Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec31d9a5-fbf6-313b-b4c1-cb262423b265.roa
File:                     ec31d9a5-fbf6-313b-b4c1-cb262423b265.roa (raw, json)
Hash identifier:          zr+mukZY2fAiTUq4zqk2m5ZEjgWuRmjHMwKzF1XtVy0=
Subject key identifier:   4C:88:F0:99:F0:A8:6C:D7:52:77:41:4F:33:3C:2A:9D:70:F8:6B:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840BC755278693ED036178BDA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec31d9a5-fbf6-313b-b4c1-cb262423b265.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.255.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:75:52:78:69:3e:d0:36:17:8b:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=adb6b99c-b873-4d0d-bfda-c6914f713de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:71:33:ad:1c:87:8f:21:0f:1f:c3:a9:ac:
                    06:f1:9f:d1:04:7a:2d:e6:d6:07:aa:48:35:79:2d:
                    d3:68:bd:30:ba:63:fb:8c:a8:20:76:c8:ca:7a:d3:
                    cb:18:8a:58:fe:8a:ce:b4:60:6a:9f:4c:9e:a5:7e:
                    08:fb:62:9e:5e:be:f9:9f:e1:24:ad:7f:d0:25:0f:
                    b3:1d:25:a0:a1:02:eb:16:af:ea:19:5b:95:b0:68:
                    7b:3b:a9:33:53:4f:14:0c:0b:f9:74:d6:09:6e:eb:
                    d0:60:5f:01:f0:6b:87:ff:95:8a:bb:1d:52:24:55:
                    13:55:75:0d:51:00:df:2a:36:de:bc:ed:1a:b5:7c:
                    c2:f7:26:53:46:e5:4b:55:16:7b:9b:64:09:42:a1:
                    15:db:1c:70:57:59:32:38:ae:b7:11:49:ab:40:6d:
                    07:ab:6b:c3:b9:f1:cf:2c:8d:dd:a3:c3:7b:0e:56:
                    a0:ed:b6:8b:f5:c2:fb:32:0e:91:da:88:67:a2:6b:
                    13:fd:4c:9f:e2:b5:90:49:ed:7f:92:7f:b2:dc:a1:
                    cb:d9:6b:19:69:2d:e2:6d:98:a7:62:e1:ac:9c:4c:
                    e4:79:c5:9e:b0:f2:a8:96:0b:a1:5e:1d:99:52:46:
                    70:e7:97:c0:20:38:ee:be:6e:7f:d4:f0:f4:05:ed:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:88:F0:99:F0:A8:6C:D7:52:77:41:4F:33:3C:2A:9D:70:F8:6B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec31d9a5-fbf6-313b-b4c1-cb262423b265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.255.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:87:e8:24:e5:8e:f9:db:63:fe:00:e5:b6:77:a8:55:f0:c4:
         6e:3b:2c:e7:4d:86:d9:8b:eb:3e:31:d4:38:8e:9f:b1:93:e6:
         25:f1:7f:9d:36:74:b3:2c:b5:62:3c:b8:88:33:df:6a:cc:9d:
         ed:0b:62:42:c8:4d:ef:37:41:32:bb:57:cb:50:1b:ee:5c:e3:
         1e:59:9b:b1:9a:d1:06:1e:70:fd:1e:83:cc:96:ae:12:9c:81:
         b0:d3:c0:d4:a2:8a:c1:60:a7:7e:1e:59:4f:4c:12:bc:80:b0:
         d3:99:24:7b:cc:b0:d4:bc:34:12:ef:f4:4e:3d:b8:57:eb:dd:
         fb:04:7a:0c:76:5f:d8:66:06:d0:c8:b4:df:71:ea:6a:82:25:
         2e:ab:06:2d:b2:df:f2:10:d0:67:0f:bd:79:b0:37:01:fe:6f:
         6e:34:34:6d:d9:0b:40:17:1d:a4:c4:8f:fb:5d:c6:2d:37:26:
         9f:0b:9b:a1:0a:50:1a:74:5d:16:6c:8d:67:c0:21:0d:d1:a9:
         14:db:83:d6:cc:ed:58:94:b5:97:e1:d0:b2:36:f5:a0:69:7d:
         c0:52:fc:44:18:30:eb:bc:0a:08:73:fd:75:43:b0:19:9a:e3:
         d8:66:a7:e7:bd:0f:af:43:70:81:4d:25:b7:1b:1b:db:f5:75:
         01:59:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:58 2025 by rpki-client