Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/818d3d49-4418-32f5-97e1-645fe060978a.roa
File:                     818d3d49-4418-32f5-97e1-645fe060978a.roa (raw, json)
Hash identifier:          oMsVrPJUcB/WvGDmtWP124N2DYSb9y65cbMdcAIXEXc=
Subject key identifier:   C6:35:FB:03:D1:67:F6:34:D0:B8:1F:F6:06:4C:BB:10:21:E7:B7:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401FA8109282A5970D519D5300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/818d3d49-4418-32f5-97e1-645fe060978a.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        100.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:a8:10:92:82:a5:97:0d:51:9d:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=30e8c7b6-e302-40b3-82c3-7bc43cc861ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:a1:37:dd:19:ce:93:87:d8:96:66:34:36:
                    4f:62:a9:4e:f5:70:b4:fb:ef:9b:66:a6:b2:0a:09:
                    2e:ff:12:37:3f:48:0b:b7:ff:ca:e9:c0:19:8a:87:
                    f5:05:f0:49:0b:f2:76:0e:07:3d:c9:e1:69:eb:c1:
                    d4:25:19:65:37:53:b8:c6:d9:e5:75:f6:44:d4:7d:
                    21:93:1f:96:18:cf:11:1e:9a:8d:79:e2:73:9a:df:
                    68:c5:b4:c6:07:0d:0b:3f:55:f2:32:87:39:d5:59:
                    b5:8b:8b:84:3e:e6:47:9f:f1:90:16:9f:44:86:2c:
                    a6:33:5b:67:0c:0c:39:0c:d0:b2:3d:38:7a:f3:e1:
                    aa:a6:d6:d4:39:09:98:70:a0:74:37:aa:5d:a9:b9:
                    27:db:44:fe:ef:79:7a:61:2f:76:bf:80:33:cf:7d:
                    32:9e:fc:82:cb:4f:9a:3f:15:13:86:61:c3:c7:8e:
                    f6:89:04:5b:a7:19:04:fc:3f:64:e8:3f:60:37:b3:
                    22:d0:c8:c2:f9:83:a7:f7:4a:b9:ae:36:0c:e1:ed:
                    b8:72:ac:ea:92:0f:92:d4:f6:68:fa:90:fb:5a:cd:
                    de:e2:2f:1f:bb:84:f4:cc:e4:36:ac:33:7c:b9:43:
                    c3:55:3d:e9:fb:b7:61:be:d5:e8:eb:37:74:0a:df:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:35:FB:03:D1:67:F6:34:D0:B8:1F:F6:06:4C:BB:10:21:E7:B7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/818d3d49-4418-32f5-97e1-645fe060978a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:16:b9:ef:0d:39:a0:9c:1a:67:55:d1:2a:ff:9f:de:cf:
         2e:ed:72:db:37:3a:a3:77:f3:54:3e:a3:72:78:5f:b5:ce:95:
         36:70:e0:6c:59:bd:68:9f:e8:aa:fe:77:ca:06:ed:e4:b6:c0:
         0f:67:ad:35:bc:32:45:09:e7:c2:bf:80:60:dc:10:b1:c0:5d:
         2e:d7:a5:83:ec:c1:67:1e:46:c1:6a:44:1e:1a:e8:45:c0:00:
         59:a6:23:60:75:78:c6:31:3e:87:4b:83:6e:d7:06:64:69:2e:
         25:61:f3:32:92:90:8f:74:f6:bd:7b:14:c4:cd:c9:38:ab:e4:
         8b:6f:28:15:9e:cf:d9:e6:8e:7d:93:5b:0d:5c:bb:cd:4c:dd:
         67:2d:20:48:2e:58:8e:e4:81:9f:36:5f:d6:da:48:d4:55:6f:
         81:c3:13:47:08:de:f0:2e:bf:74:7c:11:07:fc:74:70:73:cd:
         f2:18:b7:2a:6d:25:b5:45:09:fe:8b:9a:76:ab:6c:53:0f:24:
         d3:bb:14:9c:96:7c:e1:ae:a5:8b:fa:54:93:3a:d5:c0:08:25:
         45:90:09:4d:b6:09:b7:92:3a:f3:ce:28:2e:22:b8:37:e3:e3:
         fd:41:23:fa:06:d9:68:44:d8:52:47:b9:89:22:84:5b:b7:26:
         a0:40:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:31 2025 by rpki-client