Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4709f6e5-34f0-3fda-a19a-9f00250f11f5.roa
File:                     4709f6e5-34f0-3fda-a19a-9f00250f11f5.roa (raw, json)
Hash identifier:          ZsUq7hRvH41AhilUySI94zZ6kk/Fm6LaMKUFcZdbUSE=
Subject key identifier:   2C:92:95:E4:2D:10:1F:76:91:CF:F7:6D:45:F1:CF:02:23:AF:74:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF8D730085AA7FB7C06996F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4709f6e5-34f0-3fda-a19a-9f00250f11f5.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:d7:30:08:5a:a7:fb:7c:06:99:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=e9a40fa3-a15f-4250-aa5e-add46efd23bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:60:16:82:ac:82:96:eb:a2:2d:28:1a:68:
                    64:8a:c2:26:52:33:91:b9:92:0b:42:a8:93:16:80:
                    52:78:64:84:22:48:dc:83:a2:00:29:61:74:23:a4:
                    14:75:46:5d:b6:1e:8a:c3:18:e1:f4:bf:de:19:8a:
                    a5:8a:6a:b9:8d:69:f7:5e:aa:bc:26:6a:d1:48:a1:
                    cf:28:01:f7:38:e3:38:f5:76:ca:47:3a:95:34:88:
                    2f:24:ab:8e:80:09:a8:69:ee:d3:42:04:6f:d2:d1:
                    6c:de:d6:e3:2e:99:1a:f7:e9:9c:7b:e8:11:25:b2:
                    6d:de:6f:d9:44:ad:3a:e3:fc:b7:d5:68:96:79:51:
                    0f:e4:64:4b:db:cc:7d:7f:da:ed:05:33:8d:19:0d:
                    3d:2e:98:8c:e7:0f:12:11:43:7f:fa:09:68:09:fb:
                    c0:f7:37:76:84:a3:06:92:b7:13:a5:ba:ed:f8:ea:
                    8b:d0:a7:3e:67:58:8e:71:3b:77:c9:90:71:27:a9:
                    d7:52:2b:ce:74:d7:6d:5b:ed:f5:d4:9f:9e:93:0c:
                    0b:db:06:e6:b6:b0:2d:c0:78:94:a5:5c:7a:fc:3a:
                    dc:69:4a:a7:69:7e:eb:38:5f:6c:ff:1d:10:de:97:
                    4e:f7:cc:e3:d2:4e:15:0a:34:79:57:f6:2d:d1:f4:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:95:E4:2D:10:1F:76:91:CF:F7:6D:45:F1:CF:02:23:AF:74:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4709f6e5-34f0-3fda-a19a-9f00250f11f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:36:cc:c2:de:a9:ea:7b:67:a1:26:86:3d:ff:ce:76:16:6f:
         d3:6e:d3:0e:93:63:49:03:9e:6e:ec:b3:71:ab:b2:7c:1b:e3:
         da:a8:45:92:25:5e:2b:44:68:6c:1f:e2:7b:f1:a1:a5:05:7a:
         0c:1d:23:dc:60:c0:0d:00:97:b7:43:80:81:76:eb:da:12:e7:
         78:aa:77:c7:2d:30:6f:43:f5:47:73:be:87:09:c6:ff:0d:59:
         ee:1a:35:6c:90:0e:be:83:99:35:85:12:6d:cc:6d:fa:ca:5d:
         e1:9c:7a:be:75:fe:6b:ad:58:22:a2:03:64:18:b2:62:2b:6f:
         b1:b4:0c:90:9b:48:84:fe:6f:cd:cd:30:ff:4a:c6:b7:11:76:
         56:90:ef:b0:7a:99:1a:4d:4b:37:41:af:e3:b6:79:bc:f4:14:
         e3:19:d9:cf:9d:19:4b:84:23:91:48:e1:20:9a:b2:22:36:c7:
         c0:44:a8:30:9d:9b:42:42:99:e1:12:1a:cb:64:cb:7f:21:b9:
         4e:c9:6c:04:40:76:95:79:17:ec:73:b0:b3:c1:20:82:04:36:
         43:8f:fb:30:cd:ca:b3:6c:1c:84:b4:89:91:16:11:0b:24:37:
         e5:08:a0:a3:70:bb:f5:9e:9a:5f:84:31:99:92:08:aa:18:f1:
         be:5c:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:55 2025 by rpki-client