Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25b27c9-5b7c-3676-acbf-a7969783dde0.roa
File:                     b25b27c9-5b7c-3676-acbf-a7969783dde0.roa (raw, json)
Hash identifier:          ggdD+c1KlC79EyJc27xiSNpQElqgVP6/j3mym9Zw8bg=
Subject key identifier:   2D:1A:9D:D6:83:51:CE:B2:58:E5:BC:F4:86:F7:AA:1E:23:94:23:E0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6E62A6C986D2A2A17A121980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25b27c9-5b7c-3676-acbf-a7969783dde0.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:62:a6:c9:86:d2:a2:a1:7a:12:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=703a9a9c-f0a2-484a-998a-ebe9ed744add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:6d:eb:43:0f:6e:d1:a2:b6:bf:75:62:41:
                    ef:64:9e:78:d8:74:b7:f6:05:5e:e9:c4:22:82:5d:
                    e0:50:c5:64:c7:32:88:ac:04:4c:7b:38:ac:c0:64:
                    fe:0b:3e:d9:5e:ae:10:cc:50:46:ed:5a:a9:fb:99:
                    d1:1e:c5:c7:19:0a:aa:1b:78:c6:bf:3e:d7:fd:f6:
                    1c:04:cc:1b:ea:6f:24:8d:b6:e6:0a:83:78:03:25:
                    30:dd:37:59:a2:98:b1:b1:50:7e:2a:7a:8c:b0:5e:
                    28:ce:1c:ca:78:8a:07:45:1c:ff:8f:63:df:55:9e:
                    1d:33:d4:27:8f:cf:40:86:60:3d:12:fa:91:1d:44:
                    41:9f:20:af:5d:0b:b7:c3:e5:b5:34:c2:34:19:34:
                    d9:92:e7:b9:03:1e:21:ce:6f:2f:64:c8:23:9f:25:
                    74:81:df:36:be:09:7c:34:82:0a:b6:24:f7:c7:e9:
                    53:ee:b0:3f:db:ca:73:83:25:36:c9:13:61:4c:9e:
                    43:46:94:1f:69:0c:31:00:1e:cb:12:0a:a6:90:86:
                    4b:24:ff:f7:6a:be:82:cb:1d:44:d0:84:15:78:cb:
                    09:f9:67:48:ab:c0:c9:5e:fa:3a:57:fe:72:35:38:
                    d1:ca:9e:f7:5e:d8:97:e3:04:2e:34:45:a1:7c:27:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:9D:D6:83:51:CE:B2:58:E5:BC:F4:86:F7:AA:1E:23:94:23:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25b27c9-5b7c-3676-acbf-a7969783dde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:c5:79:b7:28:61:a6:42:d3:02:50:f1:fc:71:4d:9f:96:
         c4:fd:4b:91:88:11:3f:bd:47:9e:19:5c:b1:2a:85:10:b5:7d:
         ee:86:53:48:f8:87:88:3e:03:b9:62:05:57:5c:8f:ab:6e:77:
         f7:7c:04:ab:1d:07:30:8d:6a:25:4c:40:dd:82:22:d4:3f:c2:
         61:07:5e:2f:fb:18:70:57:cd:03:a6:61:b4:a7:3f:6d:33:8f:
         07:c0:8e:b3:2e:42:f4:56:1a:85:ae:fa:c0:4c:7a:f7:ff:c0:
         b7:4b:e6:86:67:4f:3a:37:d2:3e:b0:9c:14:d2:9a:2f:5b:12:
         4a:db:90:22:d4:da:42:96:63:79:99:09:58:5f:51:73:8b:1c:
         7f:87:e1:aa:1c:16:93:ae:9a:fe:b7:82:16:45:cd:e2:ef:f8:
         c7:fe:aa:50:27:26:a2:1a:ed:09:d5:56:d1:bf:23:f5:b9:d1:
         b4:ba:ad:32:20:af:d2:28:dd:56:a9:9e:82:50:b3:4d:dd:ae:
         d3:ed:95:7b:e6:af:c9:97:99:d7:a1:dc:f6:98:06:e6:47:74:
         6b:a5:aa:ee:f1:e9:61:a1:88:75:8c:f0:10:df:54:87:86:6b:
         70:12:4e:2d:43:66:62:26:f4:69:e9:c3:f3:b8:4c:e9:1b:4f:
         a9:67:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:54 2025 by rpki-client