Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa657d88-12cc-3dcd-ad53-8403dfa2acfb.roa
File:                     fa657d88-12cc-3dcd-ad53-8403dfa2acfb.roa (raw, json)
Hash identifier:          yRzwuvDuepZPmF1G1cywtz1Kc6o6V7tWyJap+imOTDU=
Subject key identifier:   B9:EF:9D:13:9C:99:D3:3D:60:75:E8:0E:DB:CF:C9:A8:0A:D4:71:AA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C967EF4C9EEBC5041F2293040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa657d88-12cc-3dcd-ad53-8403dfa2acfb.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.132.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:7e:f4:c9:ee:bc:50:41:f2:29:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=aba68155-bfb6-4918-9b4a-b3afce36d04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:c2:1b:07:90:10:99:de:72:20:81:b6:4c:
                    84:bd:77:bf:3e:6e:15:50:7d:cc:e8:61:e1:c9:52:
                    3e:a5:1c:9c:fb:12:e3:6b:11:ac:3e:5a:0a:b5:af:
                    a1:56:db:0f:7b:c2:5e:ab:3e:8f:15:d6:50:96:11:
                    26:ce:d4:7b:07:fd:6d:cd:71:31:7a:97:6c:f3:33:
                    3a:d2:e8:dc:dc:16:fa:77:96:ad:a2:d2:90:fa:1b:
                    55:48:95:94:91:9f:7c:b5:4b:06:b0:20:8f:cf:38:
                    3f:a8:9a:06:b5:78:b1:08:9f:e9:d1:a4:cf:b4:95:
                    c3:01:37:ad:ac:79:e0:d2:94:a6:06:d3:b6:d7:02:
                    41:33:87:3e:43:e7:57:79:1c:2a:9b:2d:36:ab:72:
                    a7:81:d5:68:da:b6:25:90:8e:19:f8:0f:1c:f8:41:
                    87:fb:3b:6a:cb:54:26:58:06:ab:9c:88:f8:24:12:
                    2f:01:76:4b:e8:81:99:05:f1:5c:c5:a1:2d:19:1f:
                    3c:0d:b1:84:bb:17:31:62:2a:8d:e0:96:a6:ed:87:
                    98:60:ed:da:ed:41:c6:ef:5e:e7:26:28:16:ae:9c:
                    b4:d7:e0:88:ff:e9:0b:4d:1f:93:e4:54:63:c1:6a:
                    80:2a:9f:62:4d:5a:42:0c:fe:5c:9d:2d:88:7c:59:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:9D:13:9C:99:D3:3D:60:75:E8:0E:DB:CF:C9:A8:0A:D4:71:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa657d88-12cc-3dcd-ad53-8403dfa2acfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:42:d0:00:e2:8b:83:18:ae:2f:83:6f:a4:1b:16:55:e9:
         8c:79:a8:02:a7:1d:d8:10:41:05:b9:c2:6e:1b:67:f5:62:cd:
         f5:d3:1c:00:6e:02:41:ca:f1:7a:f0:e7:eb:1c:12:66:85:ab:
         5d:3c:14:f1:9f:d9:d7:4b:6a:33:1f:57:98:c6:80:2a:71:c2:
         ad:7f:b9:7c:60:f8:22:cc:c6:48:23:17:07:ba:8f:76:34:2b:
         a7:0a:b5:0e:e2:9d:fc:b8:16:a5:a8:1b:bd:a4:36:59:2a:32:
         bf:fe:96:db:e9:e4:cd:a6:13:71:96:92:4b:98:5a:2a:7b:6e:
         e7:c7:e0:1c:0a:a1:17:51:07:eb:9c:cb:f5:90:f9:d6:de:9f:
         a7:56:de:89:13:7d:ca:68:17:0f:93:d3:ef:b8:85:c1:ee:86:
         79:e3:38:24:67:3e:32:2d:b6:cc:8f:be:0f:2d:21:24:02:65:
         fb:d0:4c:34:5b:6e:cb:98:23:2e:c4:9b:ab:84:c5:7c:e1:d8:
         72:ef:c3:0f:34:94:c5:45:7e:1c:ca:b6:2f:c5:d4:ed:62:d0:
         95:71:55:5d:b0:1b:81:ac:0b:68:eb:69:e2:43:4d:70:3f:8a:
         1d:7c:3f:36:14:5e:b0:c5:45:d0:1e:c7:44:cd:c6:e4:a5:64:
         e3:2a:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:24 2025 by rpki-client