Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba89b74b-088b-35d2-9624-b60da84a00a0.roa
File:                     ba89b74b-088b-35d2-9624-b60da84a00a0.roa (raw, json)
Hash identifier:          mCMIQ4e4QmVmo1DfZvDXRHcGBT0Z6/HdchZRp712Kf0=
Subject key identifier:   FD:D6:2A:CB:F9:35:29:35:E3:8F:40:FF:CC:42:52:0E:88:F1:66:C7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE53E7F0E0A854070C4B7B400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba89b74b-088b-35d2-9624-b60da84a00a0.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        207.207.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:3e:7f:0e:0a:85:40:70:c4:b7:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=3f6e265d-348b-4828-8de4-1bbe79b11363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:73:3d:7f:22:1b:2b:fe:f5:fd:40:fe:84:
                    c1:8f:d8:b0:0f:e7:74:87:eb:83:23:8f:0e:79:21:
                    a8:bd:92:4d:69:39:e0:9d:b4:0b:bb:a4:05:db:ef:
                    a0:de:33:00:ba:d9:07:73:9c:98:e5:54:cf:71:d3:
                    01:37:30:89:c3:10:1c:22:44:8c:e4:ab:b1:fc:03:
                    43:9e:b2:69:8f:b6:8e:cc:9b:79:7f:b6:bc:30:21:
                    59:10:61:c6:4e:78:f9:93:d0:5d:b9:cb:7b:bb:e0:
                    f9:36:ce:6c:2d:cf:a5:3c:69:c3:1b:db:97:15:8d:
                    d7:eb:70:10:b1:7c:10:84:fb:f2:43:25:2f:ea:24:
                    52:1c:50:50:95:be:cf:44:97:5f:8f:4f:63:0a:af:
                    4a:4e:52:60:20:91:5e:bf:fd:42:bd:66:33:6c:c4:
                    c3:26:d4:ec:4b:15:08:5b:ee:fb:db:02:41:9a:96:
                    58:06:fd:f4:a7:b3:37:fa:ab:5e:67:2e:aa:dc:1e:
                    f9:c8:ba:08:24:38:e8:19:b4:00:ab:6e:f4:d8:c6:
                    83:ae:c8:fb:56:06:24:16:08:13:dc:6e:6a:9f:05:
                    2b:7d:7b:20:6b:58:fb:a0:f7:d3:d3:45:bf:8e:2f:
                    57:4c:21:37:d6:bf:f3:67:ad:99:ba:ec:f9:14:e0:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:2A:CB:F9:35:29:35:E3:8F:40:FF:CC:42:52:0E:88:F1:66:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba89b74b-088b-35d2-9624-b60da84a00a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:a8:28:5b:18:a9:e7:df:59:9a:70:e3:30:ae:56:47:c5:
         cd:51:33:5a:82:8e:48:64:6c:d4:dc:b1:9e:92:a8:a9:38:5b:
         7c:ae:60:ee:d2:25:e6:1b:02:0e:90:5e:d1:bf:b4:e1:18:21:
         5f:1b:f7:56:c7:cd:a3:7b:43:37:8b:0a:f0:17:11:95:74:fe:
         2a:d6:8d:dc:68:4a:b8:63:54:f0:d9:a7:08:a9:a2:f9:a1:b7:
         46:a1:27:e8:ce:aa:76:3e:32:de:8c:7b:67:cc:b9:cb:b6:37:
         53:8c:50:8a:2d:8b:d7:80:b6:31:e7:35:82:f0:95:9f:1b:c4:
         2a:05:0f:6d:0d:60:12:19:b8:32:4b:0d:4f:8c:08:45:6e:48:
         88:fd:0e:0f:50:93:de:53:db:c7:b6:3d:85:fa:33:c4:47:83:
         d5:b7:da:0a:f0:1a:54:23:19:71:47:74:84:54:db:6e:b6:63:
         74:ee:b0:96:fc:dc:53:4c:f6:df:e0:02:9c:fb:d0:05:5e:c3:
         8b:77:da:d1:52:3f:fb:34:05:cd:f5:dd:3d:58:c3:46:10:b8:
         59:01:78:5b:60:a6:a8:05:e8:3a:3c:09:6c:8d:ec:49:8b:65:
         5c:ff:32:3d:84:76:ac:b4:0a:c0:37:d2:e3:14:cb:c5:0e:87:
         16:75:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:54 2025 by rpki-client