Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c7851-5a27-3e23-a589-a8033752e756.roa
File:                     e85c7851-5a27-3e23-a589-a8033752e756.roa (raw, json)
Hash identifier:          WgBLYsgvCwL6LyImtqyCsHqaFpARRy/qu/06KJInKWw=
Subject key identifier:   F2:2A:7F:C0:40:8E:58:E0:92:3A:C8:1F:3B:17:2C:18:26:6D:53:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D812CFEB63615FBEEFF466B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c7851-5a27-3e23-a589-a8033752e756.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        70.132.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:2c:fe:b6:36:15:fb:ee:ff:46:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=9bb71be8-883f-4791-bb44-34f8aa4aacc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:79:dd:69:b9:37:81:5f:5f:0d:bc:8c:bd:
                    0a:fd:c4:fd:f6:33:de:4c:ed:b9:43:8a:54:de:7d:
                    69:db:cb:62:1a:3b:2d:23:cb:3a:7f:c5:9f:32:09:
                    94:11:e4:c3:f2:0b:0c:b1:8e:38:8a:b6:9b:c2:ac:
                    b0:60:63:0c:aa:ce:1e:93:df:c3:1b:75:aa:e9:42:
                    98:08:3c:3c:e3:31:9b:78:eb:7f:74:8b:ed:2b:b0:
                    bf:60:03:44:30:a8:57:13:d3:68:48:49:6f:46:2a:
                    e1:83:7b:e9:90:03:d3:b2:13:aa:05:8e:12:0f:2a:
                    6f:c0:2d:11:26:02:a9:eb:7c:ef:44:43:60:27:12:
                    98:86:f6:ee:f5:19:b5:1a:28:18:24:52:1a:05:e4:
                    ce:e6:81:d0:5a:e1:97:78:41:52:e2:9d:df:96:6e:
                    2a:4a:5c:8c:b6:26:f0:e6:97:07:5e:71:96:08:2a:
                    26:4b:db:3d:b5:65:11:13:d7:95:fb:36:23:c8:9f:
                    b3:36:dd:0b:ad:57:32:3d:39:6d:c1:b4:a4:43:be:
                    af:81:58:4b:ce:f5:23:cd:87:0c:f3:14:8d:af:ec:
                    66:24:9f:4b:9f:fe:75:96:b7:80:17:28:45:f6:17:
                    c9:f5:07:88:2c:1e:b9:85:e4:19:40:1e:29:47:2a:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:7F:C0:40:8E:58:E0:92:3A:C8:1F:3B:17:2C:18:26:6D:53:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c7851-5a27-3e23-a589-a8033752e756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:e5:f3:e3:e1:8a:87:cd:5c:96:e8:18:4b:ec:07:74:18:
         ff:a7:9f:92:47:ea:14:4f:a2:c4:4d:ff:c3:8e:25:74:e9:48:
         1a:1a:87:c2:78:39:37:4b:28:94:9b:38:13:bb:87:17:0f:76:
         4d:e6:b6:2c:85:a9:b4:48:22:dd:cd:66:11:bf:6e:d8:96:00:
         77:82:4c:51:4f:aa:96:c1:04:e5:a5:b1:02:c2:22:9c:9c:e6:
         2b:f8:8e:c3:f0:e0:10:5c:e4:c7:66:a4:a1:ce:e7:4e:e4:d2:
         1b:c3:25:b6:0e:c8:f0:cb:f2:98:ed:5e:83:17:4c:5f:1c:d1:
         d6:af:b4:b2:cd:9c:98:fc:cd:53:a3:4f:f9:96:ce:4b:cc:b4:
         71:94:80:ce:85:46:b3:d2:8f:c0:9d:c4:8c:c2:dd:54:eb:9a:
         c0:f6:12:b2:3d:ff:ea:c2:8f:6c:39:81:f4:cf:e6:9a:ea:e1:
         b9:2f:d9:d3:66:fb:e7:74:eb:a1:f5:8d:f6:18:4f:87:ca:ea:
         3d:21:d6:b5:24:c6:20:f3:b6:82:04:56:ef:3f:91:c1:b4:db:
         72:c2:da:3c:a4:71:15:c2:92:e7:a7:eb:40:e9:fb:a5:c0:0f:
         ba:48:a2:73:6f:0a:37:0b:ca:eb:73:6c:1f:ed:73:71:b8:18:
         23:94:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:37 2025 by rpki-client