Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22484f77-3a5b-3ecd-940e-768fa9a20643.roa
File:                     22484f77-3a5b-3ecd-940e-768fa9a20643.roa (raw, json)
Hash identifier:          MVisqtEQHLqMSBAvkltOzOe4oQveuGScTZI8glj51LU=
Subject key identifier:   66:19:F4:04:2F:E2:E6:EA:41:8D:3E:E8:85:00:AD:EB:B3:36:09:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0BEC7A052511CAA5A041F780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22484f77-3a5b-3ecd-940e-768fa9a20643.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        98.80.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:ec:7a:05:25:11:ca:a5:a0:41:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=696a61a6-0545-4515-8f01-8c979f522356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:e9:51:ea:a6:6b:29:e5:69:92:b6:46:94:
                    58:dc:33:ab:74:ff:bb:1a:0c:f2:1c:1b:f4:bd:67:
                    13:96:77:29:b9:43:4d:1f:35:33:1b:0a:0c:e6:61:
                    70:a2:8b:c1:8e:5a:3e:41:b5:6e:ef:12:ac:7f:6f:
                    52:58:56:38:85:0a:ca:fe:b3:cd:eb:97:c2:b5:c9:
                    29:e0:3d:59:27:72:9b:d6:4c:31:11:d6:8d:f7:3a:
                    ad:06:89:0d:7b:a1:5e:23:4b:49:6c:21:2e:02:2a:
                    65:ad:45:1d:7d:c4:7c:39:57:7a:66:35:7c:24:0f:
                    25:2d:21:53:e1:9d:c1:03:c1:b1:34:a6:97:7a:07:
                    d5:1f:94:dc:e7:57:63:02:e2:54:7c:44:34:f4:9f:
                    27:ec:89:78:77:7a:ae:df:98:b0:2f:f8:75:0d:10:
                    db:17:95:f6:26:51:6f:52:16:b1:2d:4e:ee:99:68:
                    02:f4:72:74:5d:0e:dc:39:ee:44:4b:ad:ec:97:99:
                    01:97:a5:5b:4a:df:56:95:ef:f3:e2:72:c3:9d:0a:
                    3e:ea:e1:c8:0e:8b:17:a4:f8:00:3a:78:03:3d:0f:
                    3b:3f:01:cf:f1:c3:49:10:dc:c8:6f:81:48:63:69:
                    7e:7c:92:57:20:c2:66:bb:2b:fe:3a:a9:e3:6e:36:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:19:F4:04:2F:E2:E6:EA:41:8D:3E:E8:85:00:AD:EB:B3:36:09:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22484f77-3a5b-3ecd-940e-768fa9a20643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:d7:2c:22:27:e7:c4:3b:2d:2e:64:50:c5:70:1f:f4:04:
         29:a0:17:ab:f5:d9:69:46:65:3a:34:36:35:56:87:d2:9e:13:
         75:e7:0a:15:14:59:8c:5e:26:65:00:27:e2:8a:17:df:7e:a5:
         3d:f3:cd:3b:49:50:27:23:54:8c:03:2b:8d:49:2c:c7:98:b7:
         39:15:84:3e:b5:fe:97:78:a7:74:56:9c:30:24:08:65:f2:30:
         f5:c7:3d:86:00:70:ca:a4:1f:83:56:36:87:e2:c1:1f:4e:1f:
         59:8b:dc:38:9c:a6:91:6e:2d:4e:c1:6b:4a:81:98:4b:38:a8:
         17:77:93:1c:35:0f:f6:b3:60:06:8d:4d:d4:0f:16:97:19:06:
         6b:c3:78:37:f1:50:22:48:88:5c:e7:4b:dc:87:d3:1a:a2:35:
         0b:4f:a0:68:bd:15:f1:e4:36:6a:50:25:14:0b:b7:b6:2d:1c:
         ae:fa:fb:00:83:98:51:73:bc:6f:d6:8d:66:1e:d8:9a:aa:2b:
         2b:09:d5:8c:94:6a:0d:24:6c:d3:2d:b4:e0:53:5d:7d:e4:e4:
         4e:46:c2:21:76:f3:95:ce:14:e6:74:26:5a:63:49:e3:ee:d8:
         07:20:d8:36:22:a0:e1:31:2d:6d:ae:81:b3:82:7e:f1:cc:f9:
         97:bc:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:25 2025 by rpki-client