Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b28e8856-5a69-3c17-be33-87d4ee4aec5d.roa
File:                     b28e8856-5a69-3c17-be33-87d4ee4aec5d.roa (raw, json)
Hash identifier:          DpEChPGw5QOL1JMVLU8XoXGVIQz1NxyQwphF79Iy6fs=
Subject key identifier:   5D:3C:D0:D5:A0:8B:1C:FC:71:56:6D:8B:28:9A:22:B2:FB:6F:58:72
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA4BBB40726BBFE4ADB4CFC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b28e8856-5a69-3c17-be33-87d4ee4aec5d.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        76.205.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:bb:b4:07:26:bb:fe:4a:db:4c:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=ee0be240-17a4-4364-91de-f544254ebc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f9:7c:f7:ec:03:b9:5c:58:9e:a2:95:d1:a7:
                    d3:0b:91:a2:a4:6e:c4:00:28:87:6a:5e:b6:0a:83:
                    cc:3e:72:00:2d:63:02:8d:3c:9f:e2:f1:62:fd:99:
                    9f:68:c8:26:86:e6:2e:7f:5c:df:20:b3:b2:52:f6:
                    d7:ce:3c:fe:5f:eb:50:a2:23:a0:d2:63:ab:43:56:
                    6f:5d:73:1e:21:33:e7:25:9a:4f:45:75:af:85:31:
                    41:e9:c3:d2:43:05:8b:c2:e3:bf:00:3b:cf:b8:df:
                    04:33:c9:f3:96:51:02:1a:fb:1f:f7:34:c5:f4:dc:
                    82:00:09:c8:c3:bf:28:ea:4d:51:2f:08:2b:dd:20:
                    d8:f2:a2:fe:ab:32:4c:a4:f4:b4:fa:c1:f0:4c:73:
                    9b:fb:38:40:30:a5:f1:3f:de:21:6a:28:12:30:e4:
                    21:a8:d1:00:ac:d0:c8:87:06:c2:ef:d7:5f:63:e1:
                    72:9b:fb:b4:51:71:c4:fc:da:e5:ae:e5:ef:4f:26:
                    8f:ad:e6:54:59:b1:69:3c:43:d2:6d:ff:54:92:07:
                    1c:a7:29:04:ea:b5:79:75:ef:14:16:a2:bd:8c:6f:
                    a0:e8:69:7c:88:7d:6b:4e:a9:3a:e6:cf:81:ba:2f:
                    7a:62:3c:68:ac:52:47:21:5d:2e:bb:67:32:fd:23:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:D0:D5:A0:8B:1C:FC:71:56:6D:8B:28:9A:22:B2:FB:6F:58:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b28e8856-5a69-3c17-be33-87d4ee4aec5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.205.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e6:95:8f:32:84:ce:19:ec:f9:e7:80:32:70:d1:0b:b9:40:
         ce:ee:db:02:6d:d6:62:81:6d:37:2d:71:f5:65:4b:76:8d:64:
         c1:ff:8e:a2:4d:4e:dc:39:3a:ba:d5:01:7e:de:1e:4e:7f:c4:
         65:6c:56:86:15:e7:eb:22:59:71:2b:48:4e:98:19:5d:63:ec:
         95:18:cb:33:ac:1c:ff:95:f7:a4:b2:06:46:53:b5:31:d1:2b:
         d9:fc:03:a7:26:b8:3d:d0:36:ab:aa:ae:36:e3:a3:7d:34:30:
         0a:54:f1:17:c6:14:9f:06:50:7e:6d:bd:03:2a:50:45:a4:31:
         15:49:14:25:f3:71:44:af:8f:b9:96:ca:76:0f:4c:1a:01:9e:
         ec:28:9f:e2:7b:3d:d9:a1:c3:08:5e:5c:41:0f:63:b6:a4:d5:
         a7:2c:72:7b:bd:4c:d2:f1:e8:dc:ff:d7:71:90:36:8a:59:7f:
         48:b2:36:c1:8c:94:6e:49:4a:92:a8:44:32:f1:d4:a4:b8:9a:
         c3:9a:f5:96:84:98:d7:11:45:bd:98:37:cb:78:04:37:30:02:
         9f:44:1c:7d:27:23:1d:75:67:09:ed:8b:a3:65:41:0f:01:e7:
         aa:44:ef:b9:98:2c:52:78:39:04:d9:45:3e:75:c6:8c:d2:95:
         f0:45:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:15:16 2025 by rpki-client