Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9938807-dd1e-38ed-8919-961c8f655222.roa
File:                     d9938807-dd1e-38ed-8919-961c8f655222.roa (raw, json)
Hash identifier:          p01H6LhU3+QKazvo9Ha1LP59LkGrd0Qx5AnpRuTYbaY=
Subject key identifier:   A4:10:FA:F9:18:DA:85:F5:27:D8:39:1C:DF:0C:53:6C:34:A4:8B:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1FFBA8EA9C0D89F3101D1240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9938807-dd1e-38ed-8919-961c8f655222.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.85.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:fb:a8:ea:9c:0d:89:f3:10:1d:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=fdb6f658-b14f-49ec-bc6b-b0b388d5f7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:fb:da:f3:7e:48:c6:fe:b9:0b:b1:7b:2d:
                    78:87:e1:d5:84:52:55:53:19:3f:64:c1:be:5e:c5:
                    a5:17:51:7f:b0:73:7e:f9:c1:e6:1e:54:ed:fb:0b:
                    35:81:f8:5c:3b:2d:3a:84:e9:2f:62:b8:81:42:34:
                    42:c1:6e:b3:eb:9e:94:33:fa:82:18:92:49:fd:83:
                    c2:c5:2e:cd:c1:73:05:3a:d8:a5:37:f9:9d:85:ba:
                    6c:8b:64:05:b3:80:74:05:d8:87:01:75:1a:7c:2e:
                    f8:1e:3e:a7:cb:99:14:b0:df:1b:f9:57:f7:b0:61:
                    20:f3:a1:81:5b:f1:f0:8f:3c:72:32:e6:29:6d:4e:
                    15:de:f9:be:d3:27:9e:86:3a:24:42:e9:02:0a:69:
                    66:a6:47:e7:8a:70:a5:33:3f:5c:aa:e0:5c:79:e0:
                    bf:68:1f:2a:66:37:41:f3:84:12:87:8b:3e:03:84:
                    9e:46:0e:4d:63:29:f2:15:39:29:84:8e:f5:0f:37:
                    58:09:60:c8:6a:54:ac:3b:7d:50:67:82:80:12:e5:
                    52:01:23:b7:91:d2:e5:42:45:4b:eb:f1:49:23:5e:
                    20:1b:28:b6:8c:35:f1:5b:36:10:a8:29:03:ce:cd:
                    74:77:89:b4:3d:06:f9:ea:f0:2f:12:7a:fc:4e:86:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:FA:F9:18:DA:85:F5:27:D8:39:1C:DF:0C:53:6C:34:A4:8B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9938807-dd1e-38ed-8919-961c8f655222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:18:6d:3a:86:5b:4b:6f:df:f6:31:55:73:18:1b:e2:f0:
         51:c0:a9:b5:45:9c:1a:51:a2:38:07:59:6e:6d:e6:9e:2b:34:
         6d:50:e4:ae:cd:84:cf:71:cf:67:34:7c:fc:05:fd:bb:6c:3c:
         f9:6b:a6:dd:62:bd:6b:c3:91:4e:79:a7:28:ab:db:21:32:52:
         02:a2:d2:b8:76:a0:c3:52:9a:93:76:e1:11:0c:9d:e7:54:39:
         69:05:d0:8e:15:e1:3a:81:4b:1b:cb:b9:bb:f8:f7:31:a0:cd:
         8e:f3:74:3a:b5:9e:63:81:cd:1b:06:1d:9a:e4:51:c4:74:85:
         f5:69:00:d9:38:e1:cf:77:0e:2a:98:1f:cf:a3:fe:09:d0:16:
         e1:29:d1:af:5b:88:98:ca:2b:45:28:b6:93:9f:d8:d5:da:d4:
         b0:61:2a:1f:a9:64:cf:fa:b9:a0:05:c3:2c:8e:cc:ce:c6:3c:
         23:60:58:b8:19:07:d4:dc:55:0a:d8:5c:11:dc:41:04:ce:cc:
         04:0a:3e:12:b3:c5:1d:55:64:c9:39:9f:ee:59:54:2e:88:d8:
         18:3a:fc:1e:86:0e:06:90:0d:65:83:c4:07:ee:42:72:fb:99:
         d4:90:15:2f:be:65:ab:72:52:23:f3:a9:f1:08:ef:aa:05:ba:
         6c:65:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:47:39 2025 by rpki-client