Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dad831f-3474-3b0c-81d7-8157d596841f.roa
File:                     9dad831f-3474-3b0c-81d7-8157d596841f.roa (raw, json)
Hash identifier:          78EX6z5gXz486mLIcTbLI6u+DqGcfi/v8C907MOU0cw=
Subject key identifier:   A9:37:95:51:99:79:EF:A3:8E:40:A2:AD:E2:BB:B7:81:37:9E:B9:35
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE564527F163E76FF7C9AB280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dad831f-3474-3b0c-81d7-8157d596841f.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        100.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:64:52:7f:16:3e:76:ff:7c:9a:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=92cd3576-c831-4ec8-8594-3e49bf9086e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:89:aa:40:d0:6e:2b:d9:3d:69:60:3f:52:
                    f5:f9:9d:7c:03:72:3d:8b:42:d6:06:96:ba:e6:06:
                    a0:54:44:ad:14:47:dd:94:38:e7:58:18:f5:98:82:
                    9c:02:38:1b:61:9b:5b:97:9f:02:63:5e:c2:83:66:
                    98:cf:d6:a5:c1:eb:7c:28:05:0c:4f:58:04:05:8c:
                    6f:17:4e:a4:bb:15:ab:bc:36:40:0f:1f:3e:47:b8:
                    e9:47:ca:ee:e6:76:74:c8:e5:75:23:2f:18:26:ea:
                    86:d7:b2:16:c3:bf:49:04:88:8c:4e:80:68:b6:be:
                    d0:b6:b3:b3:9d:f1:ca:61:3c:0e:b0:68:c2:dc:d6:
                    ce:d5:e2:a9:ae:a8:83:2e:fa:34:6e:47:69:8f:0d:
                    78:fa:41:39:64:03:50:3c:22:b6:db:44:27:c0:ed:
                    95:a1:8a:85:8c:00:e8:23:f6:1b:d8:49:ff:7e:37:
                    0e:d2:24:cc:31:52:41:1e:e3:e2:99:f8:00:5c:8d:
                    68:be:54:52:43:86:37:a8:95:65:81:43:3e:c0:b9:
                    5c:a0:78:d4:40:39:f3:98:cd:74:68:bb:40:c1:6e:
                    d0:91:de:61:a5:57:74:43:b5:45:60:37:dc:20:ec:
                    71:35:0f:00:f7:ed:91:b1:f3:03:d6:db:cd:0a:d8:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:37:95:51:99:79:EF:A3:8E:40:A2:AD:E2:BB:B7:81:37:9E:B9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dad831f-3474-3b0c-81d7-8157d596841f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:93:1c:f3:b7:db:ff:38:87:a5:9c:8f:88:1c:f3:fd:78:
         f7:ed:ec:61:be:bf:62:9f:d6:aa:cc:c8:40:0b:e7:64:bd:96:
         94:fc:d4:12:12:04:b1:b7:e9:27:78:2e:2e:18:47:4a:e0:a4:
         68:b3:01:44:1d:e1:e9:e2:7d:da:de:f7:c5:9e:1e:d8:50:96:
         d6:d9:05:f2:26:56:f3:bc:99:b7:e5:d4:81:e7:27:87:37:06:
         ff:cf:c2:cd:ef:ea:1a:df:67:56:ed:f5:03:7e:8c:bf:6b:63:
         7e:16:ca:cc:1c:ad:ab:f1:57:51:9c:89:cc:48:c0:a0:25:34:
         aa:2f:e8:74:b3:15:db:f2:6a:8b:5a:8c:d4:66:bb:fe:39:da:
         0d:d3:e9:2d:9a:1c:46:4c:f6:fe:1a:81:10:19:3a:83:64:8f:
         d7:89:75:f8:ca:e2:45:67:a0:54:96:d6:c2:a5:18:2d:ba:28:
         a7:45:af:92:d3:e8:b0:4a:80:66:0a:0e:8c:51:0b:09:da:66:
         9f:b5:60:77:9b:b9:2d:f3:fc:ef:ec:33:b5:34:a7:a7:31:2f:
         56:b1:f4:17:74:cf:c8:d2:ed:f9:68:95:95:ec:45:48:bb:58:
         1d:ec:a0:f0:3e:f0:4c:28:05:b8:db:68:0e:39:c1:ab:d9:91:
         24:70:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:19 2025 by rpki-client