Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b903c9fd-9f1e-3c18-bf66-3dcad81b06ae.roa
File:                     b903c9fd-9f1e-3c18-bf66-3dcad81b06ae.roa (raw, json)
Hash identifier:          ImKEZ09zVAoYUEn9eDa/QtyDXpWjG3ti+o53FNA568o=
Subject key identifier:   19:C3:84:C6:29:BE:9F:0A:7F:3E:80:2F:AE:D2:F3:5E:89:5D:72:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E44DBA015A4C7CB1BF4A5CCE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b903c9fd-9f1e-3c18-bf66-3dcad81b06ae.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:db:a0:15:a4:c7:cb:1b:f4:a5:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=32fc41e9-26fc-4488-9a1c-65795fc7f0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:c2:4d:db:06:60:6b:3b:44:36:12:b4:b3:
                    5f:df:74:2f:58:5f:38:cf:61:98:a6:e5:5f:c8:a0:
                    4f:a3:f1:54:fc:28:66:82:df:f0:7e:01:63:07:91:
                    7a:27:25:b5:ef:4d:99:91:8c:ea:86:4f:ed:54:a1:
                    6b:f1:67:a3:77:68:b8:d4:55:fe:86:f3:66:a6:cd:
                    a6:b1:a9:22:f2:68:93:1e:2c:6f:8d:78:27:88:58:
                    81:6b:9a:02:70:4c:6c:9b:c0:67:96:11:d2:3d:19:
                    32:f0:c9:aa:10:ac:24:ec:af:87:d1:5a:a4:12:71:
                    fd:72:88:66:53:14:31:b5:3a:f6:80:67:de:56:dd:
                    9c:27:07:3d:f0:c6:f9:7c:05:b2:87:2a:8b:cc:78:
                    b9:ed:07:68:5b:56:09:47:af:2b:aa:4d:eb:3f:44:
                    18:28:a9:15:cb:a3:cd:b9:2c:aa:c0:72:82:3e:7c:
                    63:0a:ea:fe:0f:47:d4:1f:90:77:c1:f7:d8:b8:28:
                    68:44:6e:3b:5b:5d:53:de:3d:46:94:76:ee:b6:65:
                    1f:33:e8:b7:30:85:68:f7:bc:7f:ab:9f:d6:8a:dc:
                    af:74:d7:60:cf:d1:16:07:25:f2:ac:f9:36:ae:56:
                    bd:45:d3:19:97:05:4a:a7:72:21:0e:02:37:37:86:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:84:C6:29:BE:9F:0A:7F:3E:80:2F:AE:D2:F3:5E:89:5D:72:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b903c9fd-9f1e-3c18-bf66-3dcad81b06ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:76:56:e6:bf:6e:53:94:58:a9:3f:da:42:03:b9:12:6a:ac:
         30:69:88:cf:77:6f:c5:6f:cf:af:96:8f:d0:40:23:56:b6:ff:
         b6:29:7c:bb:f9:d7:9b:69:13:71:cd:c0:d3:01:66:3e:d6:c6:
         7a:26:ec:b5:4a:5b:37:a1:52:7a:79:2f:88:53:ec:b5:4c:34:
         64:b3:a9:53:3d:5c:f9:59:e5:9a:77:e4:64:c8:b5:15:e0:6e:
         ee:d9:60:7f:f6:66:78:2f:84:2f:0a:fa:1a:cd:6c:3d:28:38:
         a2:1b:97:19:25:88:3c:70:8f:e5:a3:49:c8:f3:df:cd:f0:f8:
         b0:59:fc:70:e8:73:00:2b:28:d1:60:35:ae:89:19:b4:fc:86:
         1c:6e:04:ef:f7:a7:af:98:b4:4c:64:b0:82:b2:b0:48:7e:f2:
         7a:20:26:40:a4:5b:1f:78:71:9f:f2:2b:3e:2f:d9:8d:15:d9:
         0f:84:35:ff:2c:0e:6b:71:52:4a:bb:d7:c9:30:e5:24:92:42:
         f0:b6:dc:b4:c7:26:4b:25:af:cc:ba:3d:d5:5a:c6:e0:31:6a:
         90:b0:d6:0c:49:92:86:68:a4:b9:32:b2:ef:8c:ef:1f:2e:07:
         6a:42:ae:60:71:ce:90:cb:09:b8:f5:b1:28:f6:4f:ed:66:7e:
         5a:09:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:14 2025 by rpki-client