Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5abc5a30-05df-3647-9163-e9fd068d1adb.roa
File:                     5abc5a30-05df-3647-9163-e9fd068d1adb.roa (raw, json)
Hash identifier:          ml/x4ZxGglPMt9v1r1oAEgkRZ9zItah/eGDd3LrCsl8=
Subject key identifier:   8F:73:D1:DB:54:CE:76:D6:B1:7D:8B:C0:52:E8:58:65:7D:F8:2C:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96BA8EA1EE70B0124014D4D8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5abc5a30-05df-3647-9163-e9fd068d1adb.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.82.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:ba:8e:a1:ee:70:b0:12:40:14:d4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=ba30a5b4-3225-454e-8e5c-58d1682fdb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:1c:30:7d:e5:90:dd:a0:d1:d1:ee:07:59:
                    6d:ac:1b:77:75:54:66:6e:29:82:18:0e:2c:d6:34:
                    41:81:c5:c3:38:99:cd:d6:5e:1f:c8:c7:de:9b:01:
                    f7:f5:df:ec:0d:10:73:45:cd:c0:4a:d3:3e:b8:f3:
                    44:28:b5:db:e8:ba:73:4a:7b:63:ce:22:6a:b9:f8:
                    60:f5:ba:fd:a7:ce:59:45:4e:26:99:eb:4d:dd:a5:
                    2f:28:3f:26:ec:47:b5:23:da:de:07:81:d1:31:3c:
                    63:ae:de:d7:c9:6d:6a:ab:79:09:d8:c8:56:60:25:
                    75:34:6d:c1:fd:0c:92:41:23:65:aa:45:1b:9c:e6:
                    a2:1b:0b:dc:eb:43:8a:e5:59:5f:b4:60:a5:08:82:
                    04:65:07:42:8c:22:1d:87:9b:88:c5:a8:e4:f1:0e:
                    d4:09:b8:fa:9a:d3:91:6a:3d:da:5e:70:7e:f7:f6:
                    1b:c7:69:ac:aa:16:87:07:c6:62:ca:aa:e6:32:b9:
                    42:47:b8:73:26:9e:20:42:14:d7:c5:32:9d:80:70:
                    cc:ce:e2:a5:4e:c8:0d:94:9b:fb:26:c7:90:3c:37:
                    0a:4a:5a:ea:73:43:48:5d:72:eb:1c:b9:75:d3:69:
                    79:c4:3a:1e:3e:3f:6d:72:12:b1:f2:a5:3a:9d:f1:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:73:D1:DB:54:CE:76:D6:B1:7D:8B:C0:52:E8:58:65:7D:F8:2C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5abc5a30-05df-3647-9163-e9fd068d1adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:76:ef:a4:0d:08:1b:9c:86:85:a4:ae:cf:b0:41:41:93:
         c6:c0:4b:12:d7:d7:69:cd:c0:4a:27:31:35:ef:1a:94:7a:28:
         fa:f6:53:60:80:e0:a8:31:63:fa:a0:6c:e4:be:c1:1c:60:60:
         95:55:f9:20:15:89:8b:86:c7:95:a7:ea:eb:41:86:4f:23:44:
         09:c6:be:b2:9b:2c:37:25:53:ef:25:8a:d9:24:86:3a:0a:11:
         f1:3d:76:d1:4a:25:8f:53:18:23:b1:2a:d5:e9:70:9f:f9:a9:
         36:3b:6a:ca:94:ab:9d:11:81:ad:b6:d0:6f:eb:ef:86:b8:42:
         5d:9b:47:89:19:38:41:17:0a:df:c0:03:9e:70:92:c1:1c:4c:
         d3:d4:01:20:ab:c6:c4:81:6d:0e:e4:e2:5d:16:01:55:d9:58:
         ac:f7:98:93:dc:2d:cb:9c:e0:7d:c0:f5:d3:26:3c:33:0f:8d:
         1f:a0:84:cf:1a:70:ad:eb:56:f0:d8:91:86:3f:b4:a9:23:15:
         23:9c:8d:f3:d5:ae:d6:77:9f:19:ce:04:81:01:d0:58:9c:a7:
         b4:38:e3:56:36:3d:aa:de:78:e8:96:14:7f:3b:b9:a2:54:f3:
         e8:98:5c:95:80:fc:06:b2:a8:b8:52:bb:6f:95:d7:67:63:d7:
         ab:81:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:25:06 2025 by rpki-client