Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb98ca9-0779-33da-92a0-a172afbe2f86.roa
File:                     beb98ca9-0779-33da-92a0-a172afbe2f86.roa (raw, json)
Hash identifier:          vWjeXVilRXnldZbUg2PHJXzW9euUx6jmLzSgCTa5nZI=
Subject key identifier:   7E:28:13:04:4D:AC:43:15:4C:3F:D4:83:BF:5A:3E:3A:FA:DE:49:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCB77EA3093076D2C797755D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb98ca9-0779-33da-92a0-a172afbe2f86.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:77:ea:30:93:07:6d:2c:79:77:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=d05e726a-6e00-458a-b6c4-1de9535891cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:e1:fe:3c:9e:66:92:79:eb:9a:77:16:10:
                    f5:9b:30:be:b4:95:74:7a:62:5f:cc:0f:70:97:71:
                    de:92:09:37:f7:3d:f3:29:d6:cc:b4:aa:05:02:44:
                    52:ed:38:53:7b:18:1c:cb:d6:8c:c4:f3:0a:4e:1a:
                    9a:14:d3:f6:c0:b9:17:75:e5:d9:d6:d6:fc:83:9e:
                    b7:21:78:a3:f3:10:56:cc:4c:bd:1b:3c:1a:e5:96:
                    44:fb:f6:5e:66:8b:b9:f4:8f:1f:9d:1b:3c:70:8b:
                    f2:52:ec:1f:72:b0:2d:cc:bb:2d:34:90:11:6d:1f:
                    e4:80:eb:cc:84:39:77:ca:17:dc:f7:61:3d:06:d3:
                    d4:7b:88:2a:9f:11:10:ae:9d:e3:4d:83:a2:c4:1d:
                    e4:8b:d6:32:04:de:b4:3c:6c:77:b3:8e:10:be:78:
                    c1:e3:1c:f5:f3:49:4a:3c:6f:4f:03:d9:59:c5:6a:
                    29:39:c2:07:e1:33:05:9d:d2:e3:7b:c7:60:b0:e8:
                    74:96:f1:ae:51:34:43:3a:4c:a2:9c:4b:5a:53:89:
                    69:70:d1:05:f7:94:a5:0e:c7:fb:0d:23:33:1e:57:
                    82:6e:35:4c:7e:16:84:11:02:08:bc:45:7f:0c:6a:
                    86:2c:77:af:8e:a5:11:7c:3c:1a:84:e7:8b:0b:e3:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:13:04:4D:AC:43:15:4C:3F:D4:83:BF:5A:3E:3A:FA:DE:49:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb98ca9-0779-33da-92a0-a172afbe2f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:25:89:f2:0b:89:42:d5:f0:ab:41:a9:4e:a5:4c:a8:d5:
         e6:45:ac:25:a2:cf:fa:45:20:2b:c1:bc:8c:ca:59:3c:f5:d8:
         11:0d:68:be:89:bb:c7:7b:60:a1:fb:17:bc:b9:ff:8d:3c:b6:
         3b:bb:ea:0e:e9:31:49:36:28:82:2f:de:01:6c:cf:99:be:4a:
         f7:04:8c:69:a2:9e:63:ba:27:78:24:7e:2d:e1:3e:16:50:55:
         dd:fb:ca:e5:f1:f1:78:bf:b8:15:c0:62:5d:f1:47:2c:ae:5c:
         dc:82:d9:d1:59:46:fb:e3:d8:d6:6d:6b:4e:25:f0:12:ad:b3:
         08:88:d9:f9:ba:fb:5d:68:3a:0e:55:0d:d2:3e:e2:7a:d6:cd:
         ea:d6:c0:66:91:43:0f:68:b0:aa:49:6e:66:dc:57:8d:28:63:
         9e:27:4e:c4:54:31:66:14:ed:9e:f5:35:2a:1c:a9:30:99:74:
         4d:0d:bb:b9:28:df:a3:fa:f1:2b:b0:00:cc:dd:58:b4:c8:19:
         5c:bb:c1:4f:cd:d1:df:fa:18:e1:b4:1a:d9:c6:b7:e8:f3:a0:
         4d:ab:02:8f:7a:ce:3a:38:78:62:87:ed:ac:70:33:63:08:a0:
         1c:da:90:87:fd:6d:c1:de:c0:59:fe:10:b6:fa:36:9e:c2:c2:
         a2:4a:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:22 2025 by rpki-client