Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab4dac1c-f58a-3b8a-87df-a9723087224a.roa
File:                     ab4dac1c-f58a-3b8a-87df-a9723087224a.roa (raw, json)
Hash identifier:          XMRuy5oOWPuOG4V+BXbUuHiWwQ8Rj4kSVc1lvnomGUY=
Subject key identifier:   48:03:84:49:4C:6B:FA:6F:12:65:76:42:3A:14:E0:E0:3E:E3:C7:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9534F5DCE2DD8363BE9D3900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab4dac1c-f58a-3b8a-87df-a9723087224a.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.144.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:34:f5:dc:e2:dd:83:63:be:9d:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=0c94104c-4c14-4be8-9d9e-8e5b65c1fb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:d5:3e:82:55:fb:fd:59:cd:9e:5b:82:88:
                    b2:9c:1d:29:fd:03:31:e4:2b:6f:cc:d7:95:dd:6f:
                    73:86:82:73:ed:4e:f4:46:91:4c:75:27:ca:98:57:
                    02:05:11:57:89:60:e6:39:20:28:89:ea:de:4c:ed:
                    82:98:6d:89:10:05:43:d4:df:3b:f2:25:03:04:bb:
                    bd:b1:b9:66:7b:3b:ac:99:cb:fa:ce:48:29:2a:e5:
                    d4:45:eb:80:a5:f7:f6:1d:92:00:9e:ba:f0:7e:96:
                    f6:67:e1:14:32:5f:89:45:d0:c3:f6:87:5e:e2:43:
                    66:fa:c1:b1:3a:df:58:60:9d:c6:70:d6:88:57:12:
                    d8:c5:d8:d7:cb:a6:f4:1a:19:56:d0:9a:d2:10:21:
                    99:da:94:f7:19:6e:bf:66:bc:13:2f:5a:07:66:8c:
                    a8:15:d1:c1:75:1d:c2:8c:85:d9:fb:98:ac:09:6c:
                    79:2d:d3:6c:b8:fa:bb:b4:55:ad:03:7c:77:bf:d6:
                    5b:90:1a:ab:5a:b7:d9:ea:85:6c:63:4b:c7:ce:b3:
                    44:72:53:a4:25:ca:82:9e:97:ac:a1:28:0c:f5:5c:
                    7f:7c:c9:cb:a8:9c:eb:37:06:5b:a9:2f:ad:04:72:
                    6b:15:5e:73:3c:43:d9:18:eb:45:dd:ed:93:a1:99:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:84:49:4C:6B:FA:6F:12:65:76:42:3A:14:E0:E0:3E:E3:C7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab4dac1c-f58a-3b8a-87df-a9723087224a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:62:23:f7:63:24:cc:98:31:c6:09:fa:2a:09:0f:a9:ff:
         61:3d:7d:fd:b5:ad:3b:92:ed:27:86:0b:fc:0b:6a:0c:85:4a:
         80:cc:fd:00:1c:a1:c2:25:09:4c:6d:d3:41:32:e4:69:b9:00:
         72:31:e5:b6:14:e6:4b:4e:d3:5f:c9:60:b5:b4:17:57:cf:6c:
         0a:70:a9:02:ac:e6:a9:f7:56:0b:ab:1e:ca:f8:2a:32:4e:35:
         31:be:0b:0c:63:38:96:30:35:6f:29:f0:55:06:12:55:d5:1f:
         e6:a3:cf:9f:12:4d:c1:7b:a0:25:18:54:47:48:76:1d:84:0a:
         fc:c0:d5:9b:23:5c:df:65:b3:b3:49:27:d7:37:44:26:51:44:
         50:35:1c:cb:e6:49:e6:39:a5:49:d5:fd:b1:e0:e8:0e:e3:fd:
         cb:0f:b7:7d:53:f6:28:46:9f:14:4a:53:0e:c8:16:27:d5:77:
         59:6a:88:83:19:f3:b8:b9:ac:6d:cc:b6:95:d4:1d:f9:40:03:
         28:c8:79:20:1b:17:36:2b:8c:e9:0e:d2:6e:00:9d:0e:49:10:
         62:94:87:95:56:e7:6b:3b:76:ea:b2:2e:e4:37:8a:3a:84:f4:
         88:43:27:87:03:8e:24:82:c0:d4:6c:c8:17:77:1e:6e:02:a9:
         e7:a8:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:48 2025 by rpki-client