Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583e0f37-bfad-3c01-83bf-548490a4bb7b.roa
File:                     583e0f37-bfad-3c01-83bf-548490a4bb7b.roa (raw, json)
Hash identifier:          d9/hAu/TYGUpL3Yy3UkHrV0sA+9OIdSLl1cjaXz7KYc=
Subject key identifier:   63:6E:21:C1:A6:C0:40:39:1E:55:8D:3C:C5:B4:86:33:73:2F:F2:D9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4F4ECA2BBAB84E9E939E480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583e0f37-bfad-3c01-83bf-548490a4bb7b.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.156.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:f4:ec:a2:bb:ab:84:e9:e9:39:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=fd9fb74e-7d77-47ac-b3d4-01c3e1d41b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:3c:87:83:09:d4:4d:b9:17:3a:9f:c1:d9:
                    6b:a7:c6:3d:3d:30:62:5f:d4:22:9d:e9:ad:a2:c7:
                    a9:2b:e0:cc:00:42:2a:6e:da:bd:f5:25:41:c8:7a:
                    7a:18:ff:93:8a:fe:e7:53:cc:97:16:ca:f0:34:d1:
                    1f:b8:27:8e:10:e6:b5:d3:86:8a:aa:02:12:51:19:
                    43:15:a4:94:0d:81:e0:cb:b1:bf:82:54:d4:6a:e2:
                    ff:73:02:6d:e4:3e:c0:b8:b5:05:99:5a:5a:e7:7e:
                    eb:21:fc:52:d3:2b:45:4d:23:48:55:90:8a:40:d9:
                    ee:76:f2:78:95:14:d1:64:30:7a:b8:d4:1b:1b:62:
                    b3:41:6f:18:b3:77:cb:8c:2c:4c:94:57:29:00:29:
                    90:b6:22:0a:23:73:4c:45:03:fd:8f:c3:a7:ed:1a:
                    dd:b6:01:df:b8:44:fd:20:35:e7:a5:27:7b:8f:d9:
                    9c:6a:14:cf:a0:1f:3e:ab:04:ae:b7:b8:c4:8d:65:
                    4b:27:1f:55:7a:7f:6d:30:b5:7f:e7:6e:d1:1e:79:
                    d9:bd:29:45:5f:87:4f:37:e7:8b:b1:aa:9b:89:5b:
                    31:bf:70:35:f9:29:71:96:94:3e:39:45:47:35:8a:
                    2f:18:30:42:11:12:3b:80:41:f5:cb:52:52:7f:bb:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6E:21:C1:A6:C0:40:39:1E:55:8D:3C:C5:B4:86:33:73:2F:F2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/583e0f37-bfad-3c01-83bf-548490a4bb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.156.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:02:19:73:e9:b2:ee:ae:5d:9e:f5:09:18:87:3c:26:4e:
         73:3a:b3:aa:57:46:c1:1b:e1:8a:dc:ef:21:31:c4:bd:96:36:
         5d:0a:ed:c9:1a:54:d7:fc:55:99:ec:58:ca:09:87:c3:26:48:
         7a:98:ea:4c:ab:0a:35:50:ac:a5:3a:5b:72:ee:f1:bd:e4:8c:
         d1:81:a5:e5:c9:4a:7c:0f:6c:3f:67:f3:8f:54:67:c9:0f:d8:
         c0:22:24:a6:00:13:2e:e2:1a:38:55:37:24:0d:4f:af:80:39:
         31:2d:ef:64:6a:ee:0a:cd:d3:8d:c6:98:3c:04:07:10:91:f0:
         61:34:27:43:f9:84:55:3f:60:86:96:c0:82:7c:86:30:94:7d:
         c9:7c:dd:c0:59:2d:3f:fd:9c:b7:51:34:3b:46:ca:66:69:97:
         24:61:62:76:d3:7c:99:41:92:91:ad:35:ce:02:13:67:1f:60:
         a1:ca:9a:ec:2b:a8:43:01:d0:1e:af:06:af:84:6b:0e:b7:1a:
         af:e5:a6:43:22:6d:06:bb:5b:13:0d:df:5c:9b:67:fb:56:53:
         4e:71:4d:17:91:9c:6b:3b:03:1a:d1:98:d0:ea:a6:dd:fa:e1:
         57:66:55:c6:aa:56:3c:d4:4f:81:cc:b1:a3:f5:5f:74:b9:66:
         61:2c:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:21 2025 by rpki-client