Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd55bf5d-61e0-3337-9ebc-ff6ff247c5fa.roa
File:                     bd55bf5d-61e0-3337-9ebc-ff6ff247c5fa.roa (raw, json)
Hash identifier:          7dqElFQEt0DXtzOAn31qeUBoCpGpxtP18EjMu5srhu0=
Subject key identifier:   D6:57:35:51:1C:C7:0D:A4:3B:05:FD:B6:C0:0A:46:B5:76:FD:BF:AB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBCA3DA27902956D8B37DF780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd55bf5d-61e0-3337-9ebc-ff6ff247c5fa.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.252.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:a3:da:27:90:29:56:d8:b3:7d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=f8135749-3c1a-4a19-bc2d-805c02449e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:65:c5:29:67:eb:ee:6c:0c:b8:d0:4a:a6:
                    72:f3:7e:49:27:7e:96:28:e4:34:0f:5e:b0:a2:f4:
                    13:b5:fd:32:ee:85:2b:79:85:d8:2e:4e:b4:66:84:
                    e6:c2:ab:90:53:d1:a7:14:70:2d:24:ab:39:08:b5:
                    50:d0:6b:2f:41:fd:5e:fa:0c:06:53:13:40:fe:4e:
                    03:aa:fa:58:b1:71:f2:12:a3:38:84:59:c7:f7:f0:
                    59:e3:30:93:2f:1b:75:ee:e7:16:35:0e:ca:76:68:
                    3d:d8:f6:f0:33:a5:16:ae:ca:9d:cc:d2:56:ee:38:
                    00:5c:a3:39:71:09:77:8c:78:25:cb:5e:9e:10:d1:
                    a3:03:26:2c:34:b8:20:69:31:d3:a3:7e:9d:cd:dc:
                    2f:05:b9:32:61:cb:79:1d:5f:14:78:32:8c:03:f5:
                    50:af:87:d2:b0:20:b7:6d:3f:69:b2:58:e5:a0:fa:
                    62:4b:2b:8b:60:9a:05:3c:57:01:be:dc:02:8a:53:
                    55:5e:c9:d6:eb:ab:fc:d0:63:b7:ea:b4:27:18:1e:
                    13:96:81:09:f8:cb:93:af:7a:27:ec:2c:03:f7:9e:
                    e5:51:79:f1:1b:73:e1:0f:c7:dc:a7:9b:8a:2a:57:
                    2f:cb:32:44:a1:f3:38:9e:4f:18:fd:ef:f0:a3:7d:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:35:51:1C:C7:0D:A4:3B:05:FD:B6:C0:0A:46:B5:76:FD:BF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd55bf5d-61e0-3337-9ebc-ff6ff247c5fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.252.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:9e:36:3d:4e:50:1c:5e:15:16:f3:99:65:c1:84:2d:d4:
         2c:a7:2f:e9:b5:41:5f:7c:48:60:30:fa:3a:00:1f:24:06:99:
         1f:3d:18:69:f9:f4:0a:32:d1:d1:6c:2b:e4:df:5e:ea:9e:f4:
         bc:1a:a8:97:3d:48:41:eb:c2:df:bb:59:51:4d:67:f8:8b:93:
         15:a2:8c:df:b4:4f:46:cd:9b:7b:d6:c5:29:d0:fb:e1:ad:ee:
         5b:36:2c:8a:f7:a5:86:27:83:ec:ec:c8:c2:ef:27:89:32:31:
         55:4e:4d:31:b6:ef:0d:1d:65:fd:e1:27:de:f3:40:17:b6:fa:
         02:57:4b:82:2e:96:be:fa:c2:85:b8:d5:38:2f:a9:a2:87:8b:
         fe:b2:0b:20:e1:d0:5b:bd:7a:ee:2a:30:12:9a:50:16:73:7b:
         b4:3d:f1:db:2e:be:2d:e3:6c:2b:69:3d:64:f7:58:b7:71:29:
         6f:42:98:3c:99:52:9d:bc:43:0a:29:c8:9b:4b:a4:5e:24:eb:
         89:e4:0b:9c:e2:ca:ff:88:5f:67:40:cf:1a:f9:52:46:35:bb:
         0f:5c:0b:9d:82:39:01:9b:0b:c1:1b:fb:ae:61:6d:d2:4f:27:
         0e:f6:0e:25:48:54:aa:ce:75:7a:12:95:64:e3:f1:5e:18:37:
         35:95:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:11 2025 by rpki-client