Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b73ff0cc-5434-38c9-9b06-d6bb73be6d06.roa
File:                     b73ff0cc-5434-38c9-9b06-d6bb73be6d06.roa (raw, json)
Hash identifier:          Nlu3VmjRkDRuajDu8mx1iU0MpZrET2EYnYN81AGJLhw=
Subject key identifier:   4F:AC:04:A7:85:24:66:9E:21:B1:93:BF:98:57:31:81:51:0F:7F:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C97051029231EAFDA7140FEB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b73ff0cc-5434-38c9-9b06-d6bb73be6d06.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        208.86.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:05:10:29:23:1e:af:da:71:40:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=eab2f9db-c05d-4d0f-87ad-632eeef64bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:a3:c2:f4:85:b6:03:f8:50:28:fc:40:d9:
                    cb:ca:ba:23:94:2c:b1:6c:cb:e2:8d:af:84:4f:e6:
                    7b:81:e8:d5:6b:09:68:d0:85:4d:f1:30:2e:c2:6f:
                    f9:4e:b7:13:6e:74:14:73:dd:c9:56:9f:e1:c0:2c:
                    06:64:d3:7a:7f:b7:d3:90:0c:51:3c:7a:6c:d9:df:
                    66:ee:16:14:91:e2:06:84:82:59:99:88:b2:85:4a:
                    95:ae:10:c4:83:f7:8d:55:b9:7d:03:6f:e0:6d:e1:
                    9d:26:b4:45:69:1c:37:58:77:19:3a:7a:ee:ac:2d:
                    48:62:fb:aa:7b:57:50:4b:ea:2b:ce:38:60:9b:3b:
                    62:fa:c7:1f:9f:94:38:e9:66:16:dd:ef:50:03:8b:
                    9e:33:34:81:0c:46:88:19:13:80:d7:57:53:59:43:
                    cc:27:b6:e6:1e:8b:3e:a8:2e:6c:84:31:34:50:0a:
                    b9:14:fa:d3:77:c0:7b:f7:03:54:98:ed:bb:4a:28:
                    87:8d:17:cd:0b:3f:2d:7c:63:c3:e8:f7:0e:aa:4e:
                    b5:8c:e9:96:c6:15:0f:b9:f0:65:63:3f:6a:27:23:
                    1c:44:ce:14:ed:8c:0a:16:c3:39:80:7c:22:4c:b5:
                    a2:5c:fc:f9:77:75:9e:7c:5c:af:5b:96:de:03:7b:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:04:A7:85:24:66:9E:21:B1:93:BF:98:57:31:81:51:0F:7F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b73ff0cc-5434-38c9-9b06-d6bb73be6d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:d1:8f:a6:d9:88:a0:4a:49:18:0e:a0:9d:53:47:e6:9a:
         a1:8c:58:18:17:62:7b:bd:80:8b:8a:fc:8d:5c:d5:0f:1c:b4:
         d2:40:2d:cd:97:d3:2d:d7:f6:2a:8b:f0:7d:e9:c0:c4:26:e6:
         8b:3c:96:81:8a:36:af:55:6e:ba:5f:da:44:06:ea:b2:53:be:
         a9:46:96:52:3e:97:6e:d8:8f:31:c4:1d:b6:16:ba:ae:09:04:
         25:d8:cc:b8:58:ad:86:cc:94:43:be:40:b9:f6:e0:23:fa:05:
         5b:98:8e:38:d7:aa:0b:3c:18:f4:4c:48:42:d6:ca:ac:23:9f:
         ac:a3:35:be:d7:c9:14:9e:c2:c3:d9:20:43:e9:1c:c1:03:11:
         8b:58:06:87:cb:40:c8:c6:2c:96:21:73:96:d9:a3:aa:a4:61:
         1f:9d:21:22:78:40:cc:28:9e:d6:0d:1b:fd:82:7f:d8:2a:8a:
         21:36:62:f1:ee:74:1a:6e:73:60:be:41:6f:f7:e5:3a:a8:ec:
         10:9a:4d:27:d0:fa:3e:1d:3d:89:c2:20:d7:7e:e6:93:f7:70:
         29:8f:a0:50:1f:4a:61:b3:8f:44:9b:59:33:d2:48:b0:c1:36:
         d7:57:c4:41:ae:8c:5e:1b:8a:d6:ab:94:04:c1:99:1d:7f:47:
         c3:21:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:40 2025 by rpki-client