Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3d2283-a2fb-3beb-9d49-3e252962b58b.roa
File:                     ba3d2283-a2fb-3beb-9d49-3e252962b58b.roa (raw, json)
Hash identifier:          vGaXICUlAugLYrEw4RTH2txc22M8yZX8yW2id+UKcH0=
Subject key identifier:   4F:EC:D8:66:61:3D:DE:0E:46:C3:AA:47:95:2C:C0:7A:C3:9B:26:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDCFE2ADA8E173B10EE1D880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3d2283-a2fb-3beb-9d49-3e252962b58b.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.105.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:cf:e2:ad:a8:e1:73:b1:0e:e1:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=055f1a28-bb4f-459d-b0a7-be2072141b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:d3:a1:b4:8a:7a:1c:0c:b9:d3:4c:30:d5:
                    91:33:04:07:9b:e8:20:66:df:4a:0e:3c:af:86:20:
                    ba:58:9a:af:b2:d4:d8:08:df:eb:c1:28:e9:f4:c4:
                    c1:14:f9:12:94:69:91:39:cb:91:29:fe:a8:28:e1:
                    31:3e:5d:49:7c:cf:ab:a5:7f:c3:6f:70:81:76:7c:
                    02:c1:ab:81:3c:0f:7c:db:c9:c1:9a:b7:9d:06:3b:
                    ee:4e:c2:2c:30:20:6d:7e:5a:3d:54:30:a9:45:04:
                    2f:e7:53:49:cb:4a:69:d6:39:38:62:cb:3f:34:ab:
                    61:2b:7f:95:f5:97:3d:b1:dd:52:82:19:fd:20:7f:
                    25:5b:6a:4f:f2:5e:18:1a:dc:f5:2c:2e:6b:b6:2d:
                    0d:d4:5c:26:32:5d:e8:03:35:80:e1:ed:95:69:3e:
                    e9:d9:84:62:3f:44:00:06:78:e6:66:ca:47:cd:21:
                    90:a7:89:81:3f:9a:8d:90:8a:4f:d5:0e:20:3a:2d:
                    ec:34:03:68:04:70:a9:c7:14:8c:fd:c5:55:54:3c:
                    03:39:ee:e8:5a:5c:c6:02:33:cb:46:58:55:08:db:
                    9a:48:14:36:7a:db:27:9b:0c:16:30:78:09:93:51:
                    22:18:01:81:cb:df:90:48:3f:2c:6f:d3:a3:86:aa:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EC:D8:66:61:3D:DE:0E:46:C3:AA:47:95:2C:C0:7A:C3:9B:26:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba3d2283-a2fb-3beb-9d49-3e252962b58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.105.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:09:98:7e:15:c1:c5:9f:b6:09:d3:73:e6:14:a7:6b:5f:94:
         58:46:70:e7:7d:43:cc:64:e0:4b:8a:f8:b6:0c:0a:36:53:aa:
         63:ea:f1:88:0d:e6:26:93:c5:ee:b6:77:68:e7:88:bb:ab:97:
         5c:01:ab:17:fe:b1:e7:ae:86:f0:6a:fc:4b:c3:7f:35:ed:f4:
         1e:91:ec:a4:d5:65:f0:5a:4a:81:c7:1e:be:cc:60:b7:de:7d:
         25:48:08:8a:4f:0a:84:5b:a3:e4:95:54:0f:98:49:7e:2a:26:
         d2:ed:5f:50:2d:e9:96:72:ea:de:88:77:ff:8c:d6:f0:2b:56:
         61:f1:99:8a:2a:42:83:23:a0:2b:24:6e:9a:04:d2:68:45:e4:
         66:60:8c:25:49:a9:ee:5d:bc:91:24:c1:5e:25:09:78:d4:47:
         11:34:47:0d:5d:74:88:04:c2:c0:62:9f:d8:61:af:dc:52:f1:
         b9:26:df:87:c1:08:24:6c:14:13:88:38:68:31:b1:e5:e4:84:
         9a:92:45:34:ee:48:da:24:1e:27:d3:27:2c:c5:94:40:55:b7:
         a7:75:90:49:75:de:d0:b9:fd:e0:8c:13:5e:1d:90:26:67:a1:
         53:50:c8:53:b2:91:3c:a5:f2:20:c6:a4:d3:c6:c4:85:72:20:
         c6:f4:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:15:39 2025 by rpki-client