Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f08f00e6-e196-3f56-adb4-2246eea8b0f3.roa
File:                     f08f00e6-e196-3f56-adb4-2246eea8b0f3.roa (raw, json)
Hash identifier:          Y7EcRKsTwfYIebPbd7BAf6Jwph3srmZvbC8ihf/1qXI=
Subject key identifier:   08:06:D5:EA:27:24:ED:AA:CD:B9:B0:1C:24:94:05:18:DF:84:A2:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA49DAB2A2022070F20C8C300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f08f00e6-e196-3f56-adb4-2246eea8b0f3.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        75.47.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:9d:ab:2a:20:22:07:0f:20:c8:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=cd887490-ca30-4136-abdc-4841792d2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:2b:d7:66:ef:0c:8e:77:bb:50:f2:ad:0f:
                    05:dd:ff:ba:76:3f:57:4c:93:49:fe:24:df:3b:ee:
                    b9:ac:24:b7:1f:55:2d:e0:52:5c:e2:c2:f4:47:eb:
                    b3:98:06:69:21:9a:aa:0a:74:6f:c2:c3:5e:d3:43:
                    19:e9:2d:bc:71:fc:eb:03:52:9c:bc:80:d0:8f:27:
                    b4:4a:04:73:35:c0:00:bb:e8:4c:8b:80:15:bc:16:
                    25:78:ab:47:96:15:29:1f:5f:d0:b4:ed:2a:9d:b3:
                    5e:66:69:9c:b9:3a:53:88:76:9d:27:8b:d8:29:d6:
                    27:56:4e:8e:e1:75:8b:c8:4b:c5:ac:7c:90:98:3d:
                    f7:1f:8c:d6:9a:be:8b:11:10:96:a8:c7:63:21:12:
                    8a:70:09:02:8b:39:b2:c7:83:16:c6:b5:88:55:84:
                    38:49:04:c9:6a:06:18:10:6c:79:7c:5d:53:c3:a0:
                    c0:9f:4d:53:8b:76:51:3c:86:ef:6b:7f:ea:40:ec:
                    0d:b3:67:0d:d5:69:b9:f8:92:2a:ad:28:b9:de:01:
                    0d:be:59:e3:a8:ea:c3:32:bd:bb:7c:a9:13:3c:f3:
                    f5:a1:71:47:46:ef:43:23:5f:1b:28:e5:4e:86:b8:
                    dd:0f:8f:bb:7e:71:6f:fa:9e:78:86:d2:e9:91:8c:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:D5:EA:27:24:ED:AA:CD:B9:B0:1C:24:94:05:18:DF:84:A2:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f08f00e6-e196-3f56-adb4-2246eea8b0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.47.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:59:03:5b:b9:57:1c:97:6e:07:26:91:aa:58:cb:d6:97:
         79:a4:83:7e:c7:e8:bd:b0:5e:08:d1:67:67:cc:0c:4a:a0:e0:
         08:7a:00:a2:cf:a9:fe:f3:27:9c:ed:a9:ed:ac:4b:36:d6:3d:
         df:2c:c8:dd:95:af:41:be:c0:cc:72:12:bb:8a:ce:37:54:da:
         59:91:77:12:a7:43:1f:d3:23:5a:57:3a:e0:a2:3a:54:fc:57:
         21:5d:de:9d:13:d7:23:01:9d:b9:46:c5:b5:a9:97:a7:04:71:
         30:23:2c:3a:82:69:48:f8:3b:4f:00:90:78:c4:b5:50:a3:0b:
         ac:0d:5c:66:e5:43:bc:9f:86:2e:54:71:b5:0e:e4:e3:7d:14:
         df:79:19:a9:ec:b3:67:99:1b:24:ac:d9:32:4c:f5:ae:2d:2d:
         b5:be:d5:af:f7:08:8d:d3:b2:ce:2c:15:56:19:32:5c:6b:eb:
         d9:b2:0d:e7:93:bc:7e:f9:0a:0f:71:61:bf:65:33:26:6c:2d:
         f1:92:8a:6d:47:e7:9c:de:c4:35:81:c7:ac:58:85:d6:62:60:
         98:84:49:2b:b7:de:12:c5:ae:36:f7:e1:5e:61:7e:4d:8e:e8:
         0a:23:bf:8f:c6:32:c7:9b:26:ff:f0:a6:1a:2a:a0:68:18:fe:
         69:67:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:24 2025 by rpki-client