Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b36c08ac-b1ec-3478-8f60-d36013467902.roa
File:                     b36c08ac-b1ec-3478-8f60-d36013467902.roa (raw, json)
Hash identifier:          UfJqsP8CFh7X8Obd3cID8kXGW41M+b8V5qcO+f2njNE=
Subject key identifier:   73:6F:7B:C0:10:35:20:D4:9B:B9:36:17:2E:93:94:B7:E4:8C:62:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDA37AA490942168F06FCF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b36c08ac-b1ec-3478-8f60-d36013467902.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        72.44.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:a3:7a:a4:90:94:21:68:f0:6f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=e93046c4-7331-4b14-b1d8-580865390174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:71:28:f6:d0:ab:f6:2b:47:22:bb:7a:e4:
                    13:bd:54:a3:a4:10:1c:de:8b:38:0a:db:e2:20:55:
                    65:3e:d0:7d:bd:a6:bc:af:ba:a1:4b:b0:00:44:93:
                    e8:7a:56:7c:44:48:90:a7:3d:91:a4:9a:4f:8b:b9:
                    da:7e:7d:83:1c:be:f3:22:86:87:fd:07:cd:e6:de:
                    25:76:42:70:37:ae:7c:82:1a:74:d2:65:01:9f:98:
                    27:1c:b5:d6:89:2d:af:f2:bb:ed:ab:60:88:37:be:
                    75:35:b7:e8:bd:77:76:d5:05:71:8e:f9:58:cf:de:
                    83:88:94:d3:5d:ad:5d:cf:1e:c0:a9:19:2e:84:73:
                    1d:61:ef:66:94:5e:ce:be:29:32:92:c4:e0:7d:57:
                    8b:d3:24:c8:5c:2d:94:7e:cd:9e:7e:f4:ff:2d:3b:
                    63:d2:84:22:50:1a:26:27:b7:17:7e:b8:1d:f7:ef:
                    39:9c:4e:5a:2e:66:85:48:b7:47:37:42:0a:5b:ec:
                    60:75:d7:63:af:9e:46:90:b1:96:14:54:23:5b:fc:
                    8e:93:59:88:80:11:ca:ee:c0:dd:3f:05:83:40:23:
                    1c:e2:4f:28:5b:e0:ea:3d:0d:29:4b:9b:d5:45:c9:
                    f7:36:df:85:03:b7:3c:12:37:0c:9e:d5:dc:3b:d7:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:7B:C0:10:35:20:D4:9B:B9:36:17:2E:93:94:B7:E4:8C:62:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b36c08ac-b1ec-3478-8f60-d36013467902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:b5:6f:13:09:bd:67:11:98:56:49:4e:88:df:d2:ab:46:
         74:ab:c4:a7:f4:44:52:02:15:3c:a5:53:ef:dd:55:7e:1c:cc:
         d6:d8:80:74:2b:ae:02:49:27:9e:30:4e:8b:72:f5:f3:bf:75:
         df:ce:c5:69:d2:d1:66:86:0a:ed:e4:2d:87:d9:d8:ea:d2:5f:
         57:a6:6d:a7:1e:21:52:46:41:bb:70:2c:34:ff:fa:89:4d:cd:
         68:24:f9:7f:f4:38:dd:7e:00:f0:0f:ec:91:ae:99:20:db:36:
         64:55:a1:b2:23:cf:16:b6:13:1d:52:4a:78:61:d9:21:cc:0c:
         c1:50:67:ca:f6:ca:53:4d:9e:57:8f:91:3f:e0:7c:b5:b5:8e:
         ed:e3:46:a5:81:03:6f:5c:44:8b:3e:60:2c:cf:8e:ea:cf:4f:
         6f:4a:f1:a8:3a:36:b6:e9:4d:be:df:41:73:8e:04:d6:eb:2f:
         4f:56:ec:20:4e:48:f0:95:9e:07:f5:8b:c6:1c:f3:53:2a:fa:
         79:aa:4b:71:aa:ac:f5:b9:22:b4:d2:8b:4d:e5:65:17:34:bf:
         ee:b4:7f:61:31:90:ef:48:02:95:41:2d:8d:d5:06:b5:b3:73:
         bc:b6:89:02:72:82:3d:53:71:6a:79:38:ba:22:8e:9d:00:2f:
         b2:e6:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:56 2025 by rpki-client