Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa5b5cd-3657-36c7-8d20-d9f6c442e4a7.roa
File:                     cfa5b5cd-3657-36c7-8d20-d9f6c442e4a7.roa (raw, json)
Hash identifier:          +flW+8R3vnn+S6nmD9YmoSmPNOEQFMt302bGYQr7GZc=
Subject key identifier:   09:8D:1D:BC:CE:82:86:2A:15:DF:1D:B9:7F:00:97:24:EB:2B:B6:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD2402B2CE596463134154500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa5b5cd-3657-36c7-8d20-d9f6c442e4a7.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.145.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:40:2b:2c:e5:96:46:31:34:15:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=30de3b6a-c319-43fc-8f0f-05d753622ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:43:77:60:2a:ea:ca:8a:db:62:52:6f:d3:
                    bc:71:89:19:f6:36:1f:95:d5:1e:39:51:5d:61:15:
                    64:e5:59:c4:95:04:89:d6:4b:72:e2:88:7b:c3:59:
                    c3:9a:18:8a:50:f4:0a:95:6b:90:96:e8:21:00:69:
                    f8:4d:a6:9b:74:fe:32:0d:a2:77:1e:f5:13:fe:98:
                    dd:20:0c:a7:6d:63:f3:e2:42:f0:c9:89:ff:df:01:
                    6c:a5:b6:35:29:04:c6:7d:91:ee:42:a0:97:db:89:
                    af:0b:62:db:c3:81:b6:24:b2:69:8b:e8:06:19:ef:
                    b6:31:ce:84:6e:50:fb:e2:bf:79:bd:42:60:ed:95:
                    8a:10:3a:ff:d6:0a:71:02:67:9b:73:29:6d:d9:d3:
                    42:88:6f:ff:db:c5:c7:f9:00:fd:22:a1:66:44:dc:
                    62:75:b4:ac:11:2a:bf:2d:28:4f:7b:05:10:14:d3:
                    1d:1b:e9:20:8e:a2:75:41:01:5a:2f:ce:e3:5e:a0:
                    43:9b:f9:8a:3f:15:76:dc:fb:bc:e9:5c:38:30:15:
                    20:9e:2b:86:6d:28:93:20:eb:e5:43:04:0d:9b:17:
                    fb:8a:27:a0:21:aa:35:2a:b4:30:54:a7:24:f7:55:
                    a8:b5:bc:bd:c3:c9:ff:24:c7:d9:89:21:44:71:1d:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:1D:BC:CE:82:86:2A:15:DF:1D:B9:7F:00:97:24:EB:2B:B6:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa5b5cd-3657-36c7-8d20-d9f6c442e4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.145.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:72:7b:28:1f:ca:35:ec:b5:cb:4c:b8:2b:f1:07:3c:cc:
         3c:42:b5:1b:de:ea:13:d6:f1:10:69:54:cf:c4:2c:2b:35:41:
         c2:da:20:ce:e3:ef:86:8b:6e:ba:e8:4b:aa:5b:a2:c7:dc:58:
         2c:14:35:c5:56:e0:dd:3a:ee:6d:34:02:77:7b:77:44:8a:b8:
         1b:ef:eb:d5:c5:90:2a:11:c3:33:95:b8:42:29:19:6e:4b:f7:
         16:6b:a9:83:ab:ab:af:3e:fb:12:ca:3e:3d:e1:a3:52:be:28:
         1f:41:23:16:32:51:da:82:59:2c:92:6f:c6:c5:d0:35:e0:c4:
         aa:5e:bf:c9:5d:39:48:c1:ed:2b:4b:89:3e:9e:58:35:54:f6:
         48:db:f2:9a:5d:52:7b:a0:75:e9:41:a0:f1:f1:3f:1e:75:6b:
         81:37:2f:73:08:6a:a5:57:51:de:71:c7:98:63:f2:9e:4c:2d:
         5e:fe:1a:47:a9:36:29:ee:9e:ab:a2:14:0c:0c:1e:a8:ab:e6:
         87:ce:93:0c:f6:00:8d:0a:8d:a5:d3:08:36:7f:b2:e4:56:0b:
         e2:fd:2e:41:77:88:79:f9:b8:f4:cc:7f:75:5d:b8:34:df:99:
         b5:bc:d6:e5:74:73:78:1f:20:f1:4e:4a:de:87:25:e5:16:a5:
         2f:8d:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:35 2025 by rpki-client