Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc1eea61-aefa-3e6e-970b-3b64c5ea9990.roa
File:                     fc1eea61-aefa-3e6e-970b-3b64c5ea9990.roa (raw, json)
Hash identifier:          Xf3q9IfKBQFnB6QZbidiWQl+7hEPcCAqZEyVDxBnxg0=
Subject key identifier:   C2:31:F0:C3:D4:AF:88:8E:EF:C4:BE:29:7E:3B:EF:5F:CA:95:E8:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406B7801AC64A7E199D93F76F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc1eea61-aefa-3e6e-970b-3b64c5ea9990.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        70.232.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:78:01:ac:64:a7:e1:99:d9:3f:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=10a20309-324b-4d91-bc6b-c1b837f37625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:94:2a:34:48:3d:b1:b0:49:be:10:6c:bb:
                    ec:6b:2c:97:4f:44:f4:e3:45:18:b4:61:53:04:24:
                    f0:74:4c:69:75:ef:cd:ac:43:90:64:1d:f7:3c:17:
                    d8:be:d7:04:56:d2:14:95:68:1f:77:5c:b7:80:47:
                    7e:bf:8e:3b:d6:6b:09:d8:31:eb:57:43:f9:1f:c7:
                    23:bd:5c:84:77:44:5d:f2:53:67:db:9a:52:5e:fe:
                    3f:9c:9c:12:8b:d7:c8:4f:99:9a:52:3f:aa:fd:98:
                    62:8f:47:97:18:2c:9e:2c:40:4d:b6:75:9d:6f:d6:
                    fa:81:91:f6:c4:68:79:27:87:51:b0:63:68:e6:cb:
                    8d:92:11:ae:f3:53:99:03:cf:44:4f:e2:12:40:95:
                    4e:24:b5:97:14:af:09:d2:c9:ae:46:eb:d2:50:dd:
                    d4:60:7c:35:87:c7:4f:1d:49:ea:ba:74:60:ee:50:
                    b4:18:90:0f:ae:e5:c5:4a:7b:fe:fb:c6:97:da:da:
                    6c:7a:8f:a9:e5:f0:79:2c:20:8b:9b:81:1b:9c:94:
                    cf:bf:4d:80:c5:9e:53:2d:20:fb:d7:4e:ed:4c:b6:
                    dc:8b:c3:21:1a:7c:59:8b:aa:92:cb:6e:3e:c5:36:
                    69:01:4b:ce:85:a2:7e:51:de:20:e9:99:c0:bd:f1:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:F0:C3:D4:AF:88:8E:EF:C4:BE:29:7E:3B:EF:5F:CA:95:E8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc1eea61-aefa-3e6e-970b-3b64c5ea9990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:0b:d4:5d:76:c9:a9:e6:47:28:54:e6:93:31:e3:41:f7:
         3c:b4:33:50:99:bc:cd:a2:a9:56:1e:37:6a:4c:52:57:47:28:
         c8:13:72:02:59:64:93:f4:92:c1:cf:b6:0f:cb:7e:04:d1:95:
         92:6d:b4:b0:e7:ca:7d:40:ca:7c:28:01:78:fd:ee:75:56:bf:
         63:8d:6d:3b:cc:39:ff:c1:65:c0:14:18:df:48:8d:b8:d6:37:
         18:0d:9b:56:11:ba:f8:f9:2a:63:df:34:48:04:88:f0:3c:61:
         a5:a6:20:63:5c:6a:06:4a:e1:8c:3d:37:3b:00:9e:af:21:6f:
         a7:ca:ea:b5:91:f9:4c:03:1d:18:3e:e2:81:db:be:40:76:76:
         54:c4:5e:94:dd:3f:17:57:16:61:ad:28:a7:2a:02:06:d3:aa:
         25:77:99:ba:c6:d3:35:a3:7b:5f:af:9c:48:e4:47:b3:73:4e:
         d2:0a:0a:2d:8f:f1:f2:9e:2a:d7:ab:80:9f:23:0e:4f:67:01:
         8f:b6:e5:d6:38:bb:cd:46:a6:f4:24:d9:b7:54:94:80:8d:44:
         60:0e:ec:3c:51:ab:e6:4e:ca:15:57:a0:6e:7f:e0:7a:ac:10:
         81:aa:57:4d:7a:99:34:a9:a3:ae:b5:ae:d7:e8:68:5e:d2:6b:
         25:fa:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:59 2025 by rpki-client