Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f64e00cd-7803-3ebc-87a4-67f18065e390.roa
File:                     f64e00cd-7803-3ebc-87a4-67f18065e390.roa (raw, json)
Hash identifier:          Y7iFI5LMHNm0LuwLqgfcULLwONH2Ov5RWiLU5jyxoyA=
Subject key identifier:   F3:6C:F2:F0:FE:3E:3B:11:23:B0:34:02:2A:CB:B4:9D:D7:84:99:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCF66A81393D18A67015B1D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f64e00cd-7803-3ebc-87a4-67f18065e390.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.240.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:66:a8:13:93:d1:8a:67:01:5b:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=8fac89b1-173a-4982-8864-38b4341af8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:d8:ac:3e:63:b2:d5:50:08:3b:26:82:dd:
                    05:35:9b:eb:df:de:c1:89:2f:fa:bd:08:80:f3:20:
                    6c:cb:34:e5:f2:5b:85:9e:aa:ef:0e:7a:1d:cb:ac:
                    79:72:ec:6e:8c:d2:12:8c:37:ac:80:b0:0e:54:88:
                    8c:4c:21:62:f2:c5:0a:3a:fb:54:3e:8d:b4:b5:6f:
                    51:85:97:33:89:66:46:87:2f:b1:c5:e1:83:89:25:
                    b5:2e:5c:f7:70:0c:6d:f0:41:d2:2a:65:40:7b:3c:
                    8f:18:9c:d3:55:b1:22:ab:14:7c:53:ca:1a:64:0b:
                    bf:96:1c:9f:50:de:bc:55:00:a2:34:01:71:c5:9e:
                    88:c8:c2:d4:f3:8d:22:b4:ff:63:f6:2b:87:5a:95:
                    42:5f:b0:73:f2:56:42:d4:7c:0f:b2:46:f1:bd:88:
                    7e:68:35:25:9f:2a:07:41:35:df:13:7c:d2:60:85:
                    a9:c8:74:04:60:b5:9b:7b:af:cf:d9:3a:a9:53:61:
                    78:e1:d8:75:a6:bf:9d:ac:3e:e3:e0:c8:5e:3e:1f:
                    53:ec:fe:36:2d:7e:2c:81:97:18:27:6d:f0:c0:c3:
                    a7:ce:c7:ad:03:ed:b6:52:2b:85:1f:31:43:45:13:
                    79:77:51:e7:f8:6a:f0:23:66:49:57:61:f2:1b:a4:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6C:F2:F0:FE:3E:3B:11:23:B0:34:02:2A:CB:B4:9D:D7:84:99:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f64e00cd-7803-3ebc-87a4-67f18065e390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.240.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:4c:ee:35:05:d1:f4:d5:26:de:46:f2:c7:49:72:b1:43:
         30:c1:ac:24:26:47:d8:57:5e:2f:82:af:e6:90:3c:57:e7:cb:
         1a:37:cf:3e:d9:f7:4f:15:7a:81:30:5f:69:9f:bf:fd:3b:21:
         58:10:c6:f6:fe:62:36:f2:1a:72:d8:a1:9e:7e:83:bb:96:43:
         39:ed:ec:28:47:04:38:bc:a1:35:b6:73:42:98:fc:d9:ea:43:
         bd:50:cf:b0:8a:7f:07:e2:df:24:22:81:00:98:89:b5:be:ce:
         72:60:96:42:04:6e:7c:d0:54:47:18:bf:a2:a1:18:05:62:aa:
         9b:0b:c6:c0:9b:d3:e2:75:64:47:76:86:7d:de:ee:7d:7f:fe:
         86:43:8a:28:6e:0e:5b:0c:9f:ef:e1:b8:23:77:c9:38:d7:03:
         a8:56:05:0b:6d:4c:c3:f9:46:9e:86:e4:d8:c5:99:45:4d:d2:
         0a:5b:d3:42:3f:40:0c:66:cb:9f:99:ec:09:9b:60:17:bd:92:
         22:17:b1:f2:d3:cf:75:ee:c2:70:31:28:4f:da:a1:c0:c0:48:
         e0:da:63:99:db:ff:fd:b7:00:61:62:c5:bd:52:86:2c:3a:49:
         34:c4:73:00:0d:9c:d4:0f:f9:35:53:c0:2a:6e:4a:9e:a0:e3:
         3c:4f:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:04:05 2025 by rpki-client