Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94887f21-635d-3914-93f8-36f74c3d54f4.roa
File:                     94887f21-635d-3914-93f8-36f74c3d54f4.roa (raw, json)
Hash identifier:          LX+H7NCoG9IvsJokcRH0S6ba8CBB2SY+EV+XhuLzCQQ=
Subject key identifier:   13:51:9D:58:EF:CC:91:41:9A:93:D4:D4:B8:D9:9A:70:80:A4:6B:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBBDAD546054D84F949C9C100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94887f21-635d-3914-93f8-36f74c3d54f4.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.200.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:da:d5:46:05:4d:84:f9:49:c9:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=13b743cf-0cbf-412f-9a1e-80afcddeb577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:0a:c6:54:9e:dd:dc:1e:d7:80:ae:bc:1a:
                    ec:46:ac:ca:f7:16:7c:ed:1d:73:46:36:20:6b:2f:
                    51:95:95:46:2a:d7:4b:1c:e2:c5:0b:db:22:c2:f5:
                    b3:14:b5:d7:1f:6e:f8:69:e0:9b:06:66:1a:fa:c9:
                    d1:9d:29:0e:2a:98:f8:15:f0:47:fa:92:b7:00:dc:
                    0e:81:7e:e3:4f:7f:4f:97:10:11:d3:ec:73:6e:9e:
                    51:79:0f:82:10:d5:90:32:d6:49:a8:0e:1a:ec:f4:
                    4e:a0:b8:39:f7:1f:0f:ed:c4:20:10:67:12:8b:43:
                    ed:8d:62:9e:77:a6:19:99:13:cd:e9:db:3e:41:a9:
                    df:73:72:27:e3:83:39:f1:ec:04:25:aa:47:f3:dd:
                    87:dc:9b:d5:cb:12:ca:3e:e9:4c:0b:82:d8:e1:02:
                    fb:a6:bf:9f:a1:4d:62:a4:6e:34:90:97:9e:c4:00:
                    a0:dd:bd:47:3d:fd:7b:12:12:a9:b6:d9:c9:f7:c3:
                    8b:91:0f:01:01:13:3c:50:c2:76:4d:c3:92:0d:42:
                    5d:38:6a:fb:81:b0:59:f0:17:43:d5:3c:54:66:6e:
                    b9:2a:a9:46:8f:7e:d1:62:67:11:a0:0f:d8:73:d4:
                    49:67:08:b1:19:f2:0b:1d:1c:96:07:3f:a7:ca:81:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:9D:58:EF:CC:91:41:9A:93:D4:D4:B8:D9:9A:70:80:A4:6B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94887f21-635d-3914-93f8-36f74c3d54f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:48:04:1d:3e:95:52:d7:8b:cf:b2:fb:ed:2f:81:d6:a4:
         9c:6e:90:94:c6:69:79:2f:79:5d:06:e1:31:dc:0c:5e:28:cf:
         0b:55:79:63:e9:e7:6f:55:2a:13:f1:d4:73:88:dd:e3:d9:9f:
         c2:35:27:f4:fb:ad:15:c7:dc:0a:55:c3:d6:89:35:38:37:90:
         28:2a:07:fd:45:b3:62:0b:3c:df:80:48:1e:e4:49:9b:94:04:
         f3:69:e6:30:e2:e9:4c:a0:cc:2c:84:94:fe:a0:44:6b:8c:c8:
         03:26:ac:51:fb:db:f0:62:10:07:c6:d0:e0:43:e8:17:af:80:
         7d:f6:4b:2a:98:11:2f:54:7c:7d:c5:96:a0:58:db:cd:a4:31:
         df:82:3f:79:0f:81:da:3a:6c:6a:c0:53:22:a0:99:41:6a:3f:
         22:92:b0:cb:51:4d:b9:42:1c:b3:df:42:49:a7:f9:6b:4c:e2:
         26:61:0c:7d:31:bb:78:18:76:bd:af:11:a3:aa:70:b6:79:53:
         58:9e:ce:02:27:2e:bc:2c:6a:97:85:97:55:fd:1a:cf:43:8f:
         03:01:f0:a8:1d:a5:61:7c:05:44:e0:8a:3a:06:ac:8f:cc:ac:
         18:cb:b0:53:fa:45:36:40:9a:32:84:90:48:e7:c8:cc:e6:83:
         39:78:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:25 2025 by rpki-client