Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1b72c-f98a-31cb-896a-6b5958c9a9d6.roa
File:                     3bd1b72c-f98a-31cb-896a-6b5958c9a9d6.roa (raw, json)
Hash identifier:          E421O7n2X3D6WLltcGZCIkEDw8DmXxF1opYF/JwGY04=
Subject key identifier:   18:5F:93:35:8E:8B:FD:B8:BB:5C:32:96:6F:E8:69:4F:FD:A3:CD:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0A8C06C299C6E51D82CE3680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1b72c-f98a-31cb-896a-6b5958c9a9d6.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.144.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0a:8c:06:c2:99:c6:e5:1d:82:ce:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=896bad12-5edb-4e93-97aa-b02aeab74e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:cc:9b:b8:6b:bd:81:b1:aa:2a:0d:83:1b:
                    6b:5a:13:5e:e6:c7:92:c6:9b:44:f3:7f:76:ff:de:
                    3c:79:fb:06:ef:48:fd:f6:50:da:8b:1a:2a:3d:f4:
                    af:47:5a:74:1f:f4:31:27:07:a1:16:ad:68:1c:a3:
                    2f:be:a2:2f:b6:06:4f:77:bb:70:22:b2:aa:e9:3b:
                    c9:90:c7:94:ef:19:4f:39:7e:67:89:4b:eb:a9:08:
                    66:0d:a4:98:9e:a1:3d:53:98:59:c7:8d:5e:fc:5a:
                    ae:36:19:44:52:2f:c4:78:8f:ad:ef:20:ee:14:d8:
                    04:61:4a:d4:a5:94:b1:d4:2b:9a:03:9f:2c:cc:be:
                    11:c8:e0:9e:a4:72:8d:5e:1a:db:9b:7c:a5:cd:3a:
                    42:05:c0:67:b6:da:95:e5:61:b8:b2:13:ab:74:86:
                    b5:25:21:cd:d7:01:71:aa:54:63:5f:4b:ba:d9:66:
                    0b:13:7e:4c:61:e4:8e:31:86:d4:e2:a4:19:73:6e:
                    8a:48:d2:2d:38:db:ff:92:74:20:37:96:83:4b:f3:
                    b0:f0:21:9f:e2:a5:7f:56:d8:7a:27:32:5e:c4:33:
                    89:42:0d:ec:0d:88:55:ca:e7:a9:fa:c0:01:8a:e2:
                    e0:d8:27:db:69:7f:db:89:bb:0c:4b:63:c5:7f:d5:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5F:93:35:8E:8B:FD:B8:BB:5C:32:96:6F:E8:69:4F:FD:A3:CD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd1b72c-f98a-31cb-896a-6b5958c9a9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:da:d3:e3:af:52:13:99:d3:78:c9:9e:cd:ad:f2:a7:40:
         45:ca:36:89:08:a9:2a:10:53:0f:bf:72:4a:51:dd:63:f4:8f:
         3f:69:9f:84:c6:5b:ec:84:97:8e:21:1d:ed:7c:ad:4f:30:44:
         9b:6a:27:27:3a:27:9a:f2:4a:db:53:e9:c0:68:9c:f0:8f:c2:
         46:16:e6:87:cf:c3:0c:37:5a:b8:58:15:c0:15:f5:1c:33:37:
         b6:b0:67:b9:2b:a1:23:11:74:00:9c:bb:5c:0c:ba:88:5f:f4:
         3c:3e:bf:0a:a2:fd:c7:3f:5f:ed:bb:2d:37:a8:03:0a:a4:cb:
         7a:c8:44:35:65:a6:80:d7:68:aa:a2:68:03:d1:a5:1e:61:7b:
         c2:66:9b:ff:e7:5c:ce:6a:81:be:35:73:a6:7a:54:8d:13:94:
         c9:ca:e6:d9:10:7f:36:c7:af:a7:1e:8d:1f:01:ee:04:11:f7:
         08:6d:0c:d0:db:dc:f5:aa:3d:b1:81:91:1b:10:8d:71:8b:b3:
         2b:f8:16:ef:98:3a:b2:d6:4c:ff:b4:11:12:7c:b9:bf:11:61:
         48:a6:ee:02:0d:95:f5:62:91:82:bf:1c:a9:1b:cb:2d:05:79:
         69:ec:d3:a6:c0:10:e9:26:ef:b2:b4:4a:91:56:b0:19:89:d0:
         a0:20:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:05:09 2025 by rpki-client