Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147c6c58-cb03-3796-8438-e8ca63cb41ea.roa
File:                     147c6c58-cb03-3796-8438-e8ca63cb41ea.roa (raw, json)
Hash identifier:          wepQvfH8XfOsx5OtCL5QkxkL/F3ZSiquO6JsZUIGePU=
Subject key identifier:   4D:B4:20:FF:11:EE:EC:46:44:65:63:D6:F3:65:BA:AB:90:A1:4C:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ED773F44616FD05B8CF053D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147c6c58-cb03-3796-8438-e8ca63cb41ea.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        98.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d7:73:f4:46:16:fd:05:b8:cf:05:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=a3d3002e-7bf1-4d2c-9f8f-a8096c475f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:77:32:86:67:f2:60:35:04:8e:8f:cd:fc:
                    17:41:31:f6:3c:44:35:46:57:ad:47:ab:55:dc:4c:
                    79:aa:e6:84:25:a5:28:5b:9b:12:22:09:20:6c:e5:
                    46:bf:96:e7:14:f3:83:74:9b:9d:23:fa:9c:b1:0c:
                    0e:a7:69:43:ae:03:82:a4:6e:bd:f0:1d:c1:69:58:
                    69:64:39:94:d6:3d:8a:aa:f1:47:a6:85:53:38:e3:
                    71:53:f6:82:63:c7:a8:b0:63:9c:b8:b4:f1:74:0c:
                    3d:9b:43:58:46:74:d6:fc:1f:50:77:7d:c8:d1:8e:
                    d3:66:ae:17:c7:41:82:5d:f6:15:82:df:31:d8:85:
                    59:cb:17:b0:87:80:84:91:87:e3:e2:1a:68:5c:08:
                    48:b3:37:b0:bf:64:d3:b8:97:58:3a:af:3c:be:33:
                    72:ea:f4:2e:2e:8d:73:02:58:18:2f:10:cc:fd:23:
                    a2:6c:e4:6e:ae:28:52:0b:b0:f5:76:9f:14:10:20:
                    f8:88:78:3d:4c:38:d1:2a:33:8a:41:76:17:c6:a8:
                    32:d4:db:25:1c:79:75:ad:bb:ad:df:ea:28:00:0a:
                    88:a7:b3:0a:85:6a:5a:cf:d8:4b:95:b9:a2:ed:e2:
                    ef:a7:2b:68:0b:fd:73:31:64:70:f9:4b:1f:47:a4:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B4:20:FF:11:EE:EC:46:44:65:63:D6:F3:65:BA:AB:90:A1:4C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147c6c58-cb03-3796-8438-e8ca63cb41ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:55:8d:0b:6e:34:41:a4:0b:d6:d3:b4:99:3b:18:6d:e9:
         2a:2b:d6:17:a8:21:f5:56:23:56:53:ce:de:bb:70:f9:93:f6:
         a4:49:d4:af:f7:4c:46:d7:7f:34:44:4a:9c:fa:47:0e:55:10:
         ed:db:5e:ff:c6:e1:eb:a3:e4:1c:e1:18:5b:8b:29:cc:f8:6c:
         44:b0:51:50:fe:ca:88:a3:cb:ff:c4:88:e3:a2:71:11:93:b0:
         11:e5:5a:07:de:67:87:7e:39:71:52:1e:48:da:90:6f:c9:56:
         4f:5c:0b:64:55:8a:2c:90:18:a3:ef:a7:74:ef:3d:da:68:d2:
         a3:e4:25:99:c5:57:35:77:d4:d9:52:88:d6:97:eb:1a:3e:50:
         21:aa:cc:3d:40:8e:62:d8:33:63:bf:ee:83:0d:e3:f0:98:13:
         0e:92:88:7d:77:57:d7:88:01:f4:9f:70:7b:92:a8:63:06:0b:
         1b:7b:ab:4d:35:a8:48:9a:0d:22:6c:1b:f9:52:64:4d:64:d1:
         8d:83:74:56:9a:fe:b3:79:ad:92:84:02:53:ac:06:fc:8d:6c:
         04:22:b6:56:94:9a:a6:b0:b1:c5:2c:ab:3e:99:de:a7:5e:fd:
         f5:b0:3b:eb:36:c6:81:7f:91:e6:be:92:09:07:62:79:d7:73:
         cf:8a:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:12 2025 by rpki-client