Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1c6ed0-81c9-345d-9a1d-5e3e20801070.roa
File:                     3c1c6ed0-81c9-345d-9a1d-5e3e20801070.roa (raw, json)
Hash identifier:          qBFDS0CVzq2nJjW0mUYEKGaHc0Y9dHWUymLV8UT3/8Y=
Subject key identifier:   38:06:10:CD:C8:4C:9F:FA:9B:3D:80:1D:B9:C3:DA:C2:21:13:39:E2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584044D249EF0C2246767F467B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1c6ed0-81c9-345d-9a1d-5e3e20801070.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        198.41.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:d2:49:ef:0c:22:46:76:7f:46:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=91d1cc39-5f0a-4f6e-88c0-583ad246fa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:e3:a7:c1:26:64:79:12:a0:0a:be:d2:86:
                    28:23:38:f4:8b:1b:90:8c:64:e3:a9:d9:9c:b8:05:
                    58:64:f2:d1:90:64:bb:17:42:fd:df:9c:5e:5e:3c:
                    8c:bd:3e:f5:b4:02:d4:92:5c:80:6c:5c:53:5a:38:
                    2e:45:87:5b:9f:fe:79:6e:1a:4e:6d:39:0c:57:ca:
                    7f:6a:7f:2e:ec:59:69:5a:a9:ac:84:6e:fc:20:d7:
                    88:87:d1:67:bc:84:59:c2:0a:43:9b:21:61:d6:d5:
                    a1:c3:23:09:d2:91:fe:c5:a5:db:0f:63:31:2c:65:
                    a2:6b:b6:0b:a0:66:2d:c1:3a:1d:64:2a:e7:e8:8f:
                    49:e3:bc:8c:2b:32:1a:3c:57:57:21:57:d7:46:36:
                    70:7a:05:34:d2:ef:7a:de:a5:af:43:65:0f:a9:af:
                    90:dc:35:d7:f0:00:33:af:86:a0:1c:d9:8f:e3:93:
                    b9:b7:39:41:b3:ff:0c:cd:17:73:53:26:a2:10:25:
                    10:8e:82:f4:28:12:a8:ed:8c:ae:7c:b5:81:a1:7d:
                    9b:d6:f3:b2:60:0a:1b:51:31:f6:ae:61:2d:fe:76:
                    0e:16:69:6a:9e:bd:61:d0:6c:5a:30:6e:a4:e9:b1:
                    99:5d:a2:ce:71:c6:dd:69:13:00:5a:3f:82:07:4e:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:06:10:CD:C8:4C:9F:FA:9B:3D:80:1D:B9:C3:DA:C2:21:13:39:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1c6ed0-81c9-345d-9a1d-5e3e20801070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:44:15:43:1c:38:95:05:48:65:f4:9a:7a:31:dc:49:4e:
         e6:92:03:16:8e:d6:1e:c3:95:46:3d:d8:83:10:51:5e:43:0c:
         df:8d:32:94:85:06:dd:a6:12:42:61:d4:b6:49:00:12:2b:ed:
         52:f2:83:02:b9:56:68:9c:76:98:af:6b:e3:92:cd:53:f0:8e:
         02:80:d8:42:4f:ec:11:a1:64:f5:bb:ff:ba:f7:dc:18:85:1c:
         49:c9:0f:b2:f5:7c:01:95:14:cf:aa:81:2f:1a:2c:e0:1f:02:
         96:cf:21:d3:0d:d4:d6:6e:61:5a:8a:19:3e:ab:58:3a:6b:82:
         a7:c2:f5:8d:1f:74:a1:96:8c:69:93:d0:6c:f1:39:ec:61:ae:
         ca:d3:d2:96:7e:1e:4b:ee:e1:f6:2f:ad:34:88:7e:0b:54:d2:
         47:2a:64:b7:95:1e:37:b6:eb:39:e5:bc:ff:57:cd:ec:62:b2:
         ee:b7:49:ad:f0:85:07:07:17:4e:74:53:10:6a:96:a6:0d:00:
         6e:83:a8:63:59:e4:c3:80:d6:b3:ad:ff:39:ae:d0:2c:96:f0:
         fb:84:2d:45:d0:08:c9:5b:77:c6:b2:da:a8:85:da:7d:28:b0:
         64:e2:28:dd:0d:93:14:82:05:28:f3:e1:6c:a3:12:cb:a5:26:
         09:ae:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:38 2025 by rpki-client