Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63213b77-1091-37fa-be51-bc67fa585005.roa
File:                     63213b77-1091-37fa-be51-bc67fa585005.roa (raw, json)
Hash identifier:          hNPpvW16fPKGm84bdt8jNsJM43AAuDP9wIh7h2C/sjY=
Subject key identifier:   CF:A3:63:C5:BB:7E:DE:E7:70:14:A1:09:09:93:29:3D:CC:38:E0:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A8F1BE8CE586B6DCC8EEBE8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63213b77-1091-37fa-be51-bc67fa585005.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        198.41.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:8f:1b:e8:ce:58:6b:6d:cc:8e:eb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=1bde5080-9067-4a62-a49c-cc782f7ccdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:a0:5f:08:a2:3d:cf:d9:eb:22:1f:1f:73:
                    1d:c2:36:a2:d4:d5:1f:81:14:0e:8e:12:5b:8b:35:
                    88:5d:93:5b:dc:07:90:28:f5:d4:94:f9:76:bd:02:
                    64:7e:70:39:96:75:df:1d:f2:b1:bd:62:b3:ea:66:
                    e5:98:ab:f6:86:0a:d7:b2:f5:e9:da:dc:32:94:49:
                    b4:14:97:51:e4:58:6d:3c:b4:65:a4:49:bb:40:bf:
                    09:de:e8:dc:fe:da:94:8e:a0:19:8f:8e:69:61:d0:
                    e5:8b:46:18:d3:79:ad:c0:3a:43:ba:60:ca:27:d0:
                    c7:e8:64:5a:d2:29:cd:0c:94:48:b5:cc:8a:88:36:
                    80:13:16:e4:5a:cf:2f:66:a6:ca:b1:d0:d3:0b:c9:
                    76:80:c0:45:7e:98:a2:19:20:b2:b4:f3:05:ac:a4:
                    31:b6:cd:5d:15:de:69:77:77:63:be:ff:66:a4:fe:
                    60:69:3a:0f:d2:94:0a:35:39:3e:09:10:3c:ce:5e:
                    1c:ca:35:d5:30:20:79:81:3b:d3:4b:1f:75:fd:81:
                    87:a0:1c:fe:5d:c6:95:33:24:89:bd:9e:6d:c1:49:
                    c0:7a:8f:e8:65:32:a6:36:79:3b:61:9c:f6:58:f9:
                    af:e6:24:df:e1:27:53:5d:01:71:e6:2a:9a:00:e4:
                    d0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:63:C5:BB:7E:DE:E7:70:14:A1:09:09:93:29:3D:CC:38:E0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63213b77-1091-37fa-be51-bc67fa585005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:df:42:09:b1:87:50:d5:14:ff:2b:27:e0:3e:e8:7a:2a:42:
         11:3e:0f:c7:18:7f:74:71:7b:11:8c:70:87:0e:85:ae:19:ae:
         2f:24:fa:40:0b:17:c6:7e:8d:ad:ab:91:ec:44:5f:99:ff:a2:
         d5:95:56:05:a8:0f:1e:6f:63:6a:50:90:74:22:ce:62:e2:a1:
         94:af:86:46:89:43:ae:dd:21:e2:2c:5a:05:40:20:5b:d1:50:
         02:b0:7c:5b:8e:94:1b:36:51:1d:1b:0d:31:f6:95:4f:e7:c2:
         2d:dd:63:57:61:82:c8:4f:51:de:35:79:3b:4e:45:7e:91:d9:
         cb:61:58:a9:61:60:6b:9a:12:29:4d:5e:6a:4a:42:82:61:c2:
         eb:c8:de:96:cb:38:78:35:93:5c:4b:0d:a1:5a:17:c2:df:50:
         d9:cc:30:93:20:db:b8:85:d7:43:db:37:ce:4c:6a:87:dd:7c:
         2a:5d:08:3b:a2:7e:e9:8b:7e:d9:57:38:e8:b3:26:d5:80:cc:
         84:23:57:89:5c:60:ca:c0:ff:de:22:60:0d:8c:d0:a7:55:de:
         17:e4:fb:1d:d1:ee:de:9b:98:38:97:6b:18:18:47:4a:5f:41:
         6e:60:ac:25:7c:63:b9:ba:28:98:5c:07:68:27:ce:99:52:1c:
         14:71:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:26 2025 by rpki-client