Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f83b7077-da9b-363f-ab1f-9209b03fb8e7.roa
File:                     f83b7077-da9b-363f-ab1f-9209b03fb8e7.roa (raw, json)
Hash identifier:          hzLUwW1hgNIeqB3KXoIssBHbzSfML4bB63NhisJQywE=
Subject key identifier:   35:F4:E7:C2:CE:F2:23:6E:94:48:FA:E3:AB:3E:68:04:78:3A:70:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAB0D1B3BF29C48A7DCAEFD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f83b7077-da9b-363f-ab1f-9209b03fb8e7.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        70.236.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:0d:1b:3b:f2:9c:48:a7:dc:ae:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=e933cdb4-0557-4365-9d36-727d74b726ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:b6:28:f2:2e:cf:4d:40:c8:06:bd:25:e8:
                    84:c5:73:79:6c:2d:0c:2d:90:11:ff:16:23:12:d2:
                    7b:f5:57:1e:43:de:b5:73:c0:5c:ff:af:d1:33:6f:
                    d9:bf:03:0d:29:f9:fd:78:1b:be:9a:e6:89:d1:e4:
                    23:99:90:d1:5b:04:36:eb:6c:7a:88:d1:8b:60:f2:
                    c4:6f:44:47:b0:c0:fe:b5:8d:1c:ba:9d:e4:39:51:
                    9e:2b:c5:32:a4:92:fc:3d:2e:e1:1e:42:20:0f:68:
                    19:5e:a5:4c:a8:17:8d:fe:40:55:5e:5c:88:03:49:
                    ac:42:4b:d3:b1:22:6c:ce:73:e4:84:93:63:2a:cb:
                    74:aa:db:a0:98:dd:4f:af:9e:92:eb:ae:b2:dd:7e:
                    ce:e6:86:cb:d6:96:a7:c3:d8:36:06:d7:b0:e0:5d:
                    69:99:87:f7:97:9e:b4:08:77:63:f4:8e:a1:f0:f4:
                    42:87:de:5c:3b:ee:cd:8b:89:79:d0:f8:28:20:ca:
                    70:d3:4d:bc:c6:1c:fe:35:34:3c:3e:d9:17:7c:5d:
                    7b:ae:77:20:62:59:11:db:a1:ad:76:d8:38:e2:a2:
                    7c:48:56:ae:b4:b8:3d:a3:1c:86:c1:e1:a3:26:49:
                    65:66:aa:d7:50:4d:85:58:15:a0:af:32:28:b2:b5:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:E7:C2:CE:F2:23:6E:94:48:FA:E3:AB:3E:68:04:78:3A:70:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f83b7077-da9b-363f-ab1f-9209b03fb8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.236.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:96:84:2c:46:fc:bd:31:5b:6b:3d:e7:e8:be:e8:f2:c0:
         44:27:24:e5:6c:e1:af:74:37:47:93:21:f0:d6:5d:69:67:31:
         7a:b5:58:a7:5c:eb:ff:b3:21:7a:ab:9c:38:2d:ec:76:04:bb:
         cd:b0:e4:05:40:ed:a4:89:db:9d:00:ca:8c:77:3a:3a:87:45:
         1e:44:06:d7:e7:5d:7d:83:bd:f3:cc:21:79:51:f8:9d:89:7f:
         c7:a1:b3:22:85:89:5d:9e:b8:de:76:a2:0c:7a:21:e2:5c:ac:
         9d:5f:71:a1:b0:ec:87:ee:ed:34:4a:a7:d7:04:92:2c:b5:a3:
         2d:b5:47:f9:31:59:42:42:f1:c5:5d:37:8c:1a:7a:fc:c6:0a:
         c9:43:06:4d:8a:db:ca:6a:d6:2a:dd:52:86:98:7b:24:31:23:
         d0:a1:1c:c3:be:cf:71:93:e9:63:da:3c:c5:5a:1f:5d:f1:36:
         2c:ac:96:a0:64:79:fe:d7:84:93:7c:98:f3:bd:5f:05:f4:26:
         26:88:a9:ee:94:70:82:78:64:b5:d5:52:fb:ec:b8:c8:b5:19:
         70:59:e2:c5:d4:e2:87:0c:2b:fa:d0:5e:52:9a:b4:4d:45:e6:
         97:a2:eb:56:f5:c4:3d:82:bc:96:70:47:3c:6f:08:39:39:03:
         c6:9b:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:37 2025 by rpki-client