Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80a78e6-9702-3260-8242-08363255e483.roa
File:                     a80a78e6-9702-3260-8242-08363255e483.roa (raw, json)
Hash identifier:          wPwX5CHI7vlMRcHUry5OsU4Wv4O5nUsyrK4NzS3HpAk=
Subject key identifier:   6C:77:B5:6B:24:38:6B:DB:BF:D7:A9:14:39:F1:B8:ED:4F:67:4F:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1DC61FFC121F1CCFEBD9D290
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80a78e6-9702-3260-8242-08363255e483.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        98.80.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1d:c6:1f:fc:12:1f:1c:cf:eb:d9:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=a0cd1881-1f18-41d5-8d21-d9fc00f35089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:3d:ec:70:08:d4:05:25:f7:c0:53:e7:a8:
                    cd:a0:a0:e4:78:66:15:8e:82:4a:77:a6:b7:c3:65:
                    f2:00:25:0a:85:0f:f0:83:67:a0:48:d2:36:b0:1b:
                    77:75:6f:1d:17:f0:af:7a:ff:5f:68:2f:37:ec:3f:
                    53:f8:59:0e:91:23:83:86:84:f8:d9:5b:97:47:f2:
                    5f:d3:c6:25:0a:7c:2d:c5:87:d3:49:e8:70:f3:67:
                    43:32:9b:6f:ea:70:af:f0:b6:fc:1d:08:cd:4b:0e:
                    ae:49:f8:ff:ab:c7:8a:ad:d9:f7:f4:64:a3:54:8e:
                    c6:1f:49:be:46:1b:6c:fe:cc:32:30:36:7e:08:ea:
                    9b:63:72:6c:e5:63:14:40:32:cc:bb:3a:9b:a6:ef:
                    e2:8b:4a:a7:e4:35:56:d8:88:a8:1e:aa:b1:ac:63:
                    7a:58:ed:4c:75:23:16:a0:9a:bb:2c:8f:bc:fb:d5:
                    45:53:8b:8b:df:c5:f4:b5:cc:d0:9f:58:26:d0:88:
                    49:b4:9a:10:e9:50:f5:1b:8d:9c:50:4b:2f:24:ca:
                    c3:4a:63:b4:66:5c:d9:d9:84:38:c2:72:b2:1f:73:
                    9b:11:c0:fe:af:6a:d5:cd:ef:30:01:5a:60:fe:94:
                    d3:0e:9b:3a:0e:dc:c7:2f:20:99:3d:22:2c:e3:9e:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:B5:6B:24:38:6B:DB:BF:D7:A9:14:39:F1:B8:ED:4F:67:4F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a80a78e6-9702-3260-8242-08363255e483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:02:83:67:eb:b3:44:6e:d0:c3:83:73:c8:07:9e:f2:4a:26:
         05:b0:9b:32:0a:b7:79:c5:03:e9:42:d3:b6:c0:97:63:57:b4:
         9c:60:cf:de:70:d3:e0:ba:44:5a:35:42:df:e3:11:bb:3f:bb:
         07:54:ef:30:cc:53:02:86:a2:d2:87:b8:b2:5c:2a:b1:c0:28:
         32:98:ec:18:4c:e4:6f:9a:51:b8:df:5e:83:82:8e:5d:78:64:
         89:c3:e6:02:13:4f:80:22:61:f3:e5:ca:39:f4:2a:ff:27:f1:
         f2:97:88:ac:e0:ea:d9:38:01:e3:ef:35:22:dd:96:53:ce:61:
         ee:62:cc:f1:cd:ec:4f:92:c6:e4:99:4e:c5:ca:18:be:a1:80:
         61:28:cb:a7:5a:9f:50:06:38:ae:7a:31:84:53:99:83:47:d4:
         5b:36:59:30:d1:2e:03:d9:53:5a:09:b3:c5:c2:50:53:4d:9a:
         5a:20:67:61:fc:7c:4b:3e:49:ab:55:cc:cf:99:05:e4:39:e3:
         0c:a0:b2:df:6e:55:7d:78:12:8e:00:87:19:e9:cc:28:81:22:
         73:d7:e5:25:d9:0f:21:c2:09:99:4a:04:a2:ca:44:72:65:71:
         99:bd:35:13:49:11:e9:a9:28:9b:58:4c:6e:6b:1f:3f:62:35:
         83:47:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:08 2025 by rpki-client