Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ffb073-c1ca-3966-bded-e2ffb80e4c6c.roa
File:                     b8ffb073-c1ca-3966-bded-e2ffb80e4c6c.roa (raw, json)
Hash identifier:          M6oZMEs7Q3bqvDRiKzQHc/vVy4UNz6MwTbgxK12JkPU=
Subject key identifier:   22:7C:2D:3B:F5:FE:A8:1A:36:99:7B:72:E8:D4:09:85:97:18:E6:9C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE49B529AB57BF3BA230BDB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ffb073-c1ca-3966-bded-e2ffb80e4c6c.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        63.32.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:9b:52:9a:b5:7b:f3:ba:23:0b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=a1352bc8-c07a-4a23-a035-5037a49f811f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:3d:02:d3:1b:09:e2:06:26:84:2f:e3:68:
                    50:a7:92:9a:5d:d0:cc:5e:fe:f1:3d:1d:cb:62:f0:
                    be:aa:51:99:82:8d:4c:37:74:e0:1e:6c:be:a5:70:
                    ab:d0:fb:19:90:86:13:54:8f:d0:00:38:24:ba:2e:
                    30:b3:01:a0:c9:11:fe:7a:25:1a:b9:37:1e:19:05:
                    93:61:82:20:d0:f7:7c:bd:7d:5a:8a:8b:ae:87:1b:
                    d4:d8:16:53:70:22:cc:f4:99:7a:c2:ab:b4:8b:c3:
                    ec:a2:d9:a3:17:c7:66:6f:ac:2c:83:5a:a3:58:8c:
                    08:f8:08:06:e1:31:6c:ee:eb:df:da:39:c7:26:c3:
                    c0:2d:40:72:55:d5:f2:e9:b7:bc:84:46:61:e8:bb:
                    5c:43:54:6b:05:ad:a2:f4:70:1a:fa:91:19:6a:2e:
                    f9:53:f9:1a:78:14:7c:7d:41:64:57:04:6c:a0:8a:
                    62:f2:f7:05:a0:36:c4:29:94:b3:3d:82:5f:fb:45:
                    4b:60:06:35:e6:37:a8:5b:40:19:af:16:a1:11:4b:
                    e8:ae:4c:80:ee:4f:f8:29:8a:3f:cd:96:67:0b:70:
                    5b:ca:7c:8a:d5:a5:23:70:c1:3a:c8:fc:3b:1d:59:
                    23:c8:9d:97:ba:fa:6f:30:37:2d:58:5a:d2:fc:81:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7C:2D:3B:F5:FE:A8:1A:36:99:7B:72:E8:D4:09:85:97:18:E6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ffb073-c1ca-3966-bded-e2ffb80e4c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:f4:f1:2f:fd:4e:a1:9b:b8:c6:f1:02:9a:23:ed:ac:24:
         56:50:b4:16:e3:5f:cc:04:c8:0d:94:33:c3:42:73:29:6b:65:
         7f:30:cc:ab:06:41:3c:57:c9:e6:a4:01:ad:f6:6e:e4:b2:c7:
         32:b5:d9:88:21:38:0c:57:12:17:98:ec:8f:02:e8:29:f8:29:
         e4:16:87:3a:1b:ec:f4:44:01:b1:5c:2f:50:6d:21:01:c8:ab:
         bd:17:1c:f4:29:2d:db:ef:53:d5:df:21:0a:a1:bf:9e:a8:c4:
         1a:34:29:82:bd:2f:96:77:62:63:05:70:7f:e8:ea:a4:bc:00:
         50:71:5a:d3:fd:4f:e3:9e:fa:47:c0:b0:c3:59:b1:35:b8:71:
         74:f4:3d:c1:49:71:3c:05:3d:61:63:24:42:d6:6c:f0:cf:8a:
         6f:be:f6:6c:32:ed:9e:95:cc:fd:a2:6e:3a:b4:81:99:af:8c:
         e9:ee:a9:5a:1b:03:3f:d3:82:41:24:ec:1a:50:e7:2f:7d:98:
         a6:6d:1d:a8:fb:fa:cf:05:5f:0d:0a:3b:ba:b6:66:3f:e6:b4:
         86:00:47:79:22:45:78:b2:56:30:90:6f:74:fb:2a:f1:3e:f7:
         9f:67:8a:25:7e:06:50:0f:a6:c7:d5:8e:16:1c:92:7f:4c:78:
         66:04:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:17 2025 by rpki-client