c:f2:5a:
                    b9:d4:3f:7d:34:f9:67:0b:01:5b:f0:3a:b7:5b:ac:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F5:08:63:10:CB:CF:FD:CD:3E:14:EC:6B:55:36:A3:FE:BB:63:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abee3147-5dd7-3842-9064-5a98390a6cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:f2:52:b4:b7:f1:bc:00:99:c8:61:3d:93:03:be:68:41:
         1e:cd:03:c6:8d:65:66:c4:c2:f1:3b:1b:47:99:12:46:f5:d4:
         a0:65:05:c1:7a:3e:f2:13:6c:e9:c5:9a:4a:f5:55:2e:f4:cf:
         8a:61:fd:17:f7:01:4d:63:d5:90:ee:40:9e:e7:06:b1:e2:e7:
         8f:7b:ce:b0:5e:e3:34:a6:9e:80:2c:df:50:8d:8e:c6:9b:a3:
         92:69:97:09:fc:36:d3:2d:55:a0:64:30:70:9a:ca:6a:7b:04:
         d5:0c:f1:76:30:db:37:70:61:26:f8:fd:7e:61:4c:e9:18:3f:
         51:8f:d9:3d:9b:de:0c:78:e6:ec:ca:8c:f5:a0:7a:21:86:92:
         e7:7e:18:72:1a:55:96:d9:88:a7:fc:b5:35:88:80:57:25:39:
         a2:dd:e2:ae:c9:fd:fb:3e:fa:17:45:fc:3e:99:cf:5f:b9:64:
         cd:37:59:8d:d2:ed:4a:ad:a7:06:d2:84:4c:b3:29:6c:6e:42:
         91:d1:4b:78:28:b7:70:4b:d4:37:28:59:46:eb:c5:1b:8f:fd:
         e0:b5:de:7a:6f:6b:5a:71:fe:a6:d1:8b:ad:1f:a1:d2:3f:cc:
         34:4b:13:60:0a:38:5d:57:cd:da:7c:7d:f2:05:c3:e7:a9:2b:
         ee:6c:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:48 2025 by rpki-client