Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfce36e6-c4cc-37d0-97fe-9520f092a360.roa
File:                     bfce36e6-c4cc-37d0-97fe-9520f092a360.roa (raw, json)
Hash identifier:          plljZitQv+GG+j/upisevT11KvNxcW6iP4tbXD0QsxE=
Subject key identifier:   12:BD:71:B8:E2:54:FC:5F:EC:0E:3E:33:3B:10:43:20:7B:E1:A1:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95D146A9F19FC4652B4B2E24
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfce36e6-c4cc-37d0-97fe-9520f092a360.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.145.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:d1:46:a9:f1:9f:c4:65:2b:4b:2e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=6ef8ae95-095d-4340-ba15-44f7814e146d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:e5:15:a2:74:97:5c:6e:d3:e5:f7:ac:55:
                    ba:72:e8:44:68:84:68:26:10:52:1e:f9:b7:12:d7:
                    76:d7:44:7c:88:82:5f:e1:40:03:11:a0:0a:78:d7:
                    99:62:6f:0c:bb:cd:ea:dd:02:50:14:49:ab:76:6c:
                    28:a6:68:9b:f1:ba:4c:d4:58:4b:35:a7:a3:56:6c:
                    33:46:76:2c:c5:cd:d8:dc:25:6e:6a:fd:69:a2:84:
                    0c:31:31:b1:d6:c1:75:fb:54:43:e1:bf:2d:de:ba:
                    33:fb:aa:c3:63:9d:eb:8e:1e:f5:cc:0e:e9:47:6b:
                    50:9c:5b:ee:2b:05:82:52:71:e1:4e:15:a0:1d:b8:
                    14:f0:30:35:5a:73:3a:c6:e6:25:3d:2e:b8:be:fe:
                    2e:fd:16:b2:cd:62:f6:c4:2f:f1:65:11:10:75:48:
                    67:45:05:a4:16:23:48:68:a0:bc:32:d2:93:00:70:
                    45:ad:9a:99:53:9f:34:22:47:9a:f3:9d:f4:3f:65:
                    9a:94:a0:a3:78:c3:e7:b4:aa:10:b3:7c:e7:c9:4c:
                    53:9f:60:aa:6c:27:d4:f6:2b:6b:87:90:78:f0:d9:
                    4b:e6:f1:09:4c:3b:81:a6:67:e5:60:0b:ec:c7:c0:
                    37:e3:7a:2c:47:b5:14:94:5d:3c:9e:58:32:2e:89:
                    24:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:71:B8:E2:54:FC:5F:EC:0E:3E:33:3B:10:43:20:7B:E1:A1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfce36e6-c4cc-37d0-97fe-9520f092a360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:e3:1b:df:7e:dd:64:49:bf:43:36:22:85:df:d2:70:c5:
         8d:91:8f:d9:e4:0b:09:f9:8c:26:b0:37:32:2a:16:0a:2d:dc:
         d8:3c:83:a9:51:46:13:8a:7f:ea:e5:af:cc:95:1b:29:e6:9c:
         c5:2c:6a:e0:e5:ba:9d:b6:d2:c8:08:f7:c0:e9:f9:27:81:25:
         32:d5:77:c3:b5:04:ea:81:38:da:d6:47:86:eb:06:30:8f:0d:
         18:15:4e:fd:86:4d:03:c1:9c:4f:fe:a5:89:c2:9f:1a:5b:86:
         f8:c3:7f:8c:e5:e8:3c:ed:f2:f1:54:24:30:39:16:a9:13:04:
         2e:e1:ca:59:d5:bc:aa:33:a6:72:c8:47:b0:90:a2:6d:ac:80:
         15:06:53:e2:4e:24:e8:c4:31:23:32:a7:a4:f0:b0:f2:d4:93:
         4b:0c:92:d7:87:1b:a8:9c:1d:6c:53:e5:ab:fb:35:24:f1:94:
         c3:6f:d5:1b:1d:e7:17:bb:0a:bf:83:44:70:be:3d:27:3b:c2:
         43:e6:47:9a:ef:93:2d:70:6b:31:1e:22:a1:de:0e:d2:0f:23:
         ef:4c:47:bb:45:be:b6:02:b8:c7:91:f1:de:6e:6a:a4:49:0c:
         bc:2f:88:16:b4:80:1a:f7:08:85:7c:e2:87:07:6b:a3:ac:a9:
         e3:8f:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:06 2025 by rpki-client