Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f925c5a-04e1-37a4-90e0-bf9d02e42fb0.roa
File:                     9f925c5a-04e1-37a4-90e0-bf9d02e42fb0.roa (raw, json)
Hash identifier:          DTCwnHOhH/cOJr55GIr3necHPaY7xuSRrTvVnAdG1Gs=
Subject key identifier:   AE:B8:CF:E1:DD:A7:0B:A6:31:9D:AC:5B:A4:AD:3E:F9:33:A8:55:28
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F59A5A0EF458DDA7A0D332580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f925c5a-04e1-37a4-90e0-bf9d02e42fb0.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:a5:a0:ef:45:8d:da:7a:0d:33:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=ae715fb1-8212-4bbc-847c-32577bbe43ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:1e:ce:aa:c6:ad:d4:f4:66:93:fd:91:17:
                    ee:cd:3a:15:a7:3a:c7:d3:da:08:7c:f5:e9:b8:64:
                    cd:96:85:3b:0e:99:80:a5:3b:c7:89:62:5e:a0:a4:
                    0f:e7:3c:eb:92:82:e0:e0:38:38:62:a8:11:cc:09:
                    e0:30:83:1e:3d:f1:76:14:ec:16:f4:58:b9:85:64:
                    41:9e:9f:2b:87:c6:04:21:4b:06:f0:42:35:4c:a6:
                    fe:09:c1:68:73:a6:d8:ac:b7:07:f9:9c:ef:58:18:
                    bc:78:39:fd:57:86:85:08:98:e0:25:17:49:03:f8:
                    59:d4:60:7a:91:f5:ff:0d:21:ae:99:5c:a3:4b:66:
                    88:a9:b2:eb:96:bb:31:6d:86:9b:4a:fd:c2:25:e5:
                    2a:4c:85:b8:f5:f0:a5:12:3a:b4:e3:b3:5a:eb:ea:
                    4f:b6:df:3a:41:df:20:79:1e:53:1c:de:fb:57:c2:
                    de:bb:8c:96:96:22:b2:48:bd:70:d6:04:00:d8:c4:
                    02:6c:2f:fa:62:88:b7:7d:71:67:16:e6:05:da:e1:
                    9f:1b:e3:1a:af:49:da:e4:c1:b7:1c:d0:69:a6:5d:
                    1c:2f:e1:bc:e4:2e:b0:71:84:94:4f:a4:3c:40:11:
                    39:63:1e:c4:3e:0d:27:fc:7e:c9:a7:96:dc:52:35:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B8:CF:E1:DD:A7:0B:A6:31:9D:AC:5B:A4:AD:3E:F9:33:A8:55:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f925c5a-04e1-37a4-90e0-bf9d02e42fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:8d:e7:22:e9:6b:73:86:68:19:7a:3a:ce:5e:a1:49:da:
         04:f8:12:63:e0:b4:93:dd:92:4d:db:e2:a2:79:2c:aa:27:2f:
         92:87:a3:c0:5a:09:49:da:ab:14:0d:74:56:fd:de:32:2c:b9:
         bb:e3:e6:07:cb:9a:df:ef:bc:db:85:eb:c7:ce:96:4d:97:66:
         d6:2e:a6:a2:62:96:da:ce:11:2f:e0:0a:f1:23:30:df:49:eb:
         ae:bd:e0:90:a2:aa:c7:c8:6c:79:98:87:da:2f:4e:e4:ad:0c:
         e3:c4:80:55:3f:93:6a:4b:23:d8:17:16:f0:c4:c2:a5:b5:cb:
         6e:a8:28:94:39:6f:8e:58:ab:fb:bc:f8:be:1e:4a:b9:42:a0:
         94:22:35:33:11:be:21:00:e7:60:a4:a6:99:99:e9:0c:3f:73:
         dc:a1:ef:4f:57:01:42:5d:61:ec:ce:22:49:e6:2b:8b:fe:a3:
         bb:b1:ad:54:f4:f7:c9:fe:ed:0f:78:7f:fc:a3:8f:84:19:52:
         c5:45:2f:b3:c9:41:2b:a0:75:ab:a3:8a:06:c0:6c:aa:a5:59:
         50:c7:04:e9:45:ac:0d:19:04:ea:7f:90:b2:bc:0d:51:73:5f:
         b3:b0:1d:04:21:a4:1d:75:90:76:b0:2f:4b:58:a6:86:b1:35:
         03:c4:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:20 2025 by rpki-client