Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1de3230-f1a9-391d-8586-62289102f989.roa
File:                     c1de3230-f1a9-391d-8586-62289102f989.roa (raw, json)
Hash identifier:          hGhU2qT6awP/pwtM0XLoXtadXbO28RcGAQS1VroTKGE=
Subject key identifier:   89:BA:F5:7E:11:94:95:E7:F4:92:C5:AC:B8:68:05:D1:19:0E:3F:9E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4702607AC6C4BCFA16EE1980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1de3230-f1a9-391d-8586-62289102f989.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:02:60:7a:c6:c4:bc:fa:16:ee:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=377549e1-8279-4971-b4c7-b576ab6915fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:94:c4:c0:04:02:fc:3e:e5:7d:11:45:60:
                    0e:d2:44:5a:8d:ed:2c:6d:0f:ff:c8:2e:7c:fe:c8:
                    14:61:f7:94:e1:4f:97:d1:c7:5d:11:9b:60:a8:3f:
                    29:76:27:ac:1b:fd:c1:a3:1b:71:e5:df:c3:2a:56:
                    ac:07:51:bf:4f:ad:8a:b7:7d:dc:63:9a:18:9e:49:
                    d9:94:dc:86:70:3e:c8:87:bd:b9:4d:e5:86:4c:31:
                    96:f9:a0:f6:01:e7:05:35:dd:df:e6:73:05:b6:a4:
                    8b:fa:95:76:b8:9d:b4:eb:d1:08:4e:5d:19:83:bf:
                    7d:2b:0a:36:8e:97:fc:53:64:fd:d6:b9:62:e8:ba:
                    c6:a9:24:46:e4:a2:b0:69:57:35:54:44:5d:b2:fa:
                    a8:af:be:81:23:fb:43:8a:cc:5c:21:40:2d:cf:1b:
                    1b:81:91:65:3e:03:55:0a:02:75:07:ce:d0:7b:1c:
                    c1:95:94:87:2e:21:9c:97:35:ea:88:46:08:21:b4:
                    75:8f:cb:fc:4a:e2:85:57:ce:91:22:b7:b9:66:2f:
                    42:11:83:08:64:bd:ae:7c:5a:7f:e2:d6:53:90:17:
                    6a:6f:49:16:98:4c:bd:d4:eb:e0:88:b2:56:8b:e9:
                    4b:6e:c1:74:04:1d:20:fa:2b:cb:a4:a5:89:9b:3e:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BA:F5:7E:11:94:95:E7:F4:92:C5:AC:B8:68:05:D1:19:0E:3F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1de3230-f1a9-391d-8586-62289102f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:90:ed:f4:fa:67:d9:0d:66:5b:72:64:35:e9:44:e2:69:
         6b:e3:60:07:5e:f1:05:04:0f:f7:2e:87:54:cb:b6:8c:7e:73:
         f0:f5:99:13:9b:03:fd:c1:76:a8:89:68:7e:f2:d2:da:57:9d:
         c9:50:7a:f8:e4:de:22:80:8f:80:0e:15:de:0d:be:8c:60:d5:
         97:9e:e8:02:01:9f:88:db:5d:1a:54:f0:0a:7f:f5:bd:44:9e:
         a7:6f:64:9c:aa:68:59:71:28:e3:3a:77:c1:88:5b:84:4a:63:
         29:bf:83:dc:22:22:0e:3d:35:a0:03:e1:b6:1a:49:11:93:31:
         d2:2a:34:69:7f:97:95:8f:45:4e:63:b5:42:25:e9:31:c0:9d:
         c7:62:46:e4:0e:cb:1c:5e:0d:ed:6f:6e:c6:a1:bd:d5:45:cd:
         21:07:a2:e9:70:fd:23:fc:7c:43:7d:5e:cf:58:c0:95:9f:f8:
         88:a8:9f:27:69:b5:d4:35:3e:0f:a9:78:83:99:ee:32:85:fb:
         ef:6f:4a:8f:33:55:49:4d:9c:26:34:dc:33:56:e2:ae:48:50:
         cb:bd:4f:5d:2c:e9:d6:d9:c1:45:53:72:b0:30:d9:b6:9b:37:
         1c:59:04:86:f4:56:10:f4:a1:6e:24:b2:ac:3a:2c:c3:da:b8:
         9c:86:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:25 2025 by rpki-client