Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaad4374-b18f-3364-a0fb-6ea2dba51392.roa
File:                     eaad4374-b18f-3364-a0fb-6ea2dba51392.roa (raw, json)
Hash identifier:          1v96psmdbVhikBbqKPgVhXgZXgUvwiHIiGDlEGn7qmQ=
Subject key identifier:   C8:7D:99:E4:3A:18:79:B3:A3:BE:08:31:F0:4A:A9:30:CA:0E:4E:DA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF8B99AAD607F77D849A47080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaad4374-b18f-3364-a0fb-6ea2dba51392.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        128.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:b9:9a:ad:60:7f:77:d8:49:a4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=15428111-2152-4de5-8292-33ce44a2d1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:fd:50:8b:26:e2:7a:f2:d8:f2:de:8c:a8:
                    98:1c:29:64:83:c6:ff:12:d3:11:40:83:7f:e4:a4:
                    6f:11:08:19:2a:ca:a0:58:5f:8a:8b:84:b4:71:64:
                    f3:65:68:cf:e6:40:c0:88:75:ff:14:44:f3:a9:f0:
                    79:aa:96:b5:4c:93:2d:c2:ee:08:98:b5:5f:f6:d0:
                    a1:1b:8e:06:82:02:1a:78:3c:43:d8:a4:54:cf:bf:
                    ed:a2:73:de:2c:d5:4a:89:36:a1:01:00:61:7b:cb:
                    0a:0a:86:23:30:fe:82:1f:54:4c:c3:ed:2a:07:72:
                    30:36:32:f0:81:25:92:93:c6:d6:41:12:4b:f2:dd:
                    ac:e4:e0:e2:74:7a:d2:b5:d9:57:79:06:75:00:34:
                    1e:73:86:3c:66:69:9f:9a:6e:cf:80:87:62:3b:82:
                    ab:5f:39:10:c8:97:0d:82:29:6c:58:5a:f8:e0:e7:
                    f9:e8:cd:7a:f4:e7:b3:14:7b:f0:ab:6f:46:56:e0:
                    fa:a2:57:e6:9f:8d:da:ab:22:4c:32:7c:50:55:15:
                    c3:db:4c:24:ff:a7:03:d2:76:d9:e2:94:54:ed:19:
                    15:c3:9b:97:88:d5:6b:cf:5e:16:d4:64:89:5f:40:
                    97:2b:a1:13:b3:ae:68:b4:3a:9a:a7:b3:a6:bd:c7:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:99:E4:3A:18:79:B3:A3:BE:08:31:F0:4A:A9:30:CA:0E:4E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eaad4374-b18f-3364-a0fb-6ea2dba51392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:d6:4e:a9:82:a9:22:a3:1e:66:94:56:cd:c0:74:ee:f0:
         cf:c4:18:33:df:27:1a:ce:2e:a6:e4:3c:4b:ff:ca:67:65:4a:
         c8:21:bc:f3:d8:a2:7e:96:79:cc:66:03:27:3c:38:cc:36:be:
         de:5c:55:aa:a7:40:f4:52:db:ea:f2:67:eb:52:16:fe:c3:39:
         14:a6:87:b8:8a:33:26:10:48:50:69:1b:5c:9b:7b:ce:8f:c4:
         d2:04:d7:ad:f3:28:98:84:5d:f5:86:09:70:32:2f:0c:6e:aa:
         7e:a2:16:15:33:41:b8:a3:61:4a:13:3f:72:cc:48:22:9e:78:
         b4:41:a7:51:86:43:f1:21:dd:5f:cc:7d:07:5c:82:d5:dc:c6:
         61:92:91:eb:9f:8e:8a:77:9b:55:b6:5f:70:b4:17:c3:11:ec:
         13:61:bb:be:94:14:dc:25:c3:29:0d:bd:99:16:8c:62:f6:a0:
         97:fa:e6:8d:ad:9e:e8:88:67:ec:da:65:26:98:a0:86:7e:3b:
         31:d4:55:f8:38:a7:c1:9a:74:56:41:5f:f7:d3:15:ac:01:92:
         e3:38:ca:cf:89:4c:d1:6d:e9:6e:6c:c5:eb:ff:8b:8f:86:fe:
         dc:94:2d:4e:0c:70:b0:76:00:f3:fc:f1:2f:26:4a:05:fa:74:
         4c:a3:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:15:59 2025 by rpki-client