Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91e6d3fb-3164-3fb8-8c34-fac35e0acc74.roa
File:                     91e6d3fb-3164-3fb8-8c34-fac35e0acc74.roa (raw, json)
Hash identifier:          c/9RCRPjd78piIiNM9/A2wYKiIqVwFxDbsaPyCcRWs8=
Subject key identifier:   B9:44:5E:97:AB:03:78:D9:42:21:88:B9:BA:68:A8:F9:21:BA:03:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8342B13690D7DDE006EE7080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91e6d3fb-3164-3fb8-8c34-fac35e0acc74.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        192.189.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:42:b1:36:90:d7:dd:e0:06:ee:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=f60b1e85-cd34-46b1-8baf-f14917a03326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:c2:f8:06:6c:aa:4d:3d:4a:d2:68:be:e8:
                    3b:5a:a6:db:f7:cd:d8:bb:c8:d2:a2:31:4f:51:19:
                    c3:c1:33:6b:01:68:c8:aa:a8:00:b4:b8:85:74:10:
                    a5:d7:f2:fc:3a:8e:26:60:9c:38:06:9f:ec:f0:9b:
                    eb:73:b3:41:d0:a3:4a:2c:b3:d6:75:08:54:bf:64:
                    d3:64:6a:57:94:52:24:97:a8:ee:61:76:5a:62:31:
                    3d:1a:66:96:99:27:70:cb:96:3b:5c:f7:e1:a7:20:
                    e6:d4:85:45:f9:85:17:12:5a:09:b7:d5:b9:78:06:
                    94:fe:90:4b:a0:35:8b:eb:0f:dc:18:6f:cb:4d:d5:
                    8e:f7:f3:b3:c9:93:e4:c3:08:17:90:6c:70:3c:d9:
                    8d:d8:f3:ff:a5:8a:d7:dd:7d:a4:7a:87:33:06:b5:
                    fb:db:d0:05:65:31:f6:19:7d:91:ff:e1:6a:10:44:
                    26:61:32:07:34:fe:62:92:4a:1b:bf:bc:ff:56:46:
                    f1:19:23:c9:13:76:99:0b:c9:ac:b0:cc:c4:c2:e8:
                    52:1b:34:12:59:a1:8f:47:f1:a4:ae:4a:7a:08:3a:
                    2f:c2:83:7a:8c:8c:af:c2:2b:ed:0b:bf:b0:d0:46:
                    d5:08:17:d6:11:e5:0b:51:bc:a0:f6:8a:e8:2b:95:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:5E:97:AB:03:78:D9:42:21:88:B9:BA:68:A8:F9:21:BA:03:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91e6d3fb-3164-3fb8-8c34-fac35e0acc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:e6:49:0f:f1:2f:b2:d3:78:54:e9:60:49:6a:50:df:14:
         bc:e3:5a:79:a4:47:cb:87:38:fd:53:b1:ad:69:7d:2b:e0:04:
         63:7f:7f:cc:f1:86:90:9b:07:e1:16:fb:37:10:82:cb:81:e0:
         20:f3:27:69:76:85:d8:73:e7:92:74:82:8b:6d:e3:c3:5c:54:
         a6:13:ab:f8:7e:54:a9:75:12:68:4d:b1:c2:73:85:c5:d9:56:
         d3:9b:60:95:19:3e:55:1b:29:d2:4d:a7:c0:c7:1d:23:23:d6:
         8e:ff:95:32:5b:01:70:80:90:08:2b:6b:0b:af:40:52:d6:e7:
         30:52:0e:43:f7:39:c6:95:55:9a:39:87:bd:01:1f:07:4d:2b:
         64:7c:e7:0d:78:56:8e:e2:b7:aa:2d:fe:61:aa:1a:e9:2a:68:
         0a:72:95:0b:34:5a:ce:44:24:3e:79:02:76:e9:dc:a5:fd:0b:
         3d:0f:a0:18:9c:76:71:6e:01:c0:9b:06:7b:0f:42:ec:24:a2:
         5d:48:f1:a4:d6:ce:63:b0:64:e6:d0:80:21:6c:0b:df:b6:51:
         78:7a:36:ab:98:ed:16:17:79:e2:6f:aa:8e:45:8f:a5:cc:37:
         f6:55:e4:d1:e3:a2:58:c8:0c:53:41:43:3e:df:2f:09:b4:ec:
         8b:35:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:07 2025 by rpki-client