Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03ed81c-bfd0-37a3-89ec-200db0d77f64.roa
File:                     f03ed81c-bfd0-37a3-89ec-200db0d77f64.roa (raw, json)
Hash identifier:          hTMut8SQKJav7XF0Xp8yVW7ks6T36F0yP4U0OfXoRdA=
Subject key identifier:   A6:B6:D9:27:EF:ED:13:3D:67:5F:58:0A:CB:65:24:39:66:DE:7B:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB3A7BD1BD22625DE89BA66A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03ed81c-bfd0-37a3-89ec-200db0d77f64.roa
Signing time:             Tue 26 Jul 2022 12:00:00 +0000
ROA not before:           Tue 26 Jul 2022 12:00:00 +0000
ROA not after:            Wed 31 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.223.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:a7:bd:1b:d2:26:25:de:89:ba:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 26 12:00:00 2022 GMT
            Not After : Aug 31 04:00:00 2022 GMT
        Subject: CN=48facbed-f30d-4f50-abb3-3b38d05a8880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:d4:b6:b7:5f:2c:8d:42:f9:62:be:2b:81:
                    6d:17:27:9b:37:84:5f:97:55:cd:8b:58:42:26:c0:
                    03:39:dd:99:bd:b9:35:7f:59:aa:13:86:fb:d7:4c:
                    ac:3f:74:6a:40:96:87:0a:ba:b6:c7:9f:07:13:97:
                    3a:6a:be:72:48:56:7a:aa:a2:b3:a7:dc:43:8a:87:
                    d6:55:75:9a:c2:34:bf:02:8b:1b:b4:eb:42:ce:8e:
                    76:d3:0c:ed:86:3f:69:1d:85:a9:a2:3b:4d:7e:4e:
                    e1:5e:97:39:79:16:7f:18:db:e4:21:57:09:3d:b3:
                    55:48:45:b5:62:3d:7a:54:db:b2:54:c7:2b:90:17:
                    b0:d6:1c:68:b7:a0:28:e6:54:46:e4:d5:38:d5:59:
                    19:50:7f:fd:e9:94:61:aa:9d:6e:cb:15:a6:56:0f:
                    d0:39:ee:03:e9:a1:81:35:70:d8:76:ea:3f:74:1e:
                    ea:29:c3:ea:b1:21:b8:db:d0:69:43:c7:8a:b9:70:
                    0d:36:ea:0f:96:ca:51:2b:48:30:99:93:2c:3c:e5:
                    00:27:66:ac:b7:b2:e8:1d:49:dd:cc:90:85:2e:3c:
                    ea:aa:de:53:e2:f7:7e:32:f4:59:37:9b:f6:a4:07:
                    73:b7:33:ab:c9:02:0d:5a:e9:7c:1b:32:ec:1a:45:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:D9:27:EF:ED:13:3D:67:5F:58:0A:CB:65:24:39:66:DE:7B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f03ed81c-bfd0-37a3-89ec-200db0d77f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:20:c0:40:db:52:fa:7a:27:8a:20:bc:a5:d1:1e:9b:e5:
         69:3d:ec:de:3d:dc:c2:a3:66:e9:3c:2b:79:53:f2:d7:35:f0:
         4a:35:cb:90:82:f0:7b:66:c3:f1:1a:b6:e9:41:fa:f4:51:2b:
         54:92:41:46:69:43:bf:fd:23:d4:97:85:a7:2d:24:b1:8b:e0:
         a2:0b:f9:ac:80:3b:5f:2f:54:00:32:12:03:2a:e0:a0:f3:4f:
         a8:8f:53:1a:e6:ef:39:e4:8b:42:db:1c:e7:3c:22:43:99:0f:
         dd:04:d5:c3:06:cf:68:c4:be:23:f4:ad:33:0d:c6:5e:2b:61:
         01:45:dd:c3:f4:60:b5:f9:8b:c0:00:7b:e8:e9:6f:9b:89:48:
         08:95:5c:06:61:0b:dd:b7:e3:c1:62:a9:da:5e:7b:2a:e2:73:
         af:80:0d:5a:0d:de:59:cc:e1:77:cc:3b:b4:9f:79:10:90:3a:
         44:07:09:42:b5:6e:81:3d:a8:fe:43:43:15:b5:55:32:50:b2:
         e2:da:b5:6f:00:e6:71:0c:0f:1e:a0:bb:3c:47:06:29:ce:75:
         06:c4:4c:9c:d7:b4:d6:99:6d:8d:26:c6:c6:0b:fc:f1:c2:27:
         8b:9f:dd:4c:db:84:4f:e8:86:2c:00:9f:89:8c:8f:fa:6d:15:
         51:d9:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:00:31 2025 by rpki-client