Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e46c5254-560e-3eb2-8512-a51adb9f65c9.roa
File:                     e46c5254-560e-3eb2-8512-a51adb9f65c9.roa (raw, json)
Hash identifier:          DgIMlRaYcd5vFRTGx8K5utpL1i9AGQsazWfG0PIjLqk=
Subject key identifier:   1C:AC:E4:BA:EC:D5:01:35:B3:43:BF:77:FE:A1:84:AF:4A:6F:9C:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF973C5E24C317365257DDD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e46c5254-560e-3eb2-8512-a51adb9f65c9.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.251.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:73:c5:e2:4c:31:73:65:25:7d:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=68c141ae-b4a3-46d8-b53e-136bf467e8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:82:de:29:30:8b:e9:14:a2:f2:5c:7d:28:
                    7b:74:a1:43:e4:ad:31:7c:a9:fe:9d:c3:f7:6f:df:
                    4a:72:a5:c6:a1:3d:a2:42:27:db:4e:34:14:cf:be:
                    25:99:ca:12:27:9a:b1:4d:c5:d2:88:26:7a:79:09:
                    03:8c:c5:ad:48:37:f4:7f:33:5d:35:47:9a:aa:fd:
                    0a:38:be:5a:d5:f4:f8:af:32:0f:60:fb:d8:42:d0:
                    1e:c5:79:00:59:1f:a5:44:4d:38:24:67:19:68:c3:
                    7c:0b:d9:56:bc:f1:6f:03:e3:97:1d:23:0a:b9:74:
                    3a:85:21:67:f8:5d:39:e1:b5:f4:12:cd:c1:bd:8f:
                    b1:a0:c3:45:d8:3b:33:98:b9:4e:e3:30:6c:13:f9:
                    27:04:12:60:00:97:99:cb:27:5f:da:f0:47:a9:ab:
                    88:30:8f:81:a5:19:ce:53:97:6e:58:66:fb:97:db:
                    0e:6f:39:15:f2:31:08:b6:ed:2b:72:81:47:09:11:
                    64:75:47:1a:c0:58:cd:bf:51:7f:71:21:c6:5f:2d:
                    97:2b:36:30:1d:22:66:eb:e8:76:9c:f8:19:b9:7e:
                    62:51:80:e5:e2:96:bd:b2:27:4e:da:dc:03:c1:0e:
                    36:c5:18:2a:88:6d:0f:4d:c2:3d:d2:c1:65:81:78:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:E4:BA:EC:D5:01:35:B3:43:BF:77:FE:A1:84:AF:4A:6F:9C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e46c5254-560e-3eb2-8512-a51adb9f65c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:5c:3f:61:31:99:e7:97:76:e4:a3:6f:67:7e:91:24:57:
         55:4b:7a:99:44:1d:bf:aa:f3:50:c6:05:80:a5:c2:54:50:ec:
         9d:d7:b4:7a:7f:ce:70:0d:be:1c:84:1c:ed:0a:45:a7:4f:e1:
         47:e2:c7:f4:dc:a7:4d:e1:f0:c1:22:4a:67:32:bf:de:8e:5c:
         3e:3d:66:8a:a8:b3:b9:8f:ec:a4:8b:a5:38:38:ac:06:d6:c1:
         ec:51:fb:e0:87:8e:9c:f3:04:50:45:29:c5:ef:96:56:18:b9:
         0c:46:db:79:34:5a:6c:68:88:47:34:88:09:75:97:3b:b1:78:
         68:88:9d:a9:ba:ca:11:88:09:a6:b9:ce:91:8e:5a:93:2a:87:
         d7:66:f1:10:4e:ef:ad:95:94:89:28:cb:f0:f7:60:c8:87:9c:
         38:d9:f2:03:fa:7a:fc:93:45:a7:58:5c:24:be:90:a3:fb:17:
         b7:5d:39:e1:ab:78:18:98:91:0a:a0:4d:f9:6e:84:a7:a6:17:
         9c:f5:16:7f:b1:49:7e:08:e0:e1:ca:0a:75:1e:45:1c:18:eb:
         bb:77:26:d4:f0:28:84:00:31:4d:21:48:88:f1:d6:48:c9:0e:
         36:05:71:14:f7:db:ff:4e:ad:e7:7b:ae:c5:7c:a8:81:c8:e2:
         31:e9:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:40 2025 by rpki-client