Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aeddc52-f316-3bd1-b7c3-4cc9e066fa49.roa
File:                     3aeddc52-f316-3bd1-b7c3-4cc9e066fa49.roa (raw, json)
Hash identifier:          5/bcXbEAObwn3gaQvM11s5nJGeuLa6MiIBacCjexKzU=
Subject key identifier:   06:74:A5:46:99:A4:A0:2E:A5:0B:0D:74:84:35:0F:52:7E:D8:37:70
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7CC68DF2FFE8B25634AC5480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aeddc52-f316-3bd1-b7c3-4cc9e066fa49.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7c:c6:8d:f2:ff:e8:b2:56:34:ac:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=bfba7020-6fbb-46c3-9f01-539439eed98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:88:de:a5:78:29:3c:e1:a0:71:75:55:5b:
                    a1:18:53:4b:07:c0:c0:0b:d8:7b:31:21:77:c7:3d:
                    1e:66:bd:02:96:91:e3:51:6d:62:09:7a:a2:05:95:
                    b2:78:3b:47:a6:17:7f:94:7f:fc:5b:98:c3:fd:61:
                    d3:e4:8a:8b:db:70:65:6c:99:f5:80:c2:28:7f:54:
                    43:ec:10:5f:2f:06:cd:73:4d:0d:9b:79:74:2a:23:
                    b3:e6:af:3b:18:e1:81:83:65:52:aa:0b:28:c6:7f:
                    35:93:0d:ab:d7:64:6f:c9:59:60:4e:6a:8f:05:83:
                    8a:f1:2d:82:53:7d:f9:ab:93:9d:d3:75:40:af:1c:
                    aa:57:d7:85:70:85:11:f2:ba:35:51:00:9d:24:10:
                    16:eb:2a:1d:39:78:f6:52:bb:8a:13:fc:f9:bd:8c:
                    2e:d0:40:67:c3:13:a7:ae:90:b3:9b:62:d9:37:05:
                    bc:16:a7:1d:27:ea:bb:40:c2:1c:fc:66:ff:9b:05:
                    7f:f8:5d:73:b8:4c:d7:38:b6:b5:b6:56:43:c7:76:
                    e9:4b:90:74:d3:cc:e2:68:dc:a5:00:04:92:9e:94:
                    27:bc:81:cf:0e:f9:86:42:be:af:39:bb:70:84:fe:
                    1f:c0:00:db:6e:2e:57:84:c9:c7:26:a5:bd:78:02:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:74:A5:46:99:A4:A0:2E:A5:0B:0D:74:84:35:0F:52:7E:D8:37:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3aeddc52-f316-3bd1-b7c3-4cc9e066fa49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:a9:17:7a:20:22:80:13:29:cb:d0:08:b4:02:65:b3:d7:
         65:53:1c:7d:bc:4e:90:17:35:0a:09:a4:ab:ad:70:7a:52:13:
         9f:c5:13:41:2f:c7:0d:b3:dd:c5:91:6a:91:42:de:91:52:76:
         87:d2:4a:a3:8b:4f:05:07:e2:09:9d:7d:da:b1:d6:8f:84:28:
         de:21:1d:67:70:04:7b:02:b7:1a:62:71:44:05:5a:a9:aa:94:
         20:af:7a:20:af:b5:13:64:6c:d2:57:b1:f1:77:c7:b0:30:67:
         0f:02:46:ba:51:cb:7d:1a:32:d1:9d:32:de:d2:e4:58:e0:1d:
         b4:cf:20:41:41:58:0f:c5:1c:0e:3c:9b:42:b3:b3:af:3a:b2:
         2b:6a:22:c4:61:72:f0:7a:80:a1:2a:d1:cd:cd:d8:e4:89:d9:
         ae:7f:ab:e3:a8:f8:a9:0d:4f:a8:21:2e:d5:e5:b6:49:63:88:
         1c:8a:ec:1a:97:d0:e5:6c:02:fe:ab:e0:d1:bc:98:94:62:5d:
         11:db:47:66:9a:b5:96:3d:33:d9:c8:a8:6c:64:ab:c4:1d:37:
         16:b7:53:55:7a:5f:28:97:6b:7e:13:2b:15:4e:0b:97:8f:a2:
         9b:34:6c:78:00:a5:80:2a:66:4d:df:fa:a3:c5:a9:9d:07:a8:
         70:dc:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:04 2025 by rpki-client