Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a6bd199-326d-3bed-9b39-d982166554c8.roa
File:                     9a6bd199-326d-3bed-9b39-d982166554c8.roa (raw, json)
Hash identifier:          jO2RVcU1vksSIHI2GdkDIHgD7gAi1uKLeKV1Cit1sD8=
Subject key identifier:   AB:4F:3C:E8:39:EC:F4:B6:E7:F1:CC:B6:8B:F7:5F:E1:D9:95:8E:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584040DDCB58BDF4939563526F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a6bd199-326d-3bed-9b39-d982166554c8.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        99.10.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:dd:cb:58:bd:f4:93:95:63:52:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=d2ddb23f-086a-413a-b800-9632e4d94b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:58:16:e2:e3:df:a3:0b:bb:7c:e9:cc:b4:
                    5a:0d:7f:61:05:28:98:07:e9:b0:ef:fb:b4:b2:ea:
                    c3:9d:94:b4:e8:18:4c:1c:fc:39:98:6d:90:8e:c3:
                    f7:6b:1c:4b:dd:35:5e:18:68:fc:c8:af:86:48:c8:
                    d4:94:39:db:91:05:aa:17:3c:f0:0a:bb:af:16:01:
                    c7:30:b0:30:2e:7a:a3:52:9a:82:be:46:58:0c:7d:
                    22:0f:cf:a9:0f:d4:a6:e8:4e:5d:50:c6:75:fa:46:
                    a9:28:56:ed:02:2b:24:43:93:a4:ac:04:e6:93:25:
                    13:4d:12:62:d9:66:fd:7e:12:2f:2a:3e:41:78:7b:
                    3d:9c:05:08:c8:17:4b:b0:f9:bb:9e:9d:41:33:52:
                    bd:86:a0:6b:9e:71:d8:26:2f:e0:30:7e:5e:45:c8:
                    dd:7f:36:77:5f:7a:bc:87:4f:b5:73:c4:00:9f:25:
                    8d:cd:96:c9:84:83:6e:ba:4c:5f:86:f2:3e:8b:0c:
                    7c:3d:71:b8:d1:af:8c:ca:3c:6e:80:c7:c8:e8:e1:
                    1b:e6:0d:2e:86:00:dc:fd:63:c9:8b:fe:01:06:d5:
                    46:72:38:4f:e0:c6:a2:b2:7e:b8:e2:22:3a:fd:fc:
                    06:63:8e:60:02:b8:f6:a1:fd:8c:3b:9b:a0:7f:0e:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4F:3C:E8:39:EC:F4:B6:E7:F1:CC:B6:8B:F7:5F:E1:D9:95:8E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a6bd199-326d-3bed-9b39-d982166554c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.10.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:43:d2:7d:6e:0b:e1:9c:2b:40:78:79:f2:ce:2e:16:fa:a9:
         3d:7e:78:82:98:0e:4d:60:5e:9b:87:53:cb:fe:8a:3f:c6:c3:
         a4:78:03:c1:82:24:87:c2:3c:50:51:63:d6:20:d9:62:98:14:
         96:17:21:3f:f0:d2:92:cc:e4:70:8d:4b:95:10:6b:49:6d:22:
         de:da:86:12:d1:5f:f6:3f:f4:a1:93:b9:56:5e:f6:69:37:bb:
         78:09:be:0c:5d:c9:7a:4e:26:e6:f2:b2:15:a4:75:2a:b5:35:
         fe:7c:5a:7b:5d:0d:b0:4c:dd:b3:d4:72:68:86:eb:55:77:f9:
         2d:4d:18:1a:43:7b:c1:9a:c0:93:24:78:60:ee:95:91:0a:cf:
         0a:43:04:b7:18:9b:81:29:82:a4:3d:f9:d6:a0:6c:3e:9c:d9:
         ec:db:56:ce:96:4e:1a:a4:19:12:6e:4e:53:bb:5b:d2:50:38:
         11:6a:e7:3a:79:7b:61:52:b1:5c:3c:3c:05:15:fc:34:28:aa:
         a5:28:04:bf:43:36:2d:37:d7:48:ef:7a:04:25:37:7b:89:e5:
         b2:a5:11:02:09:15:22:87:4a:79:c7:30:1a:5d:6e:d2:5b:be:
         a6:93:84:ca:0a:76:c5:62:3b:46:f7:c8:e2:fc:a1:69:b6:57:
         b0:c3:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:18 2025 by rpki-client