Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1618e62d-907e-3546-8a4f-f7d1f9b56511.roa
File:                     1618e62d-907e-3546-8a4f-f7d1f9b56511.roa (raw, json)
Hash identifier:          3uVpIALKmLI0prkRbDkgcxc31wptiukjh4/E0Av5pjU=
Subject key identifier:   CC:BD:6B:6D:AA:4C:EF:64:E7:9D:5E:54:0A:20:E1:D5:48:58:F6:E2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F80A4CC74A68281B8F7D945E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1618e62d-907e-3546-8a4f-f7d1f9b56511.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        192.189.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:a4:cc:74:a6:82:81:b8:f7:d9:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=339df8b1-3dcc-4f8c-97ac-1ef0d5db854e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:9e:dc:61:13:f7:2d:bd:48:92:12:81:55:
                    e0:91:f7:6e:0e:0d:09:20:45:5e:f9:ac:0a:66:b8:
                    f0:66:1b:f0:5b:a5:3f:4c:e5:00:72:56:9b:e3:14:
                    e5:b4:22:b4:45:28:5a:39:48:36:bf:6c:96:c5:a7:
                    ec:d9:41:89:db:88:6f:1a:4c:7a:84:62:be:8b:24:
                    7e:09:d5:89:c5:6c:bf:b5:03:7b:5c:9c:5e:2a:52:
                    d6:20:72:e9:0e:76:5c:64:72:dd:86:80:49:09:0f:
                    f2:33:74:c6:6a:bc:fa:92:13:9e:81:b6:ff:36:7d:
                    41:d4:d1:2e:be:6f:a0:19:be:d0:cb:c4:c2:47:30:
                    0b:42:1a:3e:ce:2c:1c:6f:58:9b:d4:67:ca:e5:b1:
                    43:03:7b:fa:44:93:ed:82:e5:ae:51:47:a9:07:0a:
                    f0:67:9b:0a:c0:b9:80:e1:76:03:11:b9:06:b6:84:
                    43:3a:53:cf:14:a5:96:92:15:b7:f5:bb:10:97:9a:
                    56:2d:4a:b3:1e:e4:28:09:ab:03:89:68:3e:dd:b4:
                    fc:20:91:a0:db:8d:41:0b:21:52:ed:9d:51:a8:08:
                    b4:42:b9:68:05:e4:3c:32:bd:ef:68:7e:e4:d1:5d:
                    76:77:6b:f1:56:2a:49:92:ed:4e:8d:13:6e:c0:cb:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BD:6B:6D:AA:4C:EF:64:E7:9D:5E:54:0A:20:E1:D5:48:58:F6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1618e62d-907e-3546-8a4f-f7d1f9b56511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:39:e9:0d:20:8b:24:30:d6:5b:be:9e:69:57:ca:8c:9c:fa:
         99:ad:0a:a7:a6:c7:31:f4:30:0f:ae:52:a1:2c:d5:cd:3c:0b:
         00:a7:55:ed:9b:55:10:70:ce:e9:a6:50:0c:a7:1a:ef:e4:a3:
         ea:c1:1e:e2:a2:e0:77:b4:26:45:6a:b9:ce:75:90:1b:45:c4:
         e2:ff:bc:ea:2f:2b:0f:d6:fe:de:30:8e:b1:ac:a1:9c:8f:17:
         ed:f3:32:87:c5:1e:34:ed:f0:d6:c0:74:30:f0:4f:53:55:e0:
         ac:16:2a:9e:cf:84:b2:f6:f5:a3:6e:c7:50:b8:1c:e2:f9:f3:
         80:40:7b:51:d2:64:3d:a4:28:5c:32:cf:bd:44:50:0d:dc:77:
         43:c8:2d:1c:46:a7:de:af:3c:9e:a3:c0:f0:13:a7:29:e1:af:
         31:09:d2:06:22:b6:10:93:5f:be:b7:6e:60:f4:e2:75:70:8c:
         cd:e6:15:ac:ff:61:f7:c8:bd:ad:ca:75:cf:d0:df:f2:fe:0a:
         42:12:b8:bf:a1:d1:ef:dd:de:ef:63:a6:ff:11:bd:a1:67:28:
         2f:c6:11:c3:67:87:6f:0d:c2:08:87:10:2d:75:cf:31:f4:fc:
         8d:f3:1c:b8:09:48:02:56:2b:df:2c:e1:25:f7:30:7d:eb:ff:
         62:6f:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:26 2025 by rpki-client