Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a2d0b92-19ba-3c53-b2b6-fb44e7f7c40c.roa
File:                     4a2d0b92-19ba-3c53-b2b6-fb44e7f7c40c.roa (raw, json)
Hash identifier:          N7M5m3QQzOoX455keiSXKbnGe6j+VychJKt1PetCN+g=
Subject key identifier:   28:49:79:F2:D9:4E:BA:55:A4:10:C6:2C:32:BE:27:36:C1:06:BE:E3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD1B2FBE6002B6613D0337900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a2d0b92-19ba-3c53-b2b6-fb44e7f7c40c.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d1:b2:fb:e6:00:2b:66:13:d0:33:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=0e30f905-1419-47b6-9611-5f2350f961f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:32:65:d8:ad:11:6d:88:2e:10:18:d9:6a:
                    5f:bc:7b:b8:00:8e:0e:1f:47:f7:52:3d:1e:44:d7:
                    84:22:f6:bc:b4:0e:9c:f3:5e:89:72:4b:c4:88:d9:
                    71:c3:61:29:2c:25:11:09:a6:cf:6a:01:ac:38:aa:
                    ab:7f:b5:65:57:ed:18:6d:d8:ad:c2:2f:06:c4:06:
                    3e:be:0f:30:9f:97:bc:77:ea:f0:a2:d5:5d:80:b2:
                    21:69:72:51:eb:49:01:9a:29:72:2d:78:4f:aa:02:
                    ce:58:2a:65:05:5f:da:fb:23:ae:01:7d:72:40:4f:
                    ac:85:66:c2:8d:04:e3:28:e0:b7:87:85:40:5f:4a:
                    f6:57:2c:e0:81:fe:95:65:a5:b3:08:d8:41:24:04:
                    e9:55:ab:77:a8:38:eb:c5:8c:f2:61:61:26:09:e2:
                    7b:03:c8:16:55:26:eb:48:89:93:09:a7:9a:b6:11:
                    24:45:45:de:47:00:d8:7c:f6:ab:b4:fc:f8:4b:96:
                    cd:46:c8:ff:38:ad:00:f7:76:cc:89:12:26:fe:53:
                    b9:50:ab:c6:cc:7a:54:de:26:66:26:d7:df:9a:f3:
                    8a:bb:12:77:f8:c1:22:dc:e8:32:0c:c1:d7:e4:ad:
                    fe:8b:c8:22:ff:94:e1:53:f0:cb:75:e3:16:a1:9a:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:79:F2:D9:4E:BA:55:A4:10:C6:2C:32:BE:27:36:C1:06:BE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4a2d0b92-19ba-3c53-b2b6-fb44e7f7c40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:4d:84:d0:73:e3:fe:44:cf:f7:7b:af:8e:41:09:d7:ba:
         a9:72:0a:07:c9:f6:53:b2:00:2f:dd:d6:2d:16:41:12:4f:17:
         b5:5f:ca:6a:de:fd:17:51:87:5b:92:7e:ac:38:7d:81:d0:7f:
         5c:9c:42:2b:28:c1:8f:98:9f:d0:40:52:0a:4d:9d:96:ff:20:
         42:1f:fa:06:08:30:0e:5d:be:95:35:73:06:f2:e7:43:1d:08:
         5e:6f:4a:9c:66:68:37:da:da:fb:83:01:81:4f:80:7a:88:8f:
         92:5e:c6:40:0c:08:58:e2:a8:02:bc:4f:a2:16:0e:14:2c:08:
         1f:b2:74:07:c1:9d:e9:ce:86:9e:dc:ab:c5:93:7b:73:f3:37:
         73:f0:63:fe:b8:d4:7b:66:54:a7:8c:43:15:a2:8e:40:ca:e6:
         cf:8c:2f:2e:97:b8:ac:7e:bd:b1:e9:ee:35:4b:c5:78:f4:5a:
         91:3a:e7:b8:39:42:62:bf:27:07:54:00:38:88:45:53:d6:e4:
         c8:1e:fe:1d:98:7a:16:c5:9d:85:a1:97:ea:dc:fb:ab:1a:05:
         19:00:0b:80:12:2c:d1:e2:cb:9e:9d:51:f3:a3:7b:18:f4:d3:
         5d:be:6c:a4:0d:04:78:99:31:b2:ea:00:c6:4b:39:8e:74:95:
         db:46:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:20 2025 by rpki-client