Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f2ee008-6191-373a-ab4a-96a4bb776996.roa
File:                     6f2ee008-6191-373a-ab4a-96a4bb776996.roa (raw, json)
Hash identifier:          W857HJzED3Mm739cMhPBCeXGtVtgVakzwyLli5DDBDE=
Subject key identifier:   B1:1B:4F:89:2A:86:C7:40:06:2D:9B:C7:E9:F9:F1:2D:5E:1A:C7:48
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3371BB7E859182DD9B571480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f2ee008-6191-373a-ab4a-96a4bb776996.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.189.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:71:bb:7e:85:91:82:dd:9b:57:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=56f591cb-e64d-4870-b3f7-29a26085e907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:0e:e4:14:ef:6c:05:64:8c:a0:a3:66:a4:
                    00:db:21:e7:ba:1f:39:fb:31:bc:10:8f:5c:aa:c0:
                    59:ca:12:19:ba:41:ad:b4:25:6f:7d:21:23:b2:a0:
                    bd:ba:c8:b5:29:c2:7a:f7:1d:e4:ee:97:84:c8:48:
                    c9:4d:2f:e5:12:3c:0d:60:23:01:96:c5:c1:8e:ec:
                    7d:c5:93:98:8a:e6:fd:09:7c:d2:77:bd:64:94:f1:
                    b4:b2:88:86:17:03:70:99:c7:19:72:f3:c7:2a:78:
                    34:83:0c:44:c3:89:2b:f1:d5:2a:83:23:3e:b4:87:
                    1b:81:4e:05:c3:df:42:f2:97:72:fa:fd:43:a0:56:
                    bf:06:22:2f:aa:db:7e:78:9c:95:8f:ba:74:e7:0e:
                    97:69:fc:3a:a6:97:e5:3b:23:34:df:79:61:f8:dc:
                    aa:3d:8c:5d:05:1a:1a:4b:97:5a:b8:dd:4b:96:43:
                    32:34:bc:ec:b0:e6:82:8a:28:e7:40:e9:21:a6:06:
                    93:d6:ef:7d:3c:1e:e4:1c:3d:ad:2f:76:12:e5:9e:
                    78:8b:84:23:fa:2d:e3:1e:27:d5:55:aa:1f:7b:00:
                    af:ba:48:4b:a2:56:a5:e8:de:d8:4a:22:0e:bc:74:
                    90:c6:f0:d6:dc:50:b8:26:69:66:08:c4:f2:55:cd:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1B:4F:89:2A:86:C7:40:06:2D:9B:C7:E9:F9:F1:2D:5E:1A:C7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f2ee008-6191-373a-ab4a-96a4bb776996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:a9:6b:1e:ea:65:6d:82:80:c0:19:22:fd:4d:c6:53:24:
         3a:b3:b7:03:77:d8:17:db:37:5a:af:61:0f:ae:73:63:c9:23:
         20:f9:ae:7e:1a:31:23:3f:d2:a7:59:5f:0a:55:0b:c1:b2:df:
         f5:4c:1c:3d:54:22:f0:83:2d:12:3e:fc:87:1d:2e:31:28:fb:
         d6:8f:bf:f3:ac:fc:88:e7:26:c2:bf:f7:f2:c6:42:9e:97:bd:
         21:7c:02:5e:62:3f:35:e6:81:a9:52:ff:65:9a:95:da:28:cc:
         68:95:6c:47:6f:e5:93:d6:95:30:5e:57:6b:06:4b:56:50:f6:
         eb:9a:45:ce:ca:b6:39:2e:e3:77:55:20:56:c2:82:fa:0a:7d:
         2c:ef:68:85:c6:fb:e3:d4:6f:3a:06:58:1a:36:80:aa:54:0f:
         5d:8f:9c:37:3f:30:08:f7:51:c5:ef:9b:71:91:c2:7b:e6:91:
         93:7f:af:ca:a5:eb:a7:f4:f1:84:8b:57:a6:63:fc:a2:8f:55:
         c3:4b:8d:bf:f2:f4:7b:00:f6:38:5d:51:50:ac:18:44:45:e8:
         30:9e:3b:cb:1e:fe:88:a3:47:00:d0:93:45:d3:c5:37:17:76:
         cb:a9:c0:23:41:94:3a:b2:54:8f:e7:cd:04:a0:a3:33:79:c9:
         a2:6c:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:35 2025 by rpki-client