Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8639fad1-17e1-397f-8d5b-84f8c39e0d64.roa
File:                     8639fad1-17e1-397f-8d5b-84f8c39e0d64.roa (raw, json)
Hash identifier:          7nqchSv9gRF+trok56Ms9XB227jz8pIyBiwWOQtMK2I=
Subject key identifier:   7E:47:EC:D2:7E:97:1A:77:C0:CB:BD:0D:FE:B9:92:C3:17:45:19:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404487A8212488D33C2138B280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8639fad1-17e1-397f-8d5b-84f8c39e0d64.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:87:a8:21:24:88:d3:3c:21:38:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=09c594d6-8cc8-42e2-9534-a1c231eeb02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:f7:e8:f9:f8:0e:f2:6e:0f:8a:32:9a:ec:
                    2a:e1:39:5c:18:de:1e:9c:f8:75:61:16:e4:e0:dc:
                    fc:57:39:dd:30:c1:38:aa:1c:6d:cd:af:2c:69:46:
                    ee:1d:69:67:80:47:2f:15:6c:42:76:be:4b:ea:75:
                    6f:15:bc:08:d8:2f:38:57:82:5b:88:59:d5:10:72:
                    52:3e:5e:bb:96:52:e9:12:22:ba:28:42:23:bd:94:
                    d0:42:41:ba:39:2f:75:ac:d4:c1:00:b3:17:56:e7:
                    7d:5c:d9:90:5a:9c:ab:43:7e:02:e4:22:5e:2c:5b:
                    74:b3:84:cf:05:7d:db:97:0f:5f:f9:fb:df:75:3c:
                    20:b2:bd:9b:ba:9f:83:65:24:38:44:9b:fb:0f:7c:
                    8a:f7:d4:ae:5b:80:1f:31:c9:c0:7d:a7:e5:ff:26:
                    e8:8d:4c:bc:2d:1f:00:06:76:7c:d3:07:61:37:c1:
                    e8:a5:99:b3:6c:8c:fc:f1:68:ef:89:73:62:c4:53:
                    de:9b:98:fd:75:29:9c:86:0b:ec:82:7f:64:da:56:
                    5d:72:f7:76:86:47:ff:48:bc:16:e0:c4:51:f9:18:
                    0c:c6:7b:7c:81:94:00:a3:ce:7b:d8:9f:eb:99:94:
                    c6:0c:f1:16:9e:75:33:45:25:1c:41:5c:9a:50:ad:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:EC:D2:7E:97:1A:77:C0:CB:BD:0D:FE:B9:92:C3:17:45:19:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8639fad1-17e1-397f-8d5b-84f8c39e0d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:67:d2:67:01:8f:53:a6:df:07:31:e0:87:bd:df:a3:95:da:
         06:4c:f5:c1:bb:23:64:ec:ee:87:f5:2a:be:7b:d8:24:69:70:
         4e:64:4e:89:1f:3a:e3:40:fb:84:1a:fc:8b:a6:61:20:22:ad:
         42:3f:72:be:8a:41:6f:7e:86:05:94:9c:0b:fd:61:ae:37:6d:
         5e:6d:10:a5:f0:85:25:3c:de:6d:19:96:1c:ee:7f:9b:ee:e3:
         19:bf:f5:c4:29:7e:b3:9a:5f:2e:c2:d9:f4:eb:41:4e:75:e5:
         66:d3:dc:e3:89:dd:97:11:55:40:e2:69:8c:36:71:fb:ce:a4:
         f2:13:c9:80:1f:82:aa:d1:e5:53:35:c4:93:60:ba:e3:f1:f5:
         e7:a5:99:39:72:35:60:47:47:1b:d4:8d:4f:f6:db:2d:e1:4f:
         a3:0c:39:80:f5:43:2c:ee:22:2f:e1:9c:64:d5:4c:0d:56:50:
         18:bf:0f:60:1e:81:32:e1:31:06:55:49:57:1e:b9:a5:5d:59:
         24:ee:de:5d:e6:80:79:70:b8:00:49:b8:e9:86:15:dc:27:af:
         ec:eb:00:47:07:c6:1f:a7:a0:6b:8d:10:12:c7:9f:7e:9b:be:
         74:04:48:28:5a:f7:fb:4f:37:29:db:35:69:ca:f0:05:66:23:
         78:10:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:06 2025 by rpki-client