Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb68955-8fad-3e5e-90c5-b8cb89f5cbd5.roa
File:                     bdb68955-8fad-3e5e-90c5-b8cb89f5cbd5.roa (raw, json)
Hash identifier:          3cpsJXNrjn9IU6j6j5zfRUgSJenrP8t43Se/V1pl77Q=
Subject key identifier:   1A:75:45:DF:CC:8B:D5:1A:2B:A8:18:1C:8F:5A:7F:41:BD:81:C9:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAA95F674DFB5C8494C439F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb68955-8fad-3e5e-90c5-b8cb89f5cbd5.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:95:f6:74:df:b5:c8:49:4c:43:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=ebdfdddf-74f7-4eed-903f-783c173436fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:58:fc:a3:27:ba:b9:88:ab:26:38:60:24:
                    0a:62:b3:c9:53:4b:40:84:07:2c:e7:67:93:d5:69:
                    1d:5a:3f:0b:2a:70:7a:06:50:78:ed:d5:80:f4:87:
                    1d:2f:bb:d7:51:5c:29:38:b9:6b:a1:be:62:71:99:
                    96:a2:25:d6:22:f5:b5:e6:a2:32:fb:12:62:df:01:
                    d0:68:17:f1:aa:a4:de:20:d3:23:cb:10:90:b6:6d:
                    54:4a:74:d7:8c:39:c1:bd:42:58:13:e1:e8:f3:1e:
                    d8:c4:0a:5d:e4:e9:90:c5:d7:2c:93:69:d7:4f:f4:
                    47:3d:ca:a9:72:9e:fb:68:76:47:a8:55:c8:58:6e:
                    96:63:54:ae:06:7c:b1:04:b0:dc:a5:7d:c9:dd:47:
                    93:a4:ab:fd:5e:87:cc:4f:8c:0e:6e:63:e9:63:d8:
                    26:26:1f:23:5b:a1:69:54:80:9d:5f:86:06:01:f4:
                    3d:d7:f9:6b:bb:b2:de:c0:f8:22:13:a3:4f:06:dc:
                    ae:e5:2b:bb:16:58:92:fb:3f:9e:ad:c5:6d:72:4d:
                    96:dd:09:06:d5:3d:78:e6:0c:0e:e2:27:a9:71:d1:
                    6a:74:b0:3b:8f:a6:79:18:f6:6e:fa:c2:b9:d8:fb:
                    0c:2d:57:4c:ee:39:ea:a0:0a:6b:c4:62:8a:82:d1:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:75:45:DF:CC:8B:D5:1A:2B:A8:18:1C:8F:5A:7F:41:BD:81:C9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bdb68955-8fad-3e5e-90c5-b8cb89f5cbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:71:83:a0:13:a6:75:d5:17:5d:8e:50:0b:d3:b1:94:73:8f:
         f0:2e:c6:cf:d0:0d:2c:70:e4:28:3f:18:4e:ec:c7:08:2a:4a:
         b4:a0:1f:39:28:a6:7a:d4:d4:ae:6a:0e:b3:b6:6d:55:ab:9b:
         d1:58:90:63:14:43:73:72:80:a6:df:f4:ed:3c:06:fa:f2:15:
         aa:76:81:19:da:df:3c:34:4e:59:be:ff:cc:d8:4d:a4:3f:f8:
         56:d1:96:8a:03:26:43:3a:2d:e5:18:35:3c:43:8d:5b:e9:78:
         83:19:8f:26:71:78:26:0d:f0:b8:08:8f:aa:f7:65:3c:2d:71:
         cb:1f:0f:29:b7:9d:f9:3f:42:0b:f2:82:9d:ae:ea:a5:12:61:
         2b:9e:23:8e:63:31:80:c4:d4:c3:f5:31:18:8c:1c:1b:fc:f2:
         5a:c7:ae:af:dc:51:21:58:41:74:25:e9:c5:e7:1a:bf:22:45:
         87:02:b1:ee:47:3d:40:35:44:e1:54:43:48:85:9d:7d:aa:a6:
         84:4a:43:be:b5:5f:9d:ac:42:8b:a1:5b:c3:42:79:f9:3b:ac:
         cc:06:48:fb:c3:26:0d:06:6e:04:13:f0:35:5d:02:60:8c:a8:
         67:dc:81:b8:b0:20:2b:92:a1:2a:e2:24:43:b2:56:af:78:a8:
         e6:1a:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:56 2025 by rpki-client