Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895cba60-19f0-3e53-9e58-418c3a1b3b12.roa
File:                     895cba60-19f0-3e53-9e58-418c3a1b3b12.roa (raw, json)
Hash identifier:          Pc1D6B4/c30EK7U+k6On27DUZIt6FyAQjrTXCAmeCgw=
Subject key identifier:   EA:29:47:8D:A9:0A:81:6B:F2:89:82:17:A6:E2:FB:DA:E8:58:89:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB056F1B63BCBD5B7563BDC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895cba60-19f0-3e53-9e58-418c3a1b3b12.roa
Signing time:             Mon 25 Jul 2022 17:39:07 +0000
ROA not before:           Mon 25 Jul 2022 17:39:07 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        98.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b0:56:f1:b6:3b:cb:d5:b7:56:3b:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 25 17:39:07 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=abe732e3-dac5-49de-abf5-558a62afbf05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:cc:10:66:6d:41:53:ba:19:c3:5e:d5:5b:
                    24:48:87:61:62:39:aa:6e:4d:f4:c8:b0:44:2b:a4:
                    21:f4:31:77:5e:1c:ac:91:42:41:ea:ba:f4:07:f3:
                    36:19:53:31:d2:d6:c3:2f:a9:a7:6d:5e:c1:2c:61:
                    08:89:47:40:bf:49:99:58:b2:95:a8:05:db:b5:af:
                    df:44:51:81:f8:46:03:f9:ec:48:41:38:87:35:32:
                    c0:25:fb:e0:e0:a6:9b:6a:63:43:b1:c0:81:a4:59:
                    3c:d2:83:41:8a:dc:97:bc:5a:33:b5:f0:26:c5:96:
                    bc:98:f2:49:72:c8:dd:40:40:22:8c:61:6c:c4:fa:
                    69:6a:25:51:f2:f7:71:82:48:b2:2c:d4:dd:fa:c8:
                    a1:39:8c:c8:c2:9b:9d:31:b0:c6:87:20:32:1b:23:
                    22:6f:eb:d3:bf:93:e2:0e:ce:38:f3:8f:fb:70:4c:
                    9c:8a:66:5c:8c:74:61:f7:8a:da:1b:2b:fe:43:40:
                    ba:01:c3:87:82:5d:eb:94:70:29:7e:e0:72:c1:fa:
                    4d:32:b4:32:0d:92:02:e6:7c:02:65:e0:fd:ae:8e:
                    56:21:87:14:e6:04:56:b2:cb:ee:47:48:8f:15:7a:
                    06:86:4c:32:32:d1:d5:c9:c3:ab:b1:16:8f:42:7d:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:47:8D:A9:0A:81:6B:F2:89:82:17:A6:E2:FB:DA:E8:58:89:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895cba60-19f0-3e53-9e58-418c3a1b3b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:8e:4f:cd:96:33:ee:ec:ac:9c:b5:82:6b:3b:4c:85:ed:
         4c:81:9e:5b:2b:8f:47:10:99:6f:f6:e5:56:78:78:70:46:35:
         18:e7:f7:0c:33:91:ba:52:1f:34:4e:2b:7b:7e:6f:5c:97:a2:
         d7:f4:45:e8:5b:02:1e:6c:c9:10:78:6b:e6:73:89:14:ba:df:
         f9:39:d5:04:57:f6:e6:c0:64:45:d7:a1:31:e1:9c:30:9d:ab:
         da:7c:bd:d9:ea:47:7f:a5:d1:ff:28:e0:36:eb:cd:cb:a7:19:
         5c:02:0a:f6:b8:d0:a2:30:0e:14:4b:91:3b:b2:ee:69:19:95:
         55:11:44:4f:d7:4c:c6:50:5d:8e:63:1f:5c:56:f1:28:07:40:
         17:34:5a:b7:67:a8:3c:09:63:0e:e6:6e:13:e3:39:ba:3e:1d:
         7b:3b:32:9e:7b:99:55:6e:91:1d:6a:56:41:01:eb:b5:63:e0:
         48:81:a5:a7:06:62:11:d0:f1:f4:e1:ea:e0:0f:fb:b9:fc:95:
         7b:a6:6d:d0:4f:4a:69:53:cf:97:eb:5b:3e:44:38:37:d9:e6:
         2a:a8:0c:6f:51:91:44:34:08:d7:5a:be:6f:ed:cc:03:68:d4:
         4d:21:af:61:ff:13:a5:0f:52:71:b6:ca:f6:5a:23:47:0c:48:
         ae:14:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:36 2025 by rpki-client