Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d947f953-b409-30fa-b749-c27f39be8111.roa
File:                     d947f953-b409-30fa-b749-c27f39be8111.roa (raw, json)
Hash identifier:          SEXaN9sRGGCJk27G5dum6YGHLTAeF84T0WjgeABFt2c=
Subject key identifier:   DC:D6:C5:C8:7A:2C:66:39:ED:76:AA:EB:14:35:AB:85:21:BE:6D:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4CF419638C956201D6589C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d947f953-b409-30fa-b749-c27f39be8111.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:cf:41:96:38:c9:56:20:1d:65:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=31c9d58a-f3f3-4946-b26c-a29fc4e7d467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:c2:6b:c7:96:21:c4:9c:89:d9:5b:e1:7e:
                    94:f2:71:67:b0:bc:e2:c5:de:fb:42:88:ce:9e:e8:
                    f9:89:e3:6f:a9:9b:24:74:5e:39:e7:27:a6:c8:26:
                    47:64:00:76:c9:07:ed:98:e9:f6:58:39:9f:d8:13:
                    0c:dc:d9:fe:77:6e:4e:b7:e4:6b:21:d4:3f:9b:75:
                    3c:2a:ed:58:f5:e3:98:66:81:2f:9a:77:e0:d4:79:
                    e3:34:7b:d3:ad:47:f5:3f:28:9c:2a:bd:17:d3:6c:
                    a6:fe:0d:77:15:30:53:fa:9b:23:6e:72:12:10:75:
                    94:cd:77:dc:21:40:ca:89:80:da:44:23:06:20:b9:
                    10:5e:a0:ea:c5:09:e2:8a:de:ce:ff:b4:33:d5:3d:
                    94:1c:17:2d:7d:96:af:9d:1f:ce:22:5b:0e:32:bb:
                    6b:d5:bc:ab:0a:e7:22:2e:f2:3c:8f:94:12:e8:34:
                    54:56:da:3a:fd:71:f4:bd:93:26:0f:c1:3f:2c:81:
                    19:83:4b:90:0b:44:14:10:ca:aa:ce:17:2f:f9:a7:
                    9b:ee:a4:f3:b6:c5:07:d8:f0:c1:36:42:41:7e:44:
                    ea:68:41:6a:66:77:38:8e:e7:6e:f4:44:ff:39:0e:
                    8e:49:a0:4b:5e:e8:37:7a:e5:34:f9:2d:64:27:15:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:C5:C8:7A:2C:66:39:ED:76:AA:EB:14:35:AB:85:21:BE:6D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d947f953-b409-30fa-b749-c27f39be8111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:60:a0:ab:78:78:75:ce:da:06:dc:23:f1:20:b7:77:f5:
         2e:fa:58:2f:f8:71:b9:46:f9:26:bd:54:11:24:9f:be:cc:ed:
         e6:0d:41:3e:e4:13:92:e7:d1:d4:86:d3:cd:29:2d:68:c5:be:
         58:6c:a8:ff:1f:79:78:73:51:71:b4:e9:c6:48:7e:d4:7d:79:
         98:55:10:bd:c0:df:e6:1c:2b:c4:56:ea:e4:79:d2:c6:08:f5:
         66:d6:fc:23:96:71:f8:fb:d9:da:de:fe:90:a3:1e:09:be:29:
         a6:a6:73:73:46:2a:dc:ab:00:b2:01:4c:ab:ee:38:5a:63:cb:
         a8:b3:72:1a:b6:fc:2b:6c:3f:b6:73:2e:00:58:d8:21:04:b1:
         50:f0:94:f5:80:cc:f1:a5:1c:38:5a:12:f6:bb:8f:c6:8e:8b:
         1b:93:c6:96:bb:da:a1:7f:72:56:9e:b8:73:26:7a:6d:59:4c:
         ee:d3:cc:bb:40:2c:dc:5a:a4:05:c5:fe:e1:37:e8:ca:ed:e8:
         75:40:88:ba:fa:7a:5d:2d:83:77:d0:b3:26:57:16:87:e2:0a:
         a6:ee:2b:c8:20:dd:4b:bc:e0:87:79:d6:df:ad:74:de:1e:24:
         54:72:1e:69:e8:fd:38:7e:d7:df:0c:3b:cf:3e:68:bd:4d:7a:
         78:58:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:51 2025 by rpki-client