Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7510793-f584-3bc6-b484-634f57f8269e.roa
File:                     d7510793-f584-3bc6-b484-634f57f8269e.roa (raw, json)
Hash identifier:          QxdmZGU9fBMWd2ppYxBG1iqtT7o5sqbuXhjf10qp3DA=
Subject key identifier:   06:95:67:57:7F:3E:E3:E5:74:94:0E:74:D8:B6:5D:92:24:54:A5:D4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4C0AAF1D1CBAF256CBA8700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7510793-f584-3bc6-b484-634f57f8269e.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        75.3.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:c0:aa:f1:d1:cb:af:25:6c:ba:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=1c84f22e-ff04-415c-9a89-bd646e13f6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:14:ca:be:dc:08:6a:96:09:31:53:c2:4a:
                    33:e2:d6:4b:b0:7e:05:70:2c:52:5a:fc:6c:b3:0d:
                    67:f2:65:70:82:7f:62:38:e7:94:c7:b6:c1:e2:26:
                    62:3f:2c:67:2e:73:ce:59:51:0b:b2:1a:a0:9c:8f:
                    e6:fa:b7:d0:81:e7:2a:bc:31:54:c5:05:1c:27:89:
                    6d:23:74:52:8c:fa:81:1b:c5:10:80:db:5c:96:c9:
                    c7:97:65:3a:61:36:52:44:fd:4e:43:47:72:4a:c9:
                    02:ae:d6:bb:a1:52:a7:18:0d:11:89:8c:5b:3b:5a:
                    6b:ca:65:9e:97:13:25:df:d0:4d:89:3c:57:c9:0d:
                    b7:ae:e8:52:a4:9f:5f:56:83:d1:c7:1e:6c:fa:fe:
                    63:85:78:14:c3:18:37:2a:2b:3c:03:f1:69:7b:70:
                    71:9d:52:74:ba:8d:6c:89:9e:1f:22:dc:dc:85:2a:
                    c5:30:ae:7c:f5:fa:c0:eb:02:6e:f6:2e:ca:ec:42:
                    be:86:20:d6:8d:d3:74:f9:76:2b:5d:ca:ca:b2:86:
                    90:a5:bd:b4:df:f5:e6:78:f3:95:81:19:40:fc:22:
                    aa:df:6c:43:d5:02:90:6b:de:c7:70:ae:95:e4:e6:
                    3f:85:82:ec:e8:20:4c:2b:82:c3:cb:43:81:7f:aa:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:67:57:7F:3E:E3:E5:74:94:0E:74:D8:B6:5D:92:24:54:A5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7510793-f584-3bc6-b484-634f57f8269e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:19:11:ac:24:78:31:c1:89:ae:4f:d2:25:e0:47:40:a8:fc:
         75:75:68:a7:be:57:04:83:d2:c0:7e:34:a1:d6:11:94:5d:0f:
         87:f8:30:08:ae:c4:61:ab:1e:2d:6e:e4:c5:39:96:ef:28:1c:
         44:ae:3b:31:d1:a8:1d:8a:d8:02:f7:fb:b5:24:46:5d:99:f3:
         f3:2b:0c:75:75:d9:e3:a9:67:d7:6d:29:85:2c:67:c9:bd:40:
         c8:5b:d4:7e:15:12:00:5a:09:9d:dd:56:61:12:49:bc:44:09:
         dd:76:c6:a1:6d:b5:9b:3d:bc:25:56:ed:cf:e2:a1:88:ea:54:
         91:8f:8a:20:df:ea:36:ea:dd:85:aa:3c:75:09:af:71:ba:11:
         b8:f2:7a:59:af:de:b0:cd:ba:9b:62:cc:16:20:8a:1a:4f:55:
         dd:85:28:fa:a7:1e:22:6b:5f:c8:a7:62:a3:68:97:29:4e:1e:
         a4:a5:fa:70:f9:68:be:ca:2e:43:9d:15:bd:d6:b9:bb:5a:d4:
         38:35:68:90:fa:06:50:61:9b:cc:5b:c2:27:36:ef:75:45:16:
         84:6b:90:fa:e0:34:59:72:a2:50:c6:ce:ef:d6:34:d0:00:78:
         fc:99:79:47:d4:d0:a3:88:a8:61:85:a9:47:fa:ee:df:5d:15:
         d8:67:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:20 2025 by rpki-client