Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce5db09-32f0-3bfa-9226-bf1ba399d1ce.roa
File:                     9ce5db09-32f0-3bfa-9226-bf1ba399d1ce.roa (raw, json)
Hash identifier:          HUebWBZZtUoFW8oTpwxMe5dFurPmOh6EL2w0/WX22J8=
Subject key identifier:   04:F0:1D:90:36:B6:24:F0:3A:65:28:E8:FE:D0:9F:AB:5B:66:DA:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840357792C35E68E32488BFFB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce5db09-32f0-3bfa-9226-bf1ba399d1ce.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        98.130.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:77:92:c3:5e:68:e3:24:88:bf:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=cea061bf-a8cc-40e3-98fa-4e914f63ece8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:31:d6:34:2e:0f:d0:41:72:14:0a:22:b6:
                    54:81:d1:d4:72:af:0f:48:7d:91:44:b8:f9:7c:f5:
                    18:5c:65:48:cf:fc:74:0f:49:e9:d4:e3:37:7b:f6:
                    54:dc:97:05:b2:7e:0e:01:a2:25:15:0a:e6:cd:85:
                    21:ac:04:e5:2a:4c:1d:e1:2a:eb:22:18:24:73:5b:
                    41:1d:8e:7c:b6:37:60:8a:3a:fb:b3:39:3e:2c:75:
                    75:52:91:14:48:46:bb:e2:e2:9c:70:a8:a7:e3:8b:
                    c9:46:30:20:cb:9d:5a:d7:b5:b6:75:95:58:ab:7c:
                    3d:0c:e4:de:24:69:eb:4d:93:53:bd:c4:bc:cc:de:
                    e5:d7:2a:08:12:ee:a2:d8:1b:8f:4b:2f:73:ab:b9:
                    af:ef:4c:8c:f6:2e:bb:48:77:45:98:4e:4f:fa:f6:
                    ac:d8:91:3b:de:42:d5:47:0e:6a:67:b0:1a:dd:95:
                    e7:54:5e:ce:62:95:40:db:00:0c:c2:c5:07:bf:37:
                    f5:4a:45:20:a7:88:38:e8:e9:9f:cb:40:e7:07:bd:
                    59:24:72:5d:46:1d:1b:3d:86:d0:74:03:a0:a6:16:
                    f0:f4:da:54:db:7a:cc:62:c4:72:71:19:65:4f:7a:
                    aa:4d:7d:ce:ea:77:6b:fc:0b:1b:1b:b2:c8:39:06:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:1D:90:36:B6:24:F0:3A:65:28:E8:FE:D0:9F:AB:5B:66:DA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ce5db09-32f0-3bfa-9226-bf1ba399d1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.130.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:5c:07:12:60:20:b5:b6:64:ef:19:87:eb:8e:e6:3c:e7:
         26:a3:5c:e4:c8:69:f0:2f:30:93:42:52:b2:61:37:13:f4:19:
         1b:a5:f0:07:4a:73:c3:07:80:a2:76:31:e2:97:37:33:f9:1f:
         39:26:4c:cf:0b:12:e8:c6:d9:2d:c2:d5:1c:3f:5a:87:d4:26:
         5a:06:f0:e4:e7:59:09:72:b1:ef:05:30:65:d1:f9:f8:b8:71:
         4f:ac:63:3f:7c:31:4b:3e:74:0a:b9:dd:04:bc:ae:24:c6:c1:
         e4:24:4d:b7:24:2d:25:ba:0b:cb:a2:70:4a:e0:59:27:85:e0:
         fb:78:eb:12:85:63:94:51:eb:04:b8:90:eb:1a:c0:c0:1c:73:
         3c:bb:65:19:22:ff:68:6f:ee:13:b6:5e:04:d5:2b:20:77:9f:
         a4:ef:b7:ff:dd:99:fa:54:9b:7a:f0:e0:90:ef:35:17:da:a0:
         2f:f3:bc:6a:48:71:6f:ad:af:85:2d:09:a9:2e:30:ad:bd:52:
         34:73:e0:34:6b:6d:30:36:54:bc:33:5e:a8:b5:88:7f:94:50:
         4b:2e:32:fe:fa:4e:98:0c:5f:c9:2e:63:bd:63:1b:01:1d:5c:
         d3:35:31:d3:9d:06:75:fc:90:42:5c:00:e7:f8:6e:ab:ea:fa:
         53:86:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:12 2025 by rpki-client