Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d28aaa3-8855-363f-8432-3897637c506f.roa
File:                     0d28aaa3-8855-363f-8432-3897637c506f.roa (raw, json)
Hash identifier:          1hWjwZBu6sZqWvW9R+3iahERqkqhW7MK/Xcrsem3Ys8=
Subject key identifier:   20:D4:FE:FE:C3:A5:C9:93:79:2A:BE:0A:1C:12:D4:1D:D2:6D:9F:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C02586D54FC872BAB8313C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d28aaa3-8855-363f-8432-3897637c506f.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.141.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:02:58:6d:54:fc:87:2b:ab:83:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=58b73832-89a5-4751-ba87-ec429d96a6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:d3:66:bf:2b:5b:9e:bf:c7:83:fd:4e:57:
                    70:68:4e:bb:99:98:8d:4f:88:f4:a2:79:ea:bc:cf:
                    b0:26:69:f6:eb:83:87:bc:33:95:5d:97:97:ed:59:
                    13:50:cb:5a:09:85:5a:f1:2a:64:e4:90:50:70:6b:
                    a0:0b:b9:56:40:39:bf:07:33:4e:d9:7d:e9:30:c3:
                    16:3a:c3:de:0c:ff:20:77:d5:c6:a2:0c:cd:8a:79:
                    a1:08:89:06:d1:b0:79:be:dd:82:14:ac:14:24:70:
                    01:34:1d:a0:2b:ba:22:b4:d3:26:3b:10:6b:0a:96:
                    f5:48:ee:f5:bc:6e:79:c1:80:33:cb:6a:e9:91:09:
                    a1:47:fd:df:85:f9:c7:c0:6b:88:53:9c:81:d2:3c:
                    bc:34:28:5e:98:57:49:e7:2f:16:e1:76:c3:64:a3:
                    55:9f:7b:d4:36:15:5c:c9:32:6b:84:9c:04:54:e8:
                    31:64:d0:9c:93:be:b4:88:6f:75:bb:da:c5:c3:67:
                    84:8c:6f:49:cf:c7:ce:71:9e:f4:72:e2:ea:93:33:
                    f4:7b:f1:f5:51:fa:14:ee:51:99:62:fb:45:34:45:
                    51:73:05:30:51:92:3f:f2:5d:e6:bc:27:e2:cb:61:
                    6d:7d:86:eb:c3:21:b8:ad:0e:df:1a:df:0e:78:69:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:FE:FE:C3:A5:C9:93:79:2A:BE:0A:1C:12:D4:1D:D2:6D:9F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d28aaa3-8855-363f-8432-3897637c506f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.141.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:d8:b0:02:97:2b:24:0d:44:00:b1:03:b6:9e:10:d6:c7:
         1c:b1:31:40:ff:01:e1:d9:f6:81:0f:82:dd:6b:7c:8a:a5:54:
         ae:b7:86:6a:f8:a2:f8:a4:63:d1:f4:fe:9d:da:f8:28:f0:1c:
         b4:88:48:13:5e:87:9f:4f:80:6d:ae:f6:46:e6:4e:a4:18:6a:
         91:cf:fa:53:e2:59:a1:fd:18:8a:18:93:dd:86:af:06:a8:9a:
         36:fe:58:12:2e:a2:37:e2:18:59:16:f6:19:14:98:0d:56:43:
         0d:b0:37:83:6b:e0:bb:66:a8:52:52:e8:de:74:38:81:6f:48:
         66:18:e9:e3:d7:b1:e3:77:9b:36:fe:27:fe:3f:fc:ac:b9:86:
         d3:74:d1:42:a7:68:7b:5d:64:9d:b4:c9:2d:22:d1:3f:90:75:
         03:e8:ea:04:d3:1b:72:cf:59:64:4b:29:87:ff:25:ea:3c:c2:
         f3:e9:fc:42:30:81:9f:08:fb:71:8d:d7:2f:5f:99:24:3f:9a:
         61:9c:d8:90:dd:d3:06:37:6d:e1:a1:f9:46:33:09:2a:c2:54:
         74:ef:3c:82:a4:f5:68:e2:57:6e:5d:71:eb:35:7b:e1:39:b2:
         9e:ba:0d:f4:0c:ad:87:8a:3d:9b:28:e4:c1:89:e6:3d:b3:68:
         8d:75:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:23:34 2025 by rpki-client