Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10498861-5f16-3e9a-868d-9d61d11e7a19.roa
File:                     10498861-5f16-3e9a-868d-9d61d11e7a19.roa (raw, json)
Hash identifier:          sGlFrp4lJQzY4RgteSzyLAaXaZc8VwZlZ3O5tfYi+ps=
Subject key identifier:   D5:BB:B0:4B:B0:1C:FF:A8:89:F4:4C:A1:89:67:7D:35:EC:36:1C:DB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCED774E1E6F4A6E840D36D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10498861-5f16-3e9a-868d-9d61d11e7a19.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        96.0.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:d7:74:e1:e6:f4:a6:e8:40:d3:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=171d8bf3-4e44-4b83-9bc9-211989a68e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:29:b8:32:32:6c:33:de:93:a6:29:05:7f:
                    6d:76:dd:b1:ed:b8:83:08:cd:d4:10:a1:0e:ab:44:
                    8d:ca:c1:8a:83:08:b7:01:f4:40:13:7c:dc:9f:11:
                    85:15:c5:45:60:17:ff:10:06:45:67:e6:c9:ca:ac:
                    66:91:ad:c5:78:6e:b5:db:83:74:a4:a9:61:a2:cb:
                    06:48:ce:88:24:4d:fa:d4:00:e1:f9:52:70:b3:74:
                    b4:99:e7:f4:00:a4:64:54:44:8a:ac:8a:6c:4c:d4:
                    1b:fd:a4:7c:4a:3d:41:56:19:d2:38:bd:d9:4e:ae:
                    af:ad:7f:62:0b:d9:09:fe:93:ee:1e:fa:f8:f9:9b:
                    86:3a:46:b1:73:42:60:45:3f:bf:6f:87:8a:e2:37:
                    b9:b1:78:c8:56:64:6f:04:88:55:ba:df:5b:cc:6b:
                    f3:d8:92:f3:14:2d:5d:22:a7:d8:d3:9a:5f:fb:6f:
                    da:18:12:94:b8:c9:b8:61:2f:4f:38:53:0e:27:8b:
                    99:d0:e5:79:24:3a:11:18:11:87:fa:39:d9:03:5d:
                    fc:a2:07:ef:49:85:37:b8:4d:ff:45:79:d8:70:c2:
                    6b:92:fb:f6:3d:91:83:75:eb:59:00:e3:86:3d:c0:
                    61:02:be:4e:86:94:36:0b:b8:dd:2a:42:58:bd:0b:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BB:B0:4B:B0:1C:FF:A8:89:F4:4C:A1:89:67:7D:35:EC:36:1C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10498861-5f16-3e9a-868d-9d61d11e7a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:40:75:b4:5d:a1:8d:ef:51:66:72:a2:a1:66:5b:14:7a:22:
         1b:9f:a2:e0:bc:22:f3:05:11:ae:44:68:fb:1e:c8:07:89:a0:
         6f:49:8f:70:34:e7:31:78:5b:31:67:91:6b:62:f7:c8:bc:0c:
         b5:bc:e6:05:e0:0c:61:87:a8:a9:8f:97:94:27:88:e0:e0:f6:
         fc:1e:ac:15:33:35:83:21:d5:df:b1:cb:39:e3:a9:a4:e5:4b:
         83:71:c5:92:56:86:3d:42:76:67:33:a6:5a:6d:4b:7f:73:fa:
         89:a9:21:52:81:35:64:10:e9:82:48:27:8c:9c:82:61:24:6d:
         a6:2e:84:9b:66:5c:98:3f:ed:ea:dd:a6:eb:06:ac:49:6e:0b:
         41:1e:12:01:a5:3c:18:7a:aa:62:2c:10:b8:61:5a:45:3c:da:
         35:ae:5f:46:e5:2a:70:d0:99:a4:31:e8:1b:1b:70:b7:07:b4:
         c4:3c:68:a5:44:26:f6:01:dc:73:0c:40:21:94:13:d1:19:77:
         4a:7a:23:3c:22:be:c7:c9:85:ed:13:e7:fb:d5:c0:ac:69:72:
         ae:49:28:1d:13:61:10:4d:33:d9:2e:6b:dd:85:ba:ab:55:04:
         4e:ba:2b:50:3a:75:40:2b:ea:f2:84:0a:8a:4d:bf:15:f1:b1:
         ab:dc:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:20:02 2025 by rpki-client