Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca787a0-63f8-3d54-87de-ef3be74aedbf.roa
File:                     dca787a0-63f8-3d54-87de-ef3be74aedbf.roa (raw, json)
Hash identifier:          WTTDgg9qcZ9vEvomTTQ+scun2AJR6ChrxRP+UhGc8zc=
Subject key identifier:   AB:58:54:56:66:24:83:D0:AF:C2:A6:4A:50:11:EB:61:46:0C:7C:E1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D81436120715EDC22DDBD4BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca787a0-63f8-3d54-87de-ef3be74aedbf.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:43:61:20:71:5e:dc:22:dd:bd:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=057908fc-ecc8-4eb4-b5d3-dc2c08e0dcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:5d:a9:3c:70:1c:45:81:93:b5:eb:5b:db:
                    8e:13:e2:2f:34:fd:39:86:d5:4b:8e:f7:e9:ca:f2:
                    a2:28:f1:ec:f2:51:e7:74:50:ae:fd:bf:ad:1f:0a:
                    a9:f9:6c:63:dc:a2:88:14:b6:d2:99:92:7e:41:73:
                    6a:4d:b5:94:25:46:a4:71:2b:05:27:b7:dc:6a:2a:
                    98:d3:ef:e3:90:bc:35:85:5a:e1:76:d2:cc:04:7e:
                    9a:6e:cb:8e:95:e9:d8:44:13:51:e8:28:c2:7b:47:
                    09:65:cd:d9:4f:53:d0:eb:0e:05:3e:87:49:13:da:
                    be:68:0d:67:40:51:01:4d:fd:a1:44:01:fa:6c:7e:
                    fa:48:7f:ce:f8:98:99:15:78:6b:50:09:b0:f7:f3:
                    12:51:5a:6e:90:90:89:b4:52:a4:b7:9d:95:bc:7d:
                    eb:20:5a:d8:94:88:8e:c8:e3:07:ec:94:15:05:c8:
                    97:f4:cd:a2:a2:53:3c:b6:72:f2:98:d1:ca:9a:3e:
                    83:e2:83:4a:d7:81:ba:f8:bd:3a:63:f6:f4:ea:f3:
                    b8:c2:78:83:29:de:5a:40:7d:c2:aa:4b:1b:4a:07:
                    cb:c5:1f:1f:ca:1c:27:37:f4:da:f2:1a:1d:f0:8f:
                    54:f2:22:49:ca:de:62:f4:45:1a:30:fb:85:9e:da:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:58:54:56:66:24:83:D0:AF:C2:A6:4A:50:11:EB:61:46:0C:7C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca787a0-63f8-3d54-87de-ef3be74aedbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:de:c1:86:09:4b:c2:2e:f2:60:89:0b:32:4c:00:92:57:
         0d:11:cc:1d:f2:58:39:7e:af:29:f8:a4:b1:80:95:84:33:77:
         30:7e:ca:8f:cd:3e:a2:e4:45:10:d6:06:68:72:d3:98:fa:86:
         c9:29:a6:f0:ca:7e:b7:1b:c1:ce:43:63:3f:8a:40:14:0c:c8:
         ae:93:3a:b5:24:f5:e2:9a:33:8b:b0:27:2c:78:2c:da:3f:15:
         e5:c1:ce:13:59:ef:53:b7:4b:a1:45:83:a1:23:1e:a5:3d:70:
         bb:7b:34:5f:d5:2b:38:f4:eb:01:3a:06:ee:50:7a:3d:f9:56:
         da:be:58:21:27:b5:0c:18:a5:c5:a7:0b:83:6a:d0:64:58:3b:
         1b:a7:27:52:7b:1d:9a:20:1a:ea:24:56:21:1a:f3:63:fc:62:
         bb:86:f6:1c:ae:9c:09:79:6c:4a:a2:d6:5a:73:3c:6f:cc:7d:
         3d:1c:ad:7c:38:56:92:cb:cd:b9:02:d0:e0:f3:77:d0:08:af:
         b0:f3:e9:f5:6b:16:cd:e5:c1:3b:56:01:e7:f7:48:37:e6:ce:
         95:dc:1f:f5:2f:6c:63:b5:e5:95:c2:5c:81:93:6f:97:d3:e1:
         76:ae:ed:db:63:02:5a:56:03:f6:71:43:52:2f:d1:50:19:f3:
         99:d2:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:43 2025 by rpki-client