Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89da5d12-a691-33d8-95b2-a07bbd7bb4a7.roa
File:                     89da5d12-a691-33d8-95b2-a07bbd7bb4a7.roa (raw, json)
Hash identifier:          3zJYrNsDymCnY29BOlzYBybYvtgSLVbVK2jsL+EOBPM=
Subject key identifier:   9C:9D:B4:DF:FC:AC:38:EC:7B:34:7B:75:0F:83:42:79:8A:77:FE:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD8E750A3407C835E0A6A9400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89da5d12-a691-33d8-95b2-a07bbd7bb4a7.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 12:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d8:e7:50:a3:40:7c:83:5e:0a:6a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  8 12:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=01957f2f-3147-4131-b089-61c8e729c18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:67:e9:2c:44:8c:93:6d:be:ff:13:29:bd:
                    33:1c:81:43:58:33:7d:25:ad:16:d5:49:9e:2f:57:
                    3b:3a:9c:16:80:85:18:70:8c:1e:cf:34:23:02:fb:
                    7e:7f:21:e7:71:5e:d7:19:7d:cb:f0:06:38:f9:24:
                    88:33:05:82:52:c8:b5:a3:8d:4d:ed:e3:3a:83:b7:
                    d2:c1:7f:5a:cf:42:00:03:27:c0:2e:31:bc:58:5f:
                    cc:55:7c:1d:45:4e:91:b0:df:91:73:7c:99:3f:b6:
                    7d:0a:22:98:a5:dc:d8:42:54:b2:7f:9e:61:4c:2d:
                    1e:08:95:cb:79:54:dc:d7:84:cb:b8:c4:d6:05:d6:
                    31:a6:a5:b7:e9:88:49:59:b2:42:71:8a:de:9f:26:
                    24:d8:30:6a:07:34:f6:e8:7b:06:93:d8:94:88:fe:
                    f0:84:7b:bd:c4:48:7a:66:3c:26:72:6e:ac:50:4d:
                    34:09:3c:39:55:fa:bc:f8:a2:b7:cd:08:55:93:4a:
                    4e:b0:9a:a9:02:b5:ad:39:7b:46:f4:c0:02:1a:13:
                    2a:f5:56:98:6f:87:65:ed:e5:32:6c:70:cb:df:ac:
                    a1:3f:f2:c0:9c:4b:42:84:fc:b7:02:00:48:03:f0:
                    bc:42:09:46:d7:88:7d:d3:46:70:67:bb:cd:34:5c:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9D:B4:DF:FC:AC:38:EC:7B:34:7B:75:0F:83:42:79:8A:77:FE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89da5d12-a691-33d8-95b2-a07bbd7bb4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:d1:5e:ca:27:f0:dc:e2:54:b8:85:c0:92:8a:a3:e3:09:
         5f:fd:3f:75:71:49:34:6c:9a:c2:d4:7f:2b:37:39:08:02:ac:
         18:28:d5:8e:0f:13:2a:b4:a4:b5:33:c3:3f:16:47:53:c0:92:
         8c:3e:ea:ea:1c:29:0b:e4:9a:4b:88:de:aa:cf:10:f7:b1:fc:
         64:0f:96:a3:74:85:bc:17:9e:70:9d:df:13:01:22:a5:7c:eb:
         da:b1:c1:50:4e:97:d9:da:be:6d:9c:9a:8a:cf:13:51:23:fa:
         36:72:eb:46:e5:69:ac:75:98:9c:09:6c:ec:5a:86:46:eb:84:
         5b:a6:10:9d:40:ce:40:da:c1:b8:2e:83:b1:8e:d6:62:1e:d5:
         84:89:5e:3b:14:29:54:d7:37:59:11:f1:d7:e2:c0:43:40:de:
         8a:78:91:0c:36:78:e2:8e:70:7b:32:16:5c:5c:c2:74:09:06:
         2e:01:63:1b:d2:00:68:9e:2e:dc:4e:99:c6:4f:81:b5:ea:52:
         80:f2:83:a8:9e:c2:53:c7:fa:10:e8:f6:27:b0:ff:9b:5e:b4:
         ff:09:de:b3:e5:ad:c7:16:89:cb:b2:86:f2:60:8c:dd:bf:67:
         af:f2:5d:98:eb:ab:ba:ce:2d:e6:d2:08:a6:80:cb:4d:80:0c:
         30:9d:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:48 2025 by rpki-client