Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ab1afd-3110-3be8-b84c-147068a207dc.roa
File:                     73ab1afd-3110-3be8-b84c-147068a207dc.roa (raw, json)
Hash identifier:          YJm9oEuVNLc1FClcpPRt2dUfWD2Q7m1CnMprQceR55s=
Subject key identifier:   F0:B4:47:97:9F:1C:14:34:07:1A:96:84:7C:6B:A2:B8:38:7E:37:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3BE5BD5EB3157CB58AB755C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ab1afd-3110-3be8-b84c-147068a207dc.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.13.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3b:e5:bd:5e:b3:15:7c:b5:8a:b7:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=3c94700e-9bb7-4662-9260-2359c288e7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:16:8b:8b:35:89:87:23:a2:ab:7a:63:be:
                    25:44:ac:5b:65:a1:d0:97:72:c8:44:39:33:4e:e4:
                    e0:a4:00:dc:55:cb:ce:91:79:bb:80:66:9d:ad:3a:
                    61:fc:db:82:bc:19:ac:c7:d8:93:3c:73:8d:30:2e:
                    2c:ba:7c:55:3a:d9:57:19:b0:49:b0:75:29:dd:a2:
                    47:72:2f:38:c5:01:5c:2f:a1:df:27:07:97:a1:7f:
                    c3:c1:a9:a9:66:66:62:34:9a:47:64:11:fd:a6:90:
                    df:d6:d2:8e:5f:da:7f:51:21:35:a2:90:11:67:d4:
                    bb:0f:db:36:17:d6:cd:6a:4b:ed:97:58:04:c4:67:
                    2a:f2:4e:5a:9e:31:f1:20:91:57:8e:a2:4e:42:0d:
                    ba:1c:eb:2b:46:2a:28:51:d5:57:43:19:83:f2:e8:
                    10:b7:be:3c:d1:f4:e8:40:d7:29:27:21:d4:03:97:
                    9b:6b:3f:78:98:45:0b:2e:8e:fc:74:f4:7f:e0:21:
                    ec:96:85:ba:99:2e:7d:3e:b6:af:a1:fc:f6:8c:da:
                    c4:17:db:03:4b:2f:ed:ed:10:45:30:f6:4f:61:3b:
                    06:11:8c:69:3f:89:21:e0:69:df:e9:b4:0e:15:e9:
                    5b:af:5b:a4:59:f5:c8:24:7e:21:ff:c0:b0:88:55:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:47:97:9F:1C:14:34:07:1A:96:84:7C:6B:A2:B8:38:7E:37:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73ab1afd-3110-3be8-b84c-147068a207dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:d6:1e:23:8f:12:77:b3:d7:a8:a4:36:44:29:44:f6:a5:
         55:78:d3:87:b8:1d:b5:00:39:b8:3f:32:b0:06:f4:37:e1:98:
         db:3e:d5:db:8b:a1:94:22:c6:b8:3f:40:f4:03:f8:1c:c7:ad:
         ee:63:f7:2e:1c:76:0f:3f:6c:1c:a5:e4:27:3c:2c:ab:a8:f6:
         ae:83:1b:33:c4:a0:c8:3d:0b:26:1c:87:ad:91:14:7c:bc:c3:
         7d:62:cb:b3:10:0e:c9:52:bb:89:75:24:50:44:51:36:30:90:
         51:23:a7:4a:13:d0:f9:f7:83:6e:3e:7a:20:bb:1f:1b:76:28:
         df:cb:75:e9:9a:89:63:83:b6:c5:68:38:ac:54:96:30:fd:c0:
         d2:13:e6:b0:7f:5b:c6:fd:63:2b:37:1d:73:3c:3c:69:b7:48:
         f1:ec:03:92:a7:39:a2:87:a2:64:e8:9a:ec:f9:a1:35:ff:e4:
         f3:dd:4d:43:4d:51:3e:94:31:0a:90:6e:f5:f2:d0:4a:27:c5:
         20:39:99:86:25:b4:b9:fb:e2:6a:eb:2a:f9:49:b4:ea:e0:75:
         d9:44:15:cd:6e:ea:35:95:bb:a3:2f:8c:9a:8e:fd:ec:36:75:
         4b:ca:9f:0d:43:b5:1d:54:96:5c:54:ff:9d:1d:83:6c:fe:06:
         a8:e3:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:33 2025 by rpki-client