Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58f6638-e386-3f5f-a0e5-f85521732ada.roa
File:                     b58f6638-e386-3f5f-a0e5-f85521732ada.roa (raw, json)
Hash identifier:          JA7OnJl/VhrP4YIG/zx4HVbhQUWLmiUDLxfj1RBqV7M=
Subject key identifier:   2B:AB:35:67:E3:CB:1E:62:39:88:76:11:D7:E3:77:BA:3B:56:FD:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDA36796B9998B44D77C0220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58f6638-e386-3f5f-a0e5-f85521732ada.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        75.45.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:a3:67:96:b9:99:8b:44:d7:7c:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=c087cb1d-8103-4311-a525-e72c1a7326cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:78:7b:e3:2c:74:c6:ea:96:e2:69:84:a2:
                    03:91:31:af:44:1f:f9:89:07:b1:58:c2:6a:8a:f6:
                    ab:78:81:d9:39:01:3d:7d:7a:74:19:89:1f:a1:74:
                    b7:93:93:fd:9d:17:d1:3a:83:77:0e:85:b0:7b:5c:
                    90:9d:b8:64:e2:4c:cf:18:e8:d2:b1:6e:56:87:f3:
                    d3:60:a7:1b:56:c1:5c:b1:58:a3:7f:cd:62:25:d2:
                    7c:ed:e3:48:f7:f4:6b:ca:69:51:3c:dd:62:5a:99:
                    7e:6b:88:7c:54:ea:75:ca:cd:cf:85:f2:13:dc:86:
                    6a:ef:c6:50:14:c3:1d:e0:1f:3b:97:5f:44:ad:ff:
                    6f:24:84:86:a2:f9:6f:c9:e8:9f:df:41:cc:04:3c:
                    99:ea:83:5e:f2:b1:71:1b:86:52:c0:91:fa:8e:9c:
                    54:31:cc:0e:1c:7b:8c:8d:c8:c3:12:46:ca:ba:4b:
                    32:02:4f:e9:c5:b6:d2:23:39:11:33:dc:79:7f:7f:
                    66:51:09:d0:27:6c:af:19:1e:33:92:e5:5a:2a:02:
                    2b:27:f2:9e:a8:e7:03:75:59:c3:48:41:1c:56:5e:
                    ee:a6:f1:fa:1e:de:65:0c:d6:44:c6:83:29:e2:59:
                    72:30:7e:49:a8:57:b2:ee:6d:95:c9:da:eb:97:93:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AB:35:67:E3:CB:1E:62:39:88:76:11:D7:E3:77:BA:3B:56:FD:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b58f6638-e386-3f5f-a0e5-f85521732ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:04:fe:99:d5:6f:94:ff:4c:b8:8b:7a:50:7c:61:e8:23:eb:
         dc:6e:fb:d8:69:74:74:3e:06:b2:86:bf:c0:55:45:b5:fe:87:
         cc:f2:5f:a4:f3:ff:12:ef:d2:8e:a2:64:36:f0:3d:e4:59:16:
         7e:32:d3:4d:72:5c:50:7a:12:b6:3c:52:7e:7e:06:2d:92:9d:
         74:eb:1d:84:a1:3c:7b:c3:9c:ea:64:8e:cb:ba:b0:e4:b9:77:
         41:5b:f3:35:75:b4:d1:b7:49:5b:71:b3:8d:02:09:7e:6a:8f:
         94:db:9a:ee:2c:09:6a:d6:63:f5:39:f7:b7:2d:5a:93:ce:b8:
         49:5b:db:b6:1b:c0:04:21:cc:a1:86:67:b6:d5:03:f5:a1:bc:
         35:1b:d2:2b:cd:8e:3f:b8:3b:fe:93:57:9f:11:c6:da:15:25:
         9e:51:fb:be:61:b8:ec:fe:e0:e9:f7:87:6d:f9:66:9f:21:cc:
         be:b0:e8:b0:b1:26:f4:4f:bc:54:89:c1:31:f9:5f:70:f0:6e:
         01:8c:38:9c:a9:cc:cb:e2:ee:86:5b:69:a0:8c:e3:4f:cd:27:
         99:46:78:b3:15:aa:b4:a3:5d:24:b1:3f:ad:c7:bb:89:8c:aa:
         23:3a:5a:7f:e6:f7:71:fc:da:4b:84:90:36:aa:67:cb:70:32:
         3e:a9:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:59 2025 by rpki-client