Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f13219-dea9-3d93-9fc6-a10420586452.roa
File:                     11f13219-dea9-3d93-9fc6-a10420586452.roa (raw, json)
Hash identifier:          jizfZx1EQ0+ZwAzVIs8bvAMPWEjomlnqjMXUTvcP7qc=
Subject key identifier:   D9:86:85:FD:8E:41:5F:27:B0:73:E8:D0:B8:DC:AD:26:E6:3F:55:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C02F0ECC45546E5F60C7800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f13219-dea9-3d93-9fc6-a10420586452.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:02:f0:ec:c4:55:46:e5:f6:0c:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=c57abf08-a20d-4c2f-815b-ffbe6632c731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:6f:25:72:d0:13:3d:54:81:5b:e4:a8:48:
                    b1:b0:94:fa:1c:c6:7c:ba:fe:18:c7:26:70:91:5b:
                    6a:a6:e9:30:72:f0:70:3f:88:8b:3d:23:b7:67:f2:
                    28:a3:86:9e:81:90:18:fe:87:c5:ef:f3:be:fb:fe:
                    fd:b1:c3:d5:e3:2c:4f:ef:57:e2:56:14:f2:52:2a:
                    17:a3:43:21:a4:51:e1:cd:0e:76:89:b7:65:31:60:
                    e0:af:3d:aa:45:77:fa:f2:65:ac:73:c0:60:71:4d:
                    30:97:20:cc:58:2a:ce:32:62:58:f9:09:98:32:16:
                    1d:85:13:5a:1a:ca:78:0a:ad:c7:64:3d:9a:2c:e4:
                    65:7e:3a:28:f2:75:7a:c5:79:c8:b3:28:81:6f:e6:
                    b9:50:08:c2:62:7e:fd:33:bc:49:09:6d:08:fa:bd:
                    56:6a:fa:45:5b:2d:1d:a5:96:81:99:8f:ce:d8:62:
                    3d:9f:f6:38:72:30:a3:aa:6f:a5:ab:ef:4f:33:80:
                    66:15:14:28:77:07:3b:50:85:85:2b:ab:03:d9:3b:
                    d7:91:33:70:91:8a:9f:7a:ce:13:fc:69:48:e3:dd:
                    cd:de:53:b5:ed:bf:47:64:3e:86:dd:49:ac:7e:4e:
                    5a:33:19:bf:e9:86:27:f6:e4:91:5e:7f:79:c5:88:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:86:85:FD:8E:41:5F:27:B0:73:E8:D0:B8:DC:AD:26:E6:3F:55:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f13219-dea9-3d93-9fc6-a10420586452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:0d:22:22:32:5c:54:ff:26:db:4c:b1:ef:31:4f:a2:22:
         7e:95:6d:67:6e:24:59:96:3b:8e:b3:de:37:1a:72:bb:41:66:
         7f:98:1a:ea:de:12:ff:e0:ac:5c:9b:92:5a:8c:a0:98:46:81:
         c1:56:07:0f:f7:32:ad:c6:a1:73:da:66:3d:e5:43:c1:72:4e:
         77:89:1c:44:b9:d9:d0:45:69:8d:c4:f2:c9:97:44:ad:e8:91:
         89:74:d9:0b:47:5b:2e:cd:b3:07:d2:7a:f8:4f:b5:a0:ea:79:
         65:80:99:87:0b:34:3a:fd:79:60:36:1e:da:37:e5:76:38:85:
         3b:38:e9:5a:03:e5:91:e9:16:7a:c3:47:ba:30:08:4f:06:51:
         46:dc:c1:9b:d3:bf:2d:50:66:03:4a:96:51:2a:ac:57:ca:f1:
         ab:47:c6:14:de:2f:0b:b0:11:56:2b:f2:41:1d:70:7e:d0:d4:
         ee:a1:1d:3e:be:99:e1:0c:8a:e9:af:2d:a2:6f:07:35:05:54:
         79:77:45:5b:93:4d:36:8a:d5:22:e9:90:fc:47:da:f7:73:d0:
         e7:8d:8b:15:a7:d9:86:21:a7:dc:1b:34:4d:72:b4:5f:f6:4d:
         3e:15:2d:c5:92:0e:5e:fc:99:dc:2d:77:39:e7:e7:9a:91:54:
         dd:c4:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:04 2025 by rpki-client