Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d4f4812-e8b7-3530-bc07-cb6fbe92f585.roa
File:                     1d4f4812-e8b7-3530-bc07-cb6fbe92f585.roa (raw, json)
Hash identifier:          xiKDwOcy5Y2vgeSrwoF1lpqVdjHUjMqiIKudy02sYbY=
Subject key identifier:   C8:69:FB:4C:CB:4D:10:C6:3B:60:45:BC:2F:13:B0:9E:DB:DB:27:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4508229BE94961A787ACF640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d4f4812-e8b7-3530-bc07-cb6fbe92f585.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.82.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:08:22:9b:e9:49:61:a7:87:ac:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=408b8659-48a3-442f-a530-cc4661b87806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:ba:b1:64:79:7b:6c:4d:72:35:aa:f2:cb:
                    3b:ff:98:02:23:82:10:0c:a7:c9:49:19:09:55:f4:
                    8f:c0:1f:5f:df:da:ac:a5:46:25:94:ec:43:2f:ae:
                    c4:ab:5f:8c:d2:34:81:d0:b0:a4:98:fa:a4:f8:92:
                    15:63:f5:03:31:58:ab:03:ae:e3:ea:76:4f:bd:cc:
                    81:83:ff:9a:45:8f:ce:91:a2:b9:26:64:5d:31:d9:
                    33:2f:29:5e:e9:ab:68:25:ee:57:bd:18:da:1f:f2:
                    83:97:33:64:0f:60:3e:a7:de:82:da:86:6b:8d:38:
                    d2:cb:b9:0d:2b:d2:b0:52:1a:e7:93:45:4b:58:c1:
                    2f:40:d3:29:cd:e0:46:ce:a7:9a:8d:6f:8d:8c:0e:
                    43:ce:44:e6:63:b8:b8:00:17:ca:7f:a0:0d:e4:cb:
                    b7:cf:0f:3f:da:c9:f7:ec:91:eb:22:e6:cd:0a:48:
                    be:c6:31:8f:be:0b:91:48:29:a9:7e:fd:d1:81:d1:
                    2a:9f:88:5e:cb:44:4f:67:b0:42:1f:0b:4b:ef:c0:
                    84:52:22:d7:6a:f9:7a:00:61:de:1a:1d:e8:d4:0d:
                    89:a7:82:c4:e0:4f:4a:5a:23:ec:5a:74:ed:02:2e:
                    ce:36:f0:0f:33:9c:79:ee:e8:a0:e0:65:33:7c:cf:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:FB:4C:CB:4D:10:C6:3B:60:45:BC:2F:13:B0:9E:DB:DB:27:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d4f4812-e8b7-3530-bc07-cb6fbe92f585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:9a:da:b0:6f:26:ee:33:07:9c:19:57:a8:58:3a:32:45:
         af:84:bc:4c:d0:4e:aa:06:40:9f:67:82:a2:68:aa:5c:8f:ab:
         84:ad:1a:46:b6:6e:64:99:15:3f:b1:2e:8b:3f:20:7b:91:aa:
         f5:d2:bb:1e:7a:18:7c:73:d4:26:2c:0f:88:dd:eb:ca:dd:4b:
         1d:42:3f:e5:f3:db:f0:89:0e:5d:99:db:bd:23:3d:2f:f7:33:
         9e:1a:d8:46:bf:22:bc:6f:f7:1b:24:a6:bd:89:08:d2:8b:4c:
         18:5d:9a:80:e5:90:4c:7f:5f:09:b1:db:02:ef:ce:27:6c:a5:
         63:aa:fe:30:21:40:29:c5:18:d3:35:e7:15:fd:db:06:29:e0:
         31:8f:98:dd:65:04:99:89:04:db:d7:58:be:be:47:c2:3c:cf:
         9c:94:4e:64:84:5a:86:8d:09:67:e2:56:7d:d9:64:b9:aa:cc:
         87:c5:31:33:ee:9d:17:71:50:67:3e:35:c6:be:e8:6d:d1:86:
         ae:61:3d:51:1b:f4:08:66:8a:5c:d3:e7:6c:38:9f:66:90:1e:
         2f:16:54:81:d8:6c:ca:71:d1:a7:1d:0c:df:de:3f:23:2c:63:
         ae:04:5f:e3:b5:7e:5d:60:8e:8e:ea:1f:13:28:3a:06:35:6b:
         ec:4d:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:50 2025 by rpki-client