Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d53d76-c388-32ba-80a8-10dc180dbd3d.roa
File:                     98d53d76-c388-32ba-80a8-10dc180dbd3d.roa (raw, json)
Hash identifier:          j0WfLjZe+LBxb1pVXw8UWvkiwNHa7SaXqpayDn0pL88=
Subject key identifier:   F8:FD:AF:47:8E:27:8F:DD:37:45:2F:70:01:8F:D4:59:89:6D:4E:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401CE4E4B96DBD02F24E3A1240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d53d76-c388-32ba-80a8-10dc180dbd3d.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:e4:e4:b9:6d:bd:02:f2:4e:3a:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=0ffe9aa8-2167-4570-8ddc-cfc3ac8d34bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:d2:cc:10:e1:5d:42:cd:20:1b:f0:ff:a7:
                    f1:8b:34:8a:d0:b0:ad:00:e7:b9:a5:5d:3e:a1:b0:
                    4b:c0:e9:0f:bc:fd:58:29:7b:56:61:5f:54:81:3d:
                    f0:97:5c:04:78:74:7a:9a:05:8d:75:a0:de:0d:bf:
                    fb:9d:0d:42:8e:19:35:b1:ca:e0:04:8e:6b:78:63:
                    84:f3:7f:b8:2d:70:cd:c2:c5:8a:f8:e1:32:fa:3d:
                    74:f6:42:55:2f:6d:39:fe:97:71:31:9b:53:d1:69:
                    e5:15:4b:f2:0a:d2:a1:27:da:4b:8e:a4:2f:e3:63:
                    d8:63:a0:3e:2a:ef:0b:b1:f2:ed:79:02:c4:f8:d4:
                    32:8f:bf:a0:ba:18:ff:17:7c:b8:37:4a:16:df:7d:
                    60:fb:f9:b5:90:79:03:fd:77:c1:52:56:c8:7e:00:
                    88:3d:1e:47:4f:13:12:13:aa:84:eb:a5:89:dc:31:
                    3d:ac:3f:3b:b0:1f:d0:88:72:7c:b2:f7:20:f8:08:
                    7f:16:97:12:7c:18:5f:9a:3b:bb:b9:37:a7:39:38:
                    6b:ae:12:f7:f2:d1:81:86:4b:28:c8:56:83:4e:4d:
                    10:e4:bf:8a:02:a9:38:cb:e3:0c:b9:92:d0:ad:a4:
                    9c:da:08:61:04:ea:ad:19:e9:d9:78:51:8a:5b:07:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:AF:47:8E:27:8F:DD:37:45:2F:70:01:8F:D4:59:89:6D:4E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d53d76-c388-32ba-80a8-10dc180dbd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:06:7c:11:70:40:2c:bc:15:78:7b:58:fe:bd:a8:f4:4b:
         46:4f:f6:48:1c:b0:22:c4:6f:63:43:3a:26:9c:8d:ff:a7:92:
         48:b1:1a:d2:d3:b2:87:9b:17:87:1a:95:bd:68:76:e1:76:ac:
         f1:b1:3e:6d:cb:ab:e8:1d:7d:cd:e4:ef:8c:dd:77:24:3d:ba:
         e1:d7:6d:56:45:0e:dd:de:2f:cf:6e:95:b2:31:8e:34:bb:48:
         4c:62:79:a8:12:8c:52:6c:d8:a5:55:55:00:34:40:0f:81:ea:
         20:de:6b:4d:13:0b:bd:69:b5:97:d7:71:f4:6d:9c:2e:12:a1:
         0d:c7:60:b2:ba:3b:2a:18:88:8d:58:45:ae:bd:b6:01:b1:6d:
         bc:e0:80:ec:ad:4f:19:5f:24:b6:d0:92:c7:9e:ef:1a:78:06:
         49:9c:68:1f:43:0e:19:1c:58:99:47:24:08:6d:3e:8a:fe:82:
         0e:0b:c5:ff:b4:46:34:bd:96:20:80:01:06:0d:c1:02:b2:40:
         39:db:83:e1:85:31:de:16:71:dd:8b:5b:f2:c2:cf:28:88:64:
         be:58:dd:22:75:c0:a6:d6:ae:d7:86:26:6f:ca:90:52:dd:eb:
         88:eb:60:34:19:a3:35:e4:52:86:43:25:40:68:ea:1b:34:e2:
         e0:c4:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:10 2025 by rpki-client