Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e626e237-236d-3081-b81f-58b2929765ea.roa
File:                     e626e237-236d-3081-b81f-58b2929765ea.roa (raw, json)
Hash identifier:          Fbmtg5rapa0YNqfqqOQTUPp3jLoBG+mbyegxxd+LPtU=
Subject key identifier:   FC:3E:39:5A:AE:FB:15:A2:15:84:8D:28:06:C1:51:92:42:26:63:26
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB2AD64FF2368223AD422740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e626e237-236d-3081-b81f-58b2929765ea.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.141.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:2a:d6:4f:f2:36:82:23:ad:42:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=c14c7db9-5dc7-42f7-8d31-14fdc5e9b4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:b0:ef:bf:93:9c:a1:f0:b7:3f:f4:aa:aa:
                    69:cd:c1:f5:a1:af:da:d4:02:07:50:a9:e0:62:d4:
                    f4:74:d8:5b:ba:02:54:95:7d:e1:11:90:d1:37:b2:
                    7c:c3:c4:48:96:3c:8a:de:85:38:b2:56:54:33:2a:
                    32:cc:2f:02:ea:a4:b9:9e:92:6a:ee:22:dc:6f:d3:
                    b4:4c:2b:9f:d5:c1:78:76:d6:0b:6e:ad:1e:0b:c7:
                    35:a0:81:3f:87:4b:de:da:49:5d:dd:1c:6e:a3:99:
                    a7:fc:68:7c:1d:ca:57:48:8d:e1:16:10:a9:63:78:
                    fd:60:cc:79:f0:1b:b7:a6:19:76:ae:7e:54:ad:b3:
                    92:24:a0:ad:a9:72:f3:7a:07:ff:98:b2:55:6c:7f:
                    dd:40:2a:bf:a8:86:05:7d:e9:d6:a6:a7:a3:f9:a6:
                    f7:73:8a:bf:5c:38:b4:da:82:e4:bb:c3:69:9b:0d:
                    b2:c3:d8:22:34:c6:03:39:e0:20:ad:04:7f:35:c8:
                    e6:b3:56:60:93:39:d5:8b:30:33:d4:22:36:d5:91:
                    96:7c:44:3f:fa:7f:a7:3c:b5:ca:02:42:0d:cf:4a:
                    15:2d:a1:02:03:e3:40:b0:ab:11:78:7a:ce:3d:e1:
                    f1:9b:a8:a0:d7:32:f0:24:b9:1f:79:77:97:ee:ab:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:39:5A:AE:FB:15:A2:15:84:8D:28:06:C1:51:92:42:26:63:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e626e237-236d-3081-b81f-58b2929765ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:8e:24:b4:ab:ae:4b:5f:17:7b:fe:0c:6b:d4:25:2e:01:
         34:4d:5d:14:14:21:cb:9e:5d:3e:58:3f:48:02:e5:2b:0f:f0:
         b6:54:7f:1d:d9:61:50:28:5f:ef:b7:69:be:62:b7:0c:a5:f8:
         ae:30:07:b6:a3:72:d2:b9:4d:ad:87:78:4d:ef:75:b4:f4:04:
         8c:df:f9:4f:3b:9c:6f:cf:ba:58:79:e7:49:4c:95:25:7b:0e:
         dd:de:0f:ec:f8:da:c1:b8:2a:4c:15:c4:94:eb:bc:fb:fb:6c:
         25:56:87:67:4a:59:32:68:ad:f3:0b:3b:39:9e:2c:bc:05:68:
         19:2d:8c:02:ed:cf:37:2e:19:a4:91:58:3c:e5:08:d0:9a:d6:
         98:9e:9e:47:48:ad:2d:91:c7:20:1a:07:33:24:0f:ed:49:9c:
         f6:fa:6b:f5:82:28:39:53:85:5a:04:d0:15:cb:d3:67:d7:3a:
         11:1e:9e:77:04:f6:0d:fd:3d:57:ab:0d:4e:d7:e9:44:e7:a2:
         26:bd:a7:7d:1b:b8:f9:20:14:73:0e:80:63:ee:3d:53:a9:c3:
         d5:58:4a:a8:38:f7:05:25:72:ee:bb:86:c0:86:ff:3a:c8:2d:
         06:33:3f:7d:54:b4:2d:db:16:c1:4b:11:bc:4d:94:c0:97:13:
         20:df:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:45 2025 by rpki-client