Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e655d417-3076-356b-9839-d2cc53cccbdb.roa
File:                     e655d417-3076-356b-9839-d2cc53cccbdb.roa (raw, json)
Hash identifier:          cXwW1E2FK2zi8n1wWYL6wQP5/lcXbLViKboySHsY9uI=
Subject key identifier:   DA:58:E4:9D:31:22:86:07:0F:78:CB:0B:BE:3D:25:7F:BE:21:B9:ED
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE2973AC8B9C6BA380952E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e655d417-3076-356b-9839-d2cc53cccbdb.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        204.236.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:29:73:ac:8b:9c:6b:a3:80:95:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=9e50fc32-889a-41d2-acbf-797cb2b70489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:4c:55:e6:b8:f3:cf:70:c6:68:e2:6b:39:
                    27:2a:6e:9b:57:10:4f:e0:aa:00:d0:df:71:07:da:
                    ca:fe:5b:3f:52:40:67:26:84:ad:32:b1:0e:a0:6d:
                    2c:8a:48:87:71:f7:64:b9:7a:ba:4d:ac:41:d6:23:
                    5e:8a:bb:c0:05:43:10:de:ef:f2:e0:0d:85:a3:a0:
                    06:3d:e1:37:bd:9d:a0:8c:30:75:24:03:79:41:18:
                    2d:d9:c4:16:4d:e1:e8:11:bc:fb:ef:a4:d8:0e:22:
                    50:86:11:36:5c:bb:fd:d9:c0:c1:fa:ec:4c:ad:e0:
                    cb:98:3e:db:d8:fd:45:b4:c6:61:13:78:b5:3f:cf:
                    2b:69:6d:26:f7:4f:5e:49:ae:48:fc:26:05:0d:a2:
                    cb:7b:0d:a8:82:7a:76:df:0c:ff:8c:05:e0:80:49:
                    3a:b1:d0:26:56:b1:da:5f:1c:6a:8c:da:28:3d:69:
                    6f:bb:c2:34:22:f7:e4:d6:72:e0:31:30:08:94:48:
                    48:f8:37:93:4d:8a:40:a3:db:04:84:9f:64:22:f2:
                    6b:e7:e3:76:00:19:f2:04:db:5c:4a:ba:f2:46:13:
                    6d:eb:0a:11:e1:f3:29:dc:6a:2a:5f:e9:89:5f:51:
                    da:76:c8:7a:db:54:cd:dd:89:5e:53:bd:24:34:13:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:58:E4:9D:31:22:86:07:0F:78:CB:0B:BE:3D:25:7F:BE:21:B9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e655d417-3076-356b-9839-d2cc53cccbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:6e:30:08:97:c0:2b:bf:d7:66:41:b9:82:ca:28:78:57:7d:
         db:9d:99:bf:bb:19:55:5d:48:ce:45:13:e9:29:18:5a:96:43:
         d0:b5:01:4c:02:e1:6e:d0:1e:00:2e:e4:a2:51:ea:c2:c6:1f:
         3b:a7:9d:01:b6:d6:1b:99:cd:ce:46:c9:88:cf:da:c4:16:bd:
         8c:26:a3:54:ae:dd:fa:7c:62:cd:65:ed:19:7e:04:6d:d1:aa:
         65:8e:bb:d0:c0:be:5d:ed:a5:17:d3:1f:12:d2:d6:2e:46:f0:
         24:69:50:c6:09:af:4b:79:ef:b6:af:ba:2b:43:7d:c5:ce:75:
         bd:58:58:7f:32:e9:5b:0b:83:9b:8d:35:49:61:73:90:2e:40:
         f3:0c:56:c4:12:07:15:8d:0e:d7:a6:e8:ff:89:8a:cb:68:13:
         81:ff:cd:58:2d:73:11:1c:19:c6:ee:ca:e6:91:dc:3e:44:40:
         b9:bb:5c:7a:64:17:db:2a:d3:92:42:c5:84:7e:5a:cf:36:4e:
         23:56:3d:50:10:fb:b0:be:f6:9e:b3:3f:d8:63:33:92:6a:93:
         cb:31:6f:a0:09:8f:15:f5:a6:09:83:0a:1f:40:64:fa:3a:63:
         6d:8e:90:71:cc:61:94:84:71:87:68:b4:87:11:78:24:6e:88:
         59:76:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:51 2025 by rpki-client