Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44d38344-d8fd-3432-b866-687f0bb454f1.roa
File:                     44d38344-d8fd-3432-b866-687f0bb454f1.roa (raw, json)
Hash identifier:          haoglhuEwyW/v2rl/IbpW+WQTiytzv/v/C1b2jDdotc=
Subject key identifier:   28:34:93:20:82:D1:77:4F:20:49:C8:1E:C6:AF:F0:95:24:40:A6:9C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9F80530F9733A15E5F485DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44d38344-d8fd-3432-b866-687f0bb454f1.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.14.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9f:80:53:0f:97:33:a1:5e:5f:48:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=01e81c56-408b-4d81-ba6f-1a70f1c049c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:8d:17:d6:43:6f:20:6b:0e:cc:96:d7:48:
                    47:67:36:78:16:1c:5a:d3:51:36:81:3f:06:95:67:
                    58:f1:f1:74:7a:14:3c:03:b8:43:02:cc:38:9a:50:
                    17:24:11:c0:c4:bb:b7:9d:8e:57:e8:f5:43:c8:30:
                    75:9c:90:29:98:95:46:24:ca:0b:d7:e7:4e:52:15:
                    71:af:73:92:c9:3a:ff:74:97:a0:15:ca:bd:76:9e:
                    5a:f3:0f:14:87:57:43:81:11:35:ad:e7:be:32:39:
                    77:eb:38:a1:f4:5b:c0:e1:e2:38:b9:7d:ea:3f:8c:
                    10:7f:f5:b8:c2:25:ba:2a:67:2f:17:33:61:f5:89:
                    59:bd:c1:6b:f7:c4:51:94:b0:92:20:bb:ea:90:3a:
                    fb:a5:b7:06:55:b9:78:a7:5e:9e:04:aa:34:f0:42:
                    a9:97:3f:be:df:f2:55:1f:72:75:b9:7a:a9:f3:52:
                    3a:fc:59:e8:c2:c9:60:80:a9:e3:b7:4c:d1:66:13:
                    82:7e:86:54:e3:af:57:bc:97:09:6b:7d:a6:25:18:
                    28:68:56:d5:39:14:5e:14:62:10:9e:a6:46:5d:ed:
                    0e:e6:c8:ca:d1:3a:24:16:35:b6:38:78:43:c1:5d:
                    41:54:5a:94:18:9e:e6:69:75:e9:ad:e3:cb:aa:ed:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:93:20:82:D1:77:4F:20:49:C8:1E:C6:AF:F0:95:24:40:A6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44d38344-d8fd-3432-b866-687f0bb454f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:ec:9f:80:9a:32:c3:10:48:e4:bb:7d:4e:89:2d:d8:df:
         3d:e5:57:cc:07:55:37:7c:19:e0:2e:5d:59:a4:bf:50:f2:c1:
         66:be:9e:9b:e5:98:fb:6f:4f:d0:f3:9d:ce:ae:2a:fc:7c:2d:
         a7:81:7c:a7:e7:b9:d7:74:1b:78:70:08:00:a8:a8:be:9f:34:
         ba:19:4f:d3:c7:10:e5:f2:d4:ec:1f:ac:11:c0:10:22:03:ee:
         a3:50:7f:b0:80:a3:70:98:72:ba:f4:32:f2:d1:3a:26:69:f7:
         6b:cc:07:b2:85:8d:e1:62:9c:8e:18:39:66:95:e9:c5:d7:a7:
         e7:fc:19:b1:03:c5:60:ee:f9:15:52:20:0a:52:e2:0c:1d:e3:
         ba:c3:85:4e:97:c2:0f:75:4e:5e:8d:38:04:d9:51:3a:99:62:
         eb:18:1d:9d:b1:25:2f:75:7a:a7:bc:36:6f:40:fb:b1:70:c4:
         ee:99:14:93:43:c7:80:e3:31:75:af:07:d1:90:dd:bd:24:a2:
         e6:11:4d:29:ea:dc:0c:61:b2:87:b0:77:40:7d:f1:c7:11:d0:
         ae:18:c1:fa:61:1c:f7:16:2c:9e:22:0c:45:c8:99:b0:0d:46:
         8f:e1:1e:82:88:a3:eb:79:9b:ef:20:5b:6e:80:c4:e0:cf:b8:
         c7:cf:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:14 2025 by rpki-client