Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f814a2f7-2016-381b-b4da-66343478f2e6.roa
File:                     f814a2f7-2016-381b-b4da-66343478f2e6.roa (raw, json)
Hash identifier:          QuDepZZ9zcryawH7ZIvQa8gQzhTCQ2mWfZzYoihIKJY=
Subject key identifier:   92:11:77:2B:53:59:97:AE:CD:5B:F6:21:03:F6:7B:61:35:86:DE:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF711117A8063E8BBFCB7A400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f814a2f7-2016-381b-b4da-66343478f2e6.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        207.207.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:11:11:7a:80:63:e8:bb:fc:b7:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=ff64b883-c5d0-4595-945d-8a5be130965a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:71:3a:ca:50:14:3a:45:19:b4:e2:60:c1:
                    a5:31:4b:f8:3c:dc:5f:fc:d0:a9:ec:80:c6:00:a5:
                    d2:86:85:f2:0b:e5:ab:83:1b:44:86:94:dd:ba:e3:
                    d3:61:cc:45:e4:f2:c3:51:d8:c7:b0:75:85:19:f1:
                    ce:77:9b:05:51:29:b3:19:29:55:c9:75:38:55:1b:
                    2e:54:1f:ad:22:ba:08:2c:db:ff:dd:d0:f4:67:2e:
                    59:50:e6:9a:28:c3:0a:d2:de:f0:05:f5:aa:65:bb:
                    bd:82:f9:0e:43:cd:b1:4e:48:0f:ad:b3:29:92:c0:
                    76:10:ec:d2:3d:12:80:72:b7:d0:13:8f:20:44:50:
                    30:4e:d2:cc:e3:4d:75:b2:dc:b8:58:57:79:5e:2d:
                    58:43:46:4a:cb:96:bb:75:8e:67:01:60:e8:4b:3f:
                    ab:89:1d:6d:07:4d:7d:33:32:62:65:45:96:f8:e7:
                    65:5f:6e:96:48:f7:b7:7e:b5:75:db:11:4b:57:18:
                    9f:5c:60:21:0c:fa:15:eb:b3:3b:a5:78:5d:12:26:
                    7f:ce:24:5a:c7:2b:a1:4c:64:88:40:17:bb:d8:8f:
                    9f:a6:48:2c:5e:92:56:e8:63:9c:cd:c1:bc:f8:ca:
                    59:b3:fb:d3:59:69:d3:09:7c:84:b8:9b:a5:e9:c8:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:77:2B:53:59:97:AE:CD:5B:F6:21:03:F6:7B:61:35:86:DE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f814a2f7-2016-381b-b4da-66343478f2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:25:84:c4:ec:d3:65:32:b4:f8:7e:f3:61:d2:43:ef:6f:e3:
         1b:57:ef:c3:6d:35:65:91:c1:2c:1d:32:8b:64:12:fa:f3:6a:
         83:f9:1f:31:ca:ca:09:4e:53:e2:a2:2f:01:12:92:b0:43:a7:
         ef:63:cc:58:29:92:a9:d0:54:86:da:ef:cf:04:e2:57:02:e7:
         82:b8:6b:05:67:ca:c3:ad:ce:04:23:69:89:bf:4c:00:43:fd:
         88:72:87:3c:e8:3d:46:ec:a5:25:a4:1c:c8:be:76:13:be:86:
         b9:69:11:1b:af:72:40:a5:93:cf:d2:ee:e1:9f:71:21:1e:6e:
         68:a1:6a:a9:9f:f0:88:13:1a:d5:e1:9c:e8:14:9b:4a:6e:5e:
         6c:2e:e2:fd:c2:2d:0e:ec:61:c5:e5:69:04:39:e0:16:a3:cd:
         1d:dd:39:cd:fa:72:3c:4b:1c:cc:51:38:de:cf:ce:38:61:9b:
         81:a8:88:7a:08:76:5d:ee:d0:2c:ef:09:af:36:98:1a:7b:b5:
         29:e1:f1:dc:85:6c:db:40:0b:1c:7d:01:26:58:b6:6c:09:09:
         6f:62:bc:e8:dd:74:83:9b:c7:59:87:df:3e:5e:16:32:3e:f0:
         74:10:a8:91:12:f7:94:15:9d:ff:a6:fd:5c:8c:55:5c:5a:43:
         6c:49:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:19 2025 by rpki-client