Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19931c7b-401a-329d-9478-3c6052eacfc4.roa
File:                     19931c7b-401a-329d-9478-3c6052eacfc4.roa (raw, json)
Hash identifier:          +kcpRAvI9ECuWByf75cgAw6TOlUnkPGb3p6S3Ddl4gk=
Subject key identifier:   12:06:38:3B:EF:D9:8A:94:9D:F0:FF:F6:D6:9A:0B:51:D7:F6:B6:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F59EFE3C6151A35BF1F86AC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19931c7b-401a-329d-9478-3c6052eacfc4.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:ef:e3:c6:15:1a:35:bf:1f:86:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=a7c5a609-a928-43e1-a951-01b88b701593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:aa:6c:6b:73:be:b4:aa:21:a6:b3:d1:e2:
                    a3:72:cc:28:0a:f8:d4:85:6b:c7:a1:a5:37:57:b3:
                    2a:0e:1e:67:85:72:e4:19:3f:fb:b8:2e:e0:4c:93:
                    33:57:51:db:9c:74:fd:44:8c:36:2c:9d:9f:2b:ec:
                    94:2f:9f:9a:2f:00:53:53:bc:18:a4:15:db:b8:79:
                    e0:08:89:a4:c6:30:4d:83:22:26:72:60:34:ee:60:
                    68:cd:6e:6e:79:97:c1:fe:27:a9:21:6a:dd:16:c2:
                    6c:08:38:f8:75:dd:59:7f:a9:26:ea:78:3e:c0:1b:
                    49:ed:69:df:8e:5e:57:e1:ab:c3:c4:c5:ef:19:bf:
                    bd:fd:df:41:6c:8d:bd:ca:9a:a0:cc:0e:cf:1c:bf:
                    ad:14:e2:4b:44:9b:6f:20:20:60:10:99:5c:f3:16:
                    2b:80:6f:73:bf:df:f1:66:a4:7d:ba:f6:8e:ce:52:
                    ca:db:b2:ca:17:99:a6:15:0a:c5:e5:00:b5:dc:80:
                    7e:7a:80:72:99:45:29:a2:43:6a:c8:a1:43:c4:70:
                    6f:6e:83:45:2e:c9:75:f6:8b:78:be:a3:8e:28:72:
                    01:e3:03:56:5a:e1:77:c3:a2:c9:5a:a2:44:fb:7d:
                    13:82:7e:49:0d:72:b5:13:00:c3:23:77:5d:db:0f:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:06:38:3B:EF:D9:8A:94:9D:F0:FF:F6:D6:9A:0B:51:D7:F6:B6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19931c7b-401a-329d-9478-3c6052eacfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:21:4a:9e:15:d2:c2:da:80:d9:21:7f:de:81:9a:de:2b:
         a9:b8:75:8a:c2:12:fd:be:0f:ae:2a:17:d9:4f:bc:54:c4:f4:
         56:b9:65:c9:6f:9f:2e:cb:30:7f:1a:cd:1c:21:15:4a:f1:2f:
         22:e5:02:c0:f1:84:94:58:1c:85:47:c1:33:a2:f9:9e:04:a4:
         15:3d:6e:d2:a4:28:3f:e3:de:6b:aa:55:23:fd:7f:9e:80:de:
         74:24:f5:fc:aa:65:41:5a:8b:4c:22:88:22:c1:19:cd:c7:c6:
         07:54:e9:14:9a:50:c5:b3:4c:fb:c7:3d:83:e8:11:89:79:1a:
         97:95:02:bb:37:d8:ac:81:ab:ff:64:0b:6c:4d:67:09:f8:6c:
         49:71:1d:a4:81:55:b2:6f:03:30:73:b7:a3:e4:54:8f:72:a7:
         c5:89:c5:9f:25:b8:c7:d7:08:72:e7:24:a9:65:ff:32:4c:60:
         3a:ea:ac:3b:9e:5c:2c:f9:d2:84:6a:ae:25:47:06:15:11:9f:
         19:22:69:ed:29:f3:c1:2b:6b:21:2e:95:d7:2c:1a:52:2c:b2:
         a7:4f:e6:cd:e6:db:38:3e:13:a5:d6:31:ff:a7:6a:22:b8:97:
         5b:03:86:27:6a:23:28:8e:4e:b8:3a:b2:04:c0:97:b8:e1:cf:
         d0:79:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:47 2025 by rpki-client