Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce3d9d1d-3ec8-31f2-9aa9-6da80492098b.roa
File:                     ce3d9d1d-3ec8-31f2-9aa9-6da80492098b.roa (raw, json)
Hash identifier:          nourgzXCLomJrg7DaD7/uOwT4a1xo8INATIYrFNqaHU=
Subject key identifier:   65:90:F7:1B:40:9C:15:24:D4:6A:9E:1C:DC:9D:47:CB:CD:B7:AF:92
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D331FCC51ED54E8DCFFD08F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce3d9d1d-3ec8-31f2-9aa9-6da80492098b.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:1f:cc:51:ed:54:e8:dc:ff:d0:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=c60b8fad-8175-46fe-8b00-46ae484533bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:77:36:e4:4d:c1:65:3d:64:66:a1:5c:9f:
                    85:53:8b:09:0e:5a:05:2a:ac:be:46:af:25:d3:b8:
                    61:d0:4d:68:30:d0:1d:8c:e2:b7:23:b7:89:2e:93:
                    d3:b2:4f:ed:09:e7:07:c8:4b:fb:3b:e0:77:cc:5d:
                    c6:d0:4f:0b:ac:f9:e1:fa:f7:10:fc:cf:29:2d:45:
                    61:42:d5:0a:f5:64:db:86:11:68:5f:ea:32:d1:b7:
                    97:eb:2d:86:0c:8f:62:01:6b:9f:ef:6d:ff:fc:f6:
                    fd:60:51:80:8c:0c:4f:50:fa:ad:01:67:73:76:b0:
                    f8:34:a2:82:ce:73:79:db:f3:6f:9a:86:f7:32:ec:
                    53:71:d4:94:9a:d6:9e:bc:37:29:48:eb:e7:b6:96:
                    60:53:ff:0b:2a:ff:d1:8e:bd:86:2d:fd:94:56:fe:
                    94:f4:0e:fc:4e:47:04:c3:c7:1c:b0:39:20:c9:a1:
                    22:a0:86:4e:f1:ea:16:60:f2:d4:f7:53:44:6f:4a:
                    96:1e:a3:64:27:84:fe:84:ae:14:b8:6b:fe:c4:7a:
                    df:03:85:aa:01:33:91:bf:76:06:d0:93:01:b3:d3:
                    bc:fb:d5:b2:0b:c7:f9:0a:b1:34:1c:44:54:10:5b:
                    94:75:be:f9:fb:08:44:17:a5:70:85:94:eb:2c:a9:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:90:F7:1B:40:9C:15:24:D4:6A:9E:1C:DC:9D:47:CB:CD:B7:AF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce3d9d1d-3ec8-31f2-9aa9-6da80492098b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:25:2d:14:c1:41:07:4a:80:5f:46:19:d9:a8:12:80:cf:
         ee:0d:ca:5f:8c:e1:fe:bf:da:33:d7:6f:28:77:33:54:60:6d:
         83:93:21:2b:5d:f0:ec:85:50:2c:36:4a:64:be:82:48:04:6d:
         bc:cb:0d:5f:bd:14:7a:cd:bd:e4:b1:9b:ed:ce:39:fa:67:51:
         c1:d0:8f:68:ec:ec:95:51:1b:27:2a:fe:c3:d5:2c:a0:7d:0b:
         88:1d:60:45:76:be:45:31:e9:6b:85:d1:f6:54:5d:24:84:0e:
         11:4e:85:58:0b:66:86:80:0d:b2:5c:1a:b6:9f:55:00:a4:e9:
         69:86:f8:e8:31:c9:7b:09:a3:9c:ef:46:a1:f9:0a:f3:d0:33:
         39:a2:e0:c7:73:58:c0:1b:9e:7d:0c:c7:f1:67:16:99:e8:41:
         17:6c:c3:a2:9a:a3:d2:ec:1a:38:b3:98:a6:b1:29:f9:28:04:
         f2:56:bc:2d:62:a2:de:16:fa:73:45:0c:a7:a4:80:52:01:1c:
         e9:af:48:ef:c1:25:57:8c:ac:57:c1:18:a3:10:f5:5b:0e:0b:
         36:ba:98:b8:dc:48:ad:49:f6:c6:be:34:8d:8d:6a:70:c6:22:
         f9:0e:4f:ce:dd:d1:5d:4e:ac:bf:89:76:97:7b:e6:9c:5b:36:
         89:14:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:58:01 2025 by rpki-client