Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e74071-989d-3bc5-b1af-83f7a7a45f00.roa
File:                     47e74071-989d-3bc5-b1af-83f7a7a45f00.roa (raw, json)
Hash identifier:          D0Qz32HO/YnYAKy/Qd0lbLxPM7ht8T6SQ+vPH1GRHF4=
Subject key identifier:   0E:54:43:96:17:CA:69:38:3C:6F:18:FB:81:AD:B6:0B:3D:6A:72:11
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE1A090A560F707214F5EA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e74071-989d-3bc5-b1af-83f7a7a45f00.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        198.99.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:1a:09:0a:56:0f:70:72:14:f5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=963d65a0-690e-445c-9b2c-6a7342e313c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:8a:0b:13:97:58:61:45:c6:09:99:44:be:
                    d7:df:98:a7:d0:71:39:d3:a2:64:7d:11:75:73:43:
                    e7:a5:7f:93:fc:8b:37:ad:8d:a9:73:70:fa:13:1b:
                    f9:dd:ac:e0:d6:e0:5a:10:4c:63:18:77:0c:45:3f:
                    73:7a:70:f1:d3:29:ae:2c:c0:a4:62:9f:17:51:42:
                    2f:f2:e1:38:1a:d5:c1:f8:53:c3:68:0e:a1:ea:66:
                    c7:5f:fe:91:d3:6d:74:9d:99:24:df:36:86:0c:d5:
                    fd:d5:62:70:d7:0f:68:02:8b:f3:ef:33:d9:1c:e1:
                    17:79:a9:65:6c:9f:8e:29:44:a3:3a:1d:20:75:d9:
                    8d:6f:bc:f0:55:ce:e0:21:ef:95:fb:9e:be:99:5d:
                    ff:7e:75:a0:11:12:e0:8c:2c:96:c4:8f:9d:1c:bb:
                    5c:8e:f3:d9:d3:de:d5:42:d1:c0:09:a3:e4:3c:7b:
                    1e:a3:45:b5:0c:b0:1e:31:87:21:d5:68:55:0f:80:
                    28:3b:e0:a1:52:50:9b:46:99:e2:d8:70:13:12:2d:
                    b1:3e:07:38:8a:ae:e9:a8:39:48:ba:b5:b4:84:82:
                    d8:0b:77:2a:4f:7b:61:36:f8:57:8c:05:4a:c2:d6:
                    91:f3:46:40:9e:87:a0:12:10:bf:d3:7b:25:17:8a:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:54:43:96:17:CA:69:38:3C:6F:18:FB:81:AD:B6:0B:3D:6A:72:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47e74071-989d-3bc5-b1af-83f7a7a45f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:2d:66:dd:ff:5d:18:5e:b9:22:64:00:45:0a:c4:e8:00:
         a1:9a:0d:6a:fb:82:1d:f8:21:1b:3f:ad:6d:9a:b5:f3:78:b8:
         b6:c0:ad:ac:00:d0:ce:58:59:bf:90:d4:f2:5a:c6:cf:ca:a1:
         05:2f:c0:54:00:dc:b3:fe:25:cb:37:d3:b6:2e:d4:cc:87:6e:
         83:e7:53:51:6e:8f:a2:d6:fd:6d:83:67:ff:97:86:26:b4:9b:
         c0:a4:a3:c7:ec:10:a2:5b:fa:99:13:eb:51:03:ec:98:9f:a8:
         22:8f:26:10:2d:1e:28:81:00:da:b6:90:3e:3c:3a:71:f1:fb:
         b1:4c:bc:04:f9:d2:f3:03:93:4a:8b:78:42:da:39:2c:b1:fc:
         e0:e8:d9:d5:f7:c7:0e:75:77:77:72:23:95:21:48:d8:46:a2:
         16:ff:ef:e8:fe:b9:83:31:6b:4f:ea:5b:79:38:70:f4:10:88:
         76:a7:fb:6b:80:17:4b:1c:0f:9b:bb:99:fe:6f:b7:7b:c3:a9:
         94:70:db:8a:d6:fd:48:ca:dd:87:cc:6c:5d:2c:45:ce:9c:9a:
         e4:da:28:56:dc:a3:d5:e7:a0:b6:ed:de:ba:45:94:1a:44:d0:
         53:06:3b:3a:f2:03:12:cb:01:5c:3b:c4:bd:7c:24:3f:7f:fc:
         9c:fe:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:39 2025 by rpki-client