Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2321f60a-a771-3ac2-96f5-ed9b0966ec74.roa
File:                     2321f60a-a771-3ac2-96f5-ed9b0966ec74.roa (raw, json)
Hash identifier:          99mSini7aS2+VtghHhx9apf4LA4L5oYjIDU1wJZOuZk=
Subject key identifier:   30:6E:9F:37:0B:19:31:8E:03:51:0B:8F:79:0F:59:3D:BA:3E:77:2B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D332E8F5132F30AE8CEE0B600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2321f60a-a771-3ac2-96f5-ed9b0966ec74.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.82.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:2e:8f:51:32:f3:0a:e8:ce:e0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=68722d4d-6c71-45af-a4dc-dc06cb156f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:09:7a:c8:38:dc:fb:3a:86:98:de:b3:98:
                    e8:fd:a1:15:28:77:09:68:86:33:e2:b1:82:ae:c6:
                    77:eb:e1:c6:55:16:62:2f:e3:a3:36:54:4f:2f:03:
                    d0:f5:62:a5:c3:85:90:cb:33:b0:61:5f:70:19:63:
                    84:76:48:8f:66:0f:54:24:57:71:9f:4f:a1:eb:30:
                    14:74:9d:c6:9a:59:d3:56:34:23:aa:f1:22:42:df:
                    20:e4:78:ec:86:76:79:4e:f6:a8:75:7a:c9:f0:2e:
                    5d:d8:34:e7:4c:e4:29:ba:bd:09:67:fb:2b:e0:4a:
                    6f:4d:0b:0b:c7:86:1c:25:67:31:3a:8e:86:36:49:
                    73:33:7b:77:b2:78:ab:3a:6b:f9:b7:92:0a:12:cf:
                    46:d3:9e:0d:b1:e4:87:c0:40:83:04:42:9f:59:66:
                    8e:a2:52:61:00:fd:b0:07:39:fa:0f:c4:b3:df:f0:
                    9b:3a:52:53:b0:05:4b:20:1a:58:f5:f7:27:b5:f2:
                    60:e3:e6:17:c4:2a:e9:46:34:bb:be:a8:70:75:7d:
                    a5:09:7f:c8:d5:8d:86:49:42:a8:cd:d1:f0:0a:6c:
                    7d:45:dd:28:0b:12:c5:eb:d6:39:7f:6d:a9:5d:b4:
                    73:8f:17:6a:f3:19:b2:af:00:40:16:b4:cd:f7:37:
                    b6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6E:9F:37:0B:19:31:8E:03:51:0B:8F:79:0F:59:3D:BA:3E:77:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2321f60a-a771-3ac2-96f5-ed9b0966ec74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:c1:8a:e8:af:39:eb:12:26:aa:de:f7:d9:a9:2c:aa:8a:
         61:01:56:c7:0f:4a:5b:89:bf:5a:c9:33:b7:36:f7:c3:b1:b5:
         fc:13:37:07:fb:5d:91:27:03:1f:ec:a8:72:c5:20:dc:cf:af:
         1b:29:ae:bf:92:85:1e:ef:ac:80:43:54:a3:ab:47:70:45:e5:
         99:b4:c2:69:66:7b:1a:7a:07:77:65:81:d0:c5:78:5d:2f:46:
         d4:62:b1:9e:85:14:65:bc:2b:b1:4f:32:3e:2c:44:bf:71:fe:
         9a:3a:e5:6f:05:7f:31:07:12:50:a9:c4:a8:ca:9f:5d:04:6d:
         c9:76:c9:b4:b5:75:40:72:95:d6:e9:b8:6b:6c:5f:3b:0d:31:
         25:0b:6e:c5:3f:e6:b0:f1:3b:dc:90:b3:4c:9d:0f:35:0a:4d:
         be:50:96:f3:ae:fd:f1:4a:1d:f7:9c:63:8b:b6:aa:bc:11:32:
         8d:31:d6:97:23:33:f6:c6:ac:31:08:a7:29:d2:19:34:eb:5a:
         6d:35:ca:6d:84:b3:92:a2:54:5d:55:9d:e9:02:54:9a:0e:9a:
         43:fd:e3:d1:e1:b9:4c:e1:cc:23:2c:d5:d4:1f:71:1f:70:99:
         75:3b:8f:5e:3f:e8:96:ae:1b:28:3b:cc:b5:ba:68:2f:c2:c1:
         f4:b3:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:29 2025 by rpki-client