Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992cbb7d-8ac6-3445-8551-745590021540.roa
File:                     992cbb7d-8ac6-3445-8551-745590021540.roa (raw, json)
Hash identifier:          NveYSxL7YeHns17S+A3lYoViL8GPsM6PsbzMwnzuYrQ=
Subject key identifier:   3B:00:BD:EC:D1:85:13:F5:17:28:94:0B:06:D5:A2:65:73:B8:7B:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCF12F83DEB7DC0D685B58780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992cbb7d-8ac6-3445-8551-745590021540.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        75.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:12:f8:3d:eb:7d:c0:d6:85:b5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=b651d99d-aaf7-494f-8a62-9f8ded96d560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:7c:5b:83:75:c5:af:0a:39:05:24:52:90:
                    2f:d8:ad:b5:85:88:34:4c:08:06:3a:77:6b:0c:cb:
                    79:55:2e:f4:21:f3:0d:fe:da:bb:7b:76:db:8b:f7:
                    a0:03:92:3e:e2:e6:7e:0a:46:ca:bd:71:6d:78:74:
                    43:24:cb:cc:ba:09:89:da:87:ba:e4:43:d7:88:d5:
                    81:a4:46:56:2d:e1:ab:8f:a5:7f:8a:ed:5e:a0:ee:
                    62:dd:a9:78:1f:d0:65:fa:48:41:4e:69:39:00:d0:
                    4c:01:cf:24:bb:df:d7:ce:2e:99:b2:18:10:26:a7:
                    84:b7:ff:29:9d:e1:4d:ac:12:bb:ca:2f:f9:65:a9:
                    f0:46:68:d2:1b:e4:a2:f4:4c:4b:9a:0b:a0:68:1b:
                    6b:0f:53:6b:38:75:60:fd:e6:15:d7:44:19:fa:88:
                    5e:90:d1:75:d8:99:99:6b:fe:a3:94:9d:08:49:a3:
                    1a:ec:39:f7:43:c8:25:3c:be:85:8a:e0:46:e5:6b:
                    7e:41:70:aa:a6:35:e6:14:3f:92:1c:5c:67:03:3e:
                    72:1e:09:02:e7:82:92:b0:1a:53:3d:91:78:10:bf:
                    47:56:dd:ac:94:2f:83:0a:be:28:ec:a4:94:4b:0b:
                    8b:37:95:56:f6:0b:9a:73:39:fb:66:ea:1d:82:ea:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:00:BD:EC:D1:85:13:F5:17:28:94:0B:06:D5:A2:65:73:B8:7B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/992cbb7d-8ac6-3445-8551-745590021540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:91:dd:ea:f4:d7:2f:dd:8c:82:ca:c0:f6:cd:93:d7:26:
         06:d9:45:c1:a7:d5:18:6c:71:00:09:2f:0f:e3:5a:e6:30:87:
         8c:68:9e:7d:93:2f:4e:c1:e5:0a:77:df:15:6c:c1:06:78:87:
         5b:58:80:77:84:a7:f0:99:27:8c:b2:57:5f:65:6d:9c:b1:cf:
         f9:37:bb:4b:a6:b6:be:b4:86:6c:8c:5a:5f:70:0b:72:8d:48:
         d7:35:30:17:75:09:c3:56:a0:d0:48:45:51:c4:a7:48:c7:de:
         eb:04:98:ff:55:05:17:4d:3f:bc:0f:03:68:1a:d1:91:47:fa:
         36:25:71:40:42:0a:38:fe:3a:c4:4d:89:e9:72:81:a9:d4:f9:
         9f:da:dd:58:78:b0:0b:07:50:0e:2c:e2:eb:6d:2b:55:ff:58:
         9e:44:79:9b:35:5d:b8:cc:cf:4c:bb:b6:9e:cf:96:f0:a2:4a:
         b1:c6:18:c2:6e:a3:e7:26:65:00:38:b0:5f:04:1f:da:72:e0:
         26:11:3a:48:6b:e4:d7:28:4c:40:0d:79:a7:05:ef:ee:50:ae:
         c1:e7:f2:5d:6e:ae:36:0e:97:b3:36:6c:e0:7b:a4:19:03:82:
         44:b4:4c:8b:5f:69:a2:93:3f:06:07:87:8a:76:f8:d9:f6:b1:
         bb:a1:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:51 2025 by rpki-client