Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cd5d5cc-57cb-3c45-9f9d-ed47d1ed0d43.roa
File:                     1cd5d5cc-57cb-3c45-9f9d-ed47d1ed0d43.roa (raw, json)
Hash identifier:          NnTA3zRv1kurxlwHJFh94Sfraxv/z3KsbVgkkYPGJ+U=
Subject key identifier:   24:46:3F:C3:DE:B8:AF:24:17:62:35:7A:D2:8D:E9:CA:19:FD:EF:9E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584019FC61F0BFFAD070E7310F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cd5d5cc-57cb-3c45-9f9d-ed47d1ed0d43.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        99.151.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:fc:61:f0:bf:fa:d0:70:e7:31:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=67c48a84-2fc4-4089-b055-53077ab14469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:18:50:b5:ab:b2:13:0e:d3:1c:4c:58:0e:
                    c1:58:27:0c:0b:98:0c:7c:6c:32:8b:a1:4f:ca:47:
                    ea:1d:d0:56:a1:12:25:c8:e7:6d:ca:3b:7a:dd:2f:
                    ab:36:0e:f2:6c:25:44:36:85:b0:b0:63:86:cf:cb:
                    0b:c0:92:1c:2c:0d:8b:07:c0:98:b6:92:c0:97:50:
                    be:11:13:f2:ea:dc:b7:1c:4a:87:78:6e:a4:47:79:
                    fa:0f:bb:aa:60:3b:23:41:12:0b:87:36:11:72:0d:
                    09:66:4b:78:30:de:58:f3:b8:c0:ab:c1:02:da:2f:
                    d0:7b:ca:35:7a:6d:f8:4e:42:24:38:b9:9f:74:8c:
                    7f:ca:d8:22:b9:35:31:85:dd:70:12:b6:00:ba:a7:
                    e4:b5:c7:74:60:dc:9c:f2:cf:1f:ef:ff:21:4c:9d:
                    30:fb:29:fa:67:57:72:b1:95:0b:b1:5c:74:ef:d1:
                    ec:8c:44:c4:da:f5:35:a7:3c:29:ce:59:13:7d:fe:
                    68:5f:40:1f:31:d9:5c:80:27:a6:80:43:08:54:75:
                    91:17:98:36:6b:17:d9:34:bd:21:4b:11:66:7e:34:
                    06:58:90:8c:44:1c:d7:45:6e:64:8b:22:0f:a5:d0:
                    f6:22:89:90:11:02:8e:e3:94:d8:c7:21:89:f4:99:
                    b1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:3F:C3:DE:B8:AF:24:17:62:35:7A:D2:8D:E9:CA:19:FD:EF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cd5d5cc-57cb-3c45-9f9d-ed47d1ed0d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:e8:0e:b0:bc:fb:63:3d:8c:d9:ae:cb:26:7e:e3:8f:53:
         5b:3f:26:af:e8:09:76:82:8a:2f:a6:73:f0:23:59:e7:65:e7:
         5a:ac:a4:d4:68:73:25:be:5a:c5:b4:3b:4e:6e:2d:f4:cb:8e:
         6f:bf:53:c6:45:09:01:ff:f7:65:01:ce:49:a7:69:a2:47:01:
         68:9e:45:64:80:a1:bc:42:6d:8a:34:ac:9f:65:44:df:cf:89:
         0d:74:9c:f6:08:2e:54:74:9f:34:10:5b:b4:0e:19:78:9e:85:
         03:2e:4e:ac:00:23:b8:48:94:85:e3:b1:05:bd:d4:b2:63:b5:
         85:9d:fe:07:02:66:44:88:52:79:4f:b5:63:e7:1d:0d:77:29:
         98:05:de:c5:f9:ed:44:e5:11:08:82:1f:de:2b:88:9a:87:1f:
         1d:4f:ed:d3:04:2f:4f:59:b7:af:0e:e5:a2:ee:52:61:b2:ca:
         b3:be:fa:7c:61:51:53:77:4a:18:3e:4d:bd:c5:b1:09:08:ff:
         ab:f1:b2:f8:08:ae:d5:bf:72:16:9f:2b:cf:23:ce:1e:33:b2:
         5c:ae:a3:43:1b:92:56:31:54:bd:ec:e8:d9:b6:cf:8b:b7:a6:
         f5:1e:bb:37:cc:68:d7:37:d9:59:af:b6:4a:01:02:e0:0c:c7:
         f5:91:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:21 2025 by rpki-client