Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be47e1b0-4d86-3344-90bd-259bfe83095a.roa
File:                     be47e1b0-4d86-3344-90bd-259bfe83095a.roa (raw, json)
Hash identifier:          26ioKr5etRE5HGDlXYK6kSozVah7vglU8unZC0rBNwM=
Subject key identifier:   32:46:7A:0C:A2:2C:72:74:3A:F1:24:46:A1:EF:2D:58:FC:9F:06:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD12573814F01F3943D9B4D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be47e1b0-4d86-3344-90bd-259bfe83095a.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.236.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d1:25:73:81:4f:01:f3:94:3d:9b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=eb842129-f8bb-48bf-94ee-2138c37d19b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:25:ca:75:b3:9d:4e:eb:86:3c:fd:3b:4c:
                    39:9b:21:0e:79:11:0a:56:01:15:4a:11:a5:2b:6a:
                    bf:80:e1:f2:2e:02:79:ab:62:24:83:9e:ae:37:a1:
                    1d:f2:d2:50:e8:89:75:c7:cc:77:29:49:12:e6:4b:
                    65:2e:4b:b8:24:9d:ca:b2:6c:8c:9a:4c:08:c9:36:
                    da:dd:fb:31:0f:33:21:8e:35:c8:82:ea:47:1e:bc:
                    29:aa:69:d3:24:97:89:c4:08:bf:6f:a5:d2:90:6d:
                    c2:eb:9e:45:ff:5d:a6:e0:08:64:35:6f:ae:2f:5c:
                    eb:e5:cf:c2:4c:81:10:98:c4:86:80:6a:21:e2:53:
                    62:5d:0b:85:02:74:0e:f1:54:f6:e7:f6:5d:96:76:
                    c3:78:29:e8:72:a1:81:55:b6:02:7e:70:dc:74:a8:
                    6e:e8:b2:29:63:33:ed:dc:f8:67:d2:de:a2:f0:03:
                    12:f8:dc:0a:c1:3a:f9:d1:d8:aa:2b:d4:da:c4:e6:
                    7c:d0:20:68:59:8a:ad:d9:61:da:00:d5:88:8e:ae:
                    8f:d4:8a:04:b3:75:e0:29:87:6a:2f:a3:be:1c:a1:
                    e7:b6:bd:26:0b:6d:2e:ac:cf:c5:98:ce:06:88:a0:
                    73:3f:27:e6:1d:fb:4f:61:7f:e9:1b:d7:66:52:62:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:46:7A:0C:A2:2C:72:74:3A:F1:24:46:A1:EF:2D:58:FC:9F:06:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be47e1b0-4d86-3344-90bd-259bfe83095a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:46:e4:a6:5f:93:1e:7e:e2:6f:0d:19:31:62:1d:01:dc:2b:
         d1:b1:62:c4:c1:d8:e5:88:c0:4f:28:40:f6:0c:f1:3f:ff:f8:
         d9:4c:23:df:c4:17:b7:c7:7f:b0:8a:7e:b7:03:c8:8d:04:bc:
         3a:c8:f4:78:57:04:f9:9b:2c:ba:a3:86:bf:ec:cd:8e:04:05:
         b1:d9:da:44:32:df:2d:87:f9:c0:c7:20:7f:15:15:f3:21:1a:
         dc:8d:d2:62:89:8f:ae:62:87:b9:eb:72:76:18:a4:3f:62:4f:
         d1:6f:85:78:98:7a:30:4e:0b:b1:89:82:7c:65:bd:a3:6c:08:
         0d:df:e9:78:7a:65:7e:89:26:c7:e1:c0:b2:f0:e9:ab:bd:0d:
         5b:95:bf:69:1d:ba:67:64:55:85:60:84:41:96:d6:8f:1d:9d:
         7e:35:2f:bf:23:ed:13:93:39:68:8d:d2:bf:46:c9:9a:5d:b3:
         54:e4:94:c2:a3:70:33:a4:80:00:35:63:ac:02:1a:0b:61:56:
         18:9c:27:62:4a:48:90:72:ef:e5:f9:17:0c:ff:b4:b4:a0:50:
         5a:9a:05:56:b6:b7:76:99:5b:59:23:cc:3f:ac:8a:df:78:59:
         4b:5d:36:60:5a:ee:25:6c:a6:bc:ae:fa:d3:48:95:fe:b3:2c:
         c2:64:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:54 2025 by rpki-client