Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/828037a0-b611-32c2-b2f3-429e00d77f4a.roa
File:                     828037a0-b611-32c2-b2f3-429e00d77f4a.roa (raw, json)
Hash identifier:          ET4pbqQgI3e0CzL7T7QpSluu/oi0kGF+JIRbM74D11I=
Subject key identifier:   CF:EE:87:59:0B:23:C8:71:7D:23:DD:18:EF:F2:E7:F9:69:78:62:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96B2DAFAAB84CA454DE70AE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/828037a0-b611-32c2-b2f3-429e00d77f4a.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:b2:da:fa:ab:84:ca:45:4d:e7:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=d2a794ce-8007-44f4-b1f6-8d46120fab65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:d8:01:89:ea:c7:e3:9c:54:bd:8f:96:5e:
                    f1:f9:20:e8:7d:ef:2b:42:89:e9:a5:9e:01:9c:12:
                    51:ec:6f:85:92:03:c1:2a:34:7b:4b:12:93:41:84:
                    82:a0:ce:3d:c0:99:97:10:47:d0:2e:9d:54:6e:85:
                    24:95:fa:77:ad:fb:4e:1c:01:d4:39:3a:76:5f:cc:
                    f9:73:c8:bc:b4:7a:7d:66:22:4c:8e:1d:b9:f2:d3:
                    80:d2:4c:ce:61:01:b9:3b:ea:35:94:71:2e:83:ef:
                    8c:bd:3e:2c:4b:4d:01:79:d0:a3:0b:35:8e:eb:07:
                    76:3a:3f:76:65:99:07:d1:97:75:b2:a1:35:f8:56:
                    ff:71:d8:29:2a:17:cc:11:1c:0f:b4:2b:db:1e:88:
                    59:48:05:57:bb:ad:1f:75:2f:cb:ae:98:d4:c0:c7:
                    d9:9a:c3:e3:91:fe:87:f8:6a:d8:29:ff:99:47:e5:
                    dc:d0:cc:8b:c0:2e:1e:00:ea:e2:1a:06:97:42:ff:
                    eb:df:c9:0b:3f:c6:5e:3b:12:b0:46:d1:da:73:22:
                    0b:60:b9:a1:d9:f0:13:da:5e:19:60:c8:8a:d9:45:
                    90:e2:f8:46:40:85:f8:ed:8c:67:3c:37:fd:72:26:
                    d1:76:e4:f1:56:27:79:da:75:5c:6d:6e:c4:25:a6:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EE:87:59:0B:23:C8:71:7D:23:DD:18:EF:F2:E7:F9:69:78:62:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/828037a0-b611-32c2-b2f3-429e00d77f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:b7:47:de:c8:a7:30:b2:71:cf:a6:66:b1:08:1c:c9:5e:
         ee:e4:00:31:52:9b:4f:1d:4e:a3:da:f7:1e:35:0c:25:5f:f2:
         dc:05:53:0d:a6:fd:68:fc:00:ba:84:4c:05:69:7e:6b:7f:be:
         37:7c:8b:fb:37:f9:3f:9a:c7:73:80:69:2e:1b:db:28:3d:40:
         a4:35:74:03:88:e5:66:fd:27:c5:df:c2:f0:2a:20:21:80:6e:
         ba:50:59:6c:82:a7:72:aa:41:ba:16:17:35:10:db:02:b8:57:
         56:0d:4a:c8:70:0d:01:a5:ab:80:50:7d:ed:9a:ef:4d:4f:f3:
         9c:60:f8:cd:c0:fc:9f:b6:e3:9b:ec:73:7a:eb:dd:53:29:d9:
         8f:73:ec:e0:5f:80:3f:5a:6a:85:02:8d:04:31:14:14:7f:14:
         43:c9:78:2e:96:33:f9:77:c4:a9:78:ab:61:5a:ee:94:a7:72:
         09:22:e3:bc:d9:87:28:3d:b7:1c:4c:7d:d6:50:4f:63:77:7c:
         84:0e:1d:aa:28:5c:34:0a:86:0e:55:ba:e5:d4:a9:49:6c:2c:
         92:a8:e3:be:b3:85:91:75:33:dd:fc:e6:e8:56:4c:ec:8d:83:
         14:99:65:4a:e0:f7:90:7f:3b:7b:43:50:c2:24:29:cc:02:62:
         36:51:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:07 2025 by rpki-client