Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0cea5dd-ab03-3a65-9d24-afb2d5495dc5.roa
File:                     a0cea5dd-ab03-3a65-9d24-afb2d5495dc5.roa (raw, json)
Hash identifier:          qRqXoiLL00+pVTJgLJYwkvEY86yC1PfpFHNQsv/lGIs=
Subject key identifier:   50:8E:EA:3F:A1:BE:E7:6B:88:5A:0A:B5:9E:84:88:13:32:67:6A:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA848090CCEDF27D544E89A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0cea5dd-ab03-3a65-9d24-afb2d5495dc5.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a8:48:09:0c:ce:df:27:d5:44:e8:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=71fc301c-75a2-401c-ad2d-9714307c51e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:d2:64:53:a8:75:b1:b3:63:26:e6:b7:02:
                    af:ba:36:3f:7c:e1:b1:8f:3f:dd:ab:61:70:54:84:
                    14:a5:ef:aa:6b:1a:d9:42:56:c3:0c:44:02:b5:0c:
                    7c:ca:15:ce:87:f6:4a:91:90:cf:5c:23:33:bc:36:
                    d9:0d:ab:37:48:e9:ad:0a:e0:45:c3:33:ed:c9:04:
                    33:a8:7b:17:7b:a7:8c:87:f2:0b:2b:d9:bf:7e:6a:
                    16:f2:d9:e4:43:84:c5:7a:f0:33:ac:48:f8:10:c8:
                    3f:5e:cb:4b:b3:80:06:59:13:b5:2e:e0:12:c8:ef:
                    bb:4c:b3:45:d1:d4:cd:57:e1:7b:f3:59:dc:7b:d7:
                    93:52:ca:f6:49:7e:b2:1c:03:dd:60:48:65:22:35:
                    df:90:4e:82:39:d2:f6:a9:d6:bf:bb:88:02:11:40:
                    0e:b0:a8:2d:1b:c4:5e:66:8e:ac:6c:5c:ab:2c:46:
                    91:38:94:d6:52:54:47:9a:65:fc:42:50:2e:53:02:
                    b3:ec:1d:41:a5:24:d8:a8:4d:07:de:fe:8d:b3:86:
                    31:bb:d4:be:67:47:c2:a5:2b:ba:f5:5f:4c:09:50:
                    7c:28:b8:05:6f:d3:42:92:28:dc:75:d4:f7:b6:c1:
                    b3:8c:dd:6a:c7:54:52:74:c1:3e:22:9b:e5:dc:f2:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:EA:3F:A1:BE:E7:6B:88:5A:0A:B5:9E:84:88:13:32:67:6A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0cea5dd-ab03-3a65-9d24-afb2d5495dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:28:07:33:8a:96:17:fe:c6:8a:b9:31:f2:46:94:f2:5e:17:
         89:47:43:c1:98:cd:77:8b:e3:dc:e1:83:53:3f:b9:7c:5f:ce:
         7c:f2:d8:a2:53:fe:2b:55:38:d8:18:f0:a4:51:68:fe:72:5f:
         37:7b:2a:98:b1:fa:f8:d9:36:ff:91:2b:80:42:43:6a:23:b5:
         e0:8c:ed:f3:78:0e:48:94:11:30:a3:80:da:c8:50:15:e8:13:
         d0:3f:5d:f2:e2:90:b2:2e:7d:85:33:61:d6:a7:e8:d0:d4:e3:
         6d:d0:e7:18:6f:01:52:e4:9f:6f:14:07:aa:77:d0:50:0e:6a:
         95:ba:d6:8b:2b:ce:b2:03:3c:01:2f:a2:3b:5e:eb:83:6f:11:
         cc:cd:b7:63:cb:96:7c:79:f7:ed:81:8b:67:9d:b5:a2:9f:7e:
         8e:2f:b5:2e:77:36:07:4d:17:4c:13:5a:a7:61:69:fb:a5:f0:
         30:da:5d:38:68:bf:37:eb:5e:7f:d3:b3:ce:6a:92:7a:d1:cc:
         51:67:7d:7d:fb:dd:2f:0b:47:5f:ca:4c:ae:44:f7:be:cb:f4:
         82:42:11:17:c7:17:00:67:8e:e7:30:f0:90:ab:f8:42:59:fb:
         77:82:e9:ae:4a:f7:c1:a0:ae:51:b0:94:76:2b:e7:fc:fd:85:
         f8:d1:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:12:09 2025 by rpki-client