Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7927f9-f29b-3401-ac38-6d0c5bcefd8c.roa
File:                     3b7927f9-f29b-3401-ac38-6d0c5bcefd8c.roa (raw, json)
Hash identifier:          5h+LwYLGDsa76Fk3SjmvPQrNrODObbBscK5YUH+GN2A=
Subject key identifier:   92:42:D3:2C:FB:5F:19:CF:70:12:6D:8E:29:62:EC:E3:4D:D1:9D:98
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1F6E43EDD7B2850FF95E4EC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7927f9-f29b-3401-ac38-6d0c5bcefd8c.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        198.99.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:6e:43:ed:d7:b2:85:0f:f9:5e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=5c5694d4-292e-4d7d-9a92-96199a619efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:48:ac:e0:f2:78:41:f3:83:cf:84:4f:39:
                    85:4d:6a:13:32:46:36:22:56:73:5b:df:76:58:99:
                    cc:e0:19:35:9b:7f:2c:42:20:39:0f:05:ec:4b:8d:
                    b9:2e:90:4a:38:3e:f1:26:8a:a8:6b:3b:8e:bd:81:
                    5b:d1:16:e9:b5:14:4b:85:42:dd:df:5c:c4:5c:81:
                    36:2f:1b:d2:2a:94:5a:2b:97:35:e7:13:e8:2a:16:
                    46:39:5d:4b:13:7b:28:ae:0b:a6:94:57:1d:b6:a8:
                    b5:02:c9:a8:84:0d:25:c0:75:ca:fc:88:2c:f3:38:
                    f8:cd:93:73:ff:ea:3e:c8:85:9e:89:8c:d7:9e:c6:
                    20:85:01:ed:54:6e:2a:84:ff:65:fa:9a:58:38:eb:
                    24:7e:43:b7:63:2b:7d:1c:d9:3f:f7:38:f0:a9:b6:
                    44:9a:e4:b1:67:cb:0c:ef:72:c0:14:29:f4:41:36:
                    00:7f:92:0b:6d:37:04:79:6d:50:6f:27:b7:2b:85:
                    61:d4:f0:f3:67:32:c4:4e:30:f0:11:29:51:2d:09:
                    9a:14:d3:40:2e:59:3f:9c:fe:22:89:b5:02:30:cb:
                    c3:84:e4:d0:71:bb:4d:59:7f:a2:36:3a:b3:fb:cf:
                    fb:74:6e:29:b3:eb:25:dc:c9:70:27:a9:dc:de:6a:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:D3:2C:FB:5F:19:CF:70:12:6D:8E:29:62:EC:E3:4D:D1:9D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7927f9-f29b-3401-ac38-6d0c5bcefd8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:07:84:f1:60:db:73:4f:a7:d1:a5:15:22:5b:7d:31:03:0d:
         ce:6b:86:2e:eb:6e:55:66:8c:34:ce:29:cb:d0:e0:ee:92:5d:
         d0:a4:75:2b:92:b0:53:66:7a:a5:18:48:d0:d2:da:96:b2:41:
         e2:6c:b3:71:26:91:6c:02:ec:c9:06:09:6b:ac:a4:79:08:1b:
         57:3c:7a:ab:b3:a2:05:66:6f:db:66:ad:ea:40:4f:24:01:ec:
         f9:0b:a5:09:6e:68:7e:12:51:1c:09:9e:d9:e1:bb:72:0d:1f:
         c7:ce:b1:e0:b7:38:9e:da:2e:9f:db:8e:30:36:0f:3c:6c:ad:
         a5:7a:81:fb:a6:45:e0:41:e7:78:cb:69:8d:af:8f:fe:22:2e:
         22:ce:9d:98:73:a8:b2:7e:a4:bc:10:95:92:9a:f9:3e:29:95:
         31:8f:fd:38:a1:e5:3e:1d:ee:6c:df:23:d8:2d:92:01:44:38:
         92:03:a4:45:e8:1e:48:d5:65:cc:8d:ea:40:cc:e4:78:d1:66:
         90:56:2d:64:9b:e2:16:82:53:3c:ef:07:53:ea:b7:1b:e4:c0:
         d5:9b:e8:4e:4f:d0:5a:c9:6b:c2:01:fe:55:85:14:17:fa:83:
         f5:b0:3e:15:88:7c:59:f6:21:e8:31:a4:db:3a:bd:ac:6b:8e:
         bd:5e:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:29 2025 by rpki-client