Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc9578f7-7b4b-3c4d-ae4d-b1766ef688d1.roa
File:                     cc9578f7-7b4b-3c4d-ae4d-b1766ef688d1.roa (raw, json)
Hash identifier:          zKnZ9Z9J9WL3pJXrvOSYciMvFgSCpS1L3wRJpZ58wEA=
Subject key identifier:   F2:4E:ED:7C:F4:9D:F6:32:E8:D8:EC:9F:B4:CE:32:F2:4A:62:DD:40
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE537B882E12ACE8591C32C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc9578f7-7b4b-3c4d-ae4d-b1766ef688d1.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.189.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:37:b8:82:e1:2a:ce:85:91:c3:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=c7fab82e-f51e-4729-9959-06077ff0792c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:03:fd:72:2f:8b:a9:46:b6:f5:e4:22:92:
                    c6:8e:10:82:17:cb:bf:dc:88:37:3a:aa:86:b2:b6:
                    a2:c9:61:57:00:5d:64:6d:a5:61:bf:f6:1d:b3:cb:
                    09:22:6e:51:4f:01:98:79:25:d9:ca:57:30:90:f5:
                    01:4f:57:c8:af:0c:a6:fb:f3:ff:7a:0e:1f:6b:b4:
                    a3:8f:d4:fb:60:d0:c8:69:54:bb:e4:ba:f2:84:24:
                    2c:58:f7:71:d5:45:39:00:e5:ed:53:2c:fb:52:a4:
                    e5:62:fd:cd:bb:0d:81:62:f2:1a:e2:18:08:35:f2:
                    ac:c6:94:ca:cd:5e:ad:19:58:bd:b1:ed:4e:e8:aa:
                    f7:aa:34:2f:0a:b9:d7:8b:2f:25:84:d1:3e:d2:50:
                    ef:e3:3a:5c:dd:d6:0e:7b:d4:67:ec:72:dd:ce:73:
                    14:eb:d5:58:16:f2:59:66:3f:94:ef:d4:7f:bf:e3:
                    7b:4c:b7:5a:46:05:ef:4b:3d:9c:8b:f9:f7:04:ec:
                    5f:34:50:9d:d1:c8:00:3e:47:30:76:4c:b8:51:13:
                    d5:a7:22:95:f0:83:76:65:39:df:33:e2:2b:6c:9e:
                    97:41:d2:c7:4c:52:71:19:a9:09:82:2d:a6:1a:89:
                    e7:77:99:e9:db:a1:53:b9:88:4f:a2:f7:41:1f:2b:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4E:ED:7C:F4:9D:F6:32:E8:D8:EC:9F:B4:CE:32:F2:4A:62:DD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc9578f7-7b4b-3c4d-ae4d-b1766ef688d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:8a:47:55:4b:bf:64:67:43:24:a0:aa:81:68:29:a0:fa:
         3e:d1:74:5a:98:f8:18:f5:45:b6:bd:77:0a:aa:85:de:a1:c0:
         33:7b:dd:b1:2c:de:79:49:32:11:9d:ef:b1:d7:20:8f:2f:05:
         b5:b8:fd:69:19:eb:74:1e:f4:aa:03:dd:84:18:25:4b:78:16:
         09:ff:e5:9a:17:32:b3:95:bf:58:a9:c1:d9:bb:f4:54:b7:6d:
         84:88:f6:c3:de:4d:bb:ea:73:24:84:3e:b6:97:b9:c5:ee:96:
         2a:0e:75:25:35:8a:fa:37:8c:e5:74:b7:5a:60:62:02:7e:c6:
         55:bb:9d:ee:7f:82:c8:cf:1b:b4:00:db:8c:a7:88:c0:ac:67:
         47:a1:8f:c6:ea:49:68:49:57:7b:e3:8f:f1:91:6d:80:7d:32:
         6e:25:48:2b:5c:07:a5:04:1a:62:db:69:9d:c0:f0:0c:c6:82:
         3b:ce:97:77:80:8d:7c:aa:55:3d:19:01:17:63:ea:51:25:97:
         1e:a6:2a:36:c4:b3:38:b8:bf:3d:3f:e5:9a:85:c9:a2:52:ac:
         ed:91:30:f8:44:07:35:8c:72:1c:ec:41:c8:4f:21:33:50:c7:
         98:34:c5:38:05:52:8f:95:45:52:a2:39:3d:83:76:c6:ca:0a:
         64:0a:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:45 2025 by rpki-client