Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df3fd968-093f-319c-9658-8b5106f2348b.roa
File:                     df3fd968-093f-319c-9658-8b5106f2348b.roa (raw, json)
Hash identifier:          tMg+viRukdpNnGLwOggur8USrmr/IfMzQRZZ3BuJWzo=
Subject key identifier:   8E:FF:45:06:FE:22:92:EA:44:AF:3B:D0:E9:4F:87:A6:3E:4B:47:50
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6E26F9773F2FECCFDDB15220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df3fd968-093f-319c-9658-8b5106f2348b.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:26:f9:77:3f:2f:ec:cf:dd:b1:52:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=bad6390e-5e1e-41af-a05b-7adc6da8fb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:d4:de:5f:ac:72:60:76:5e:c8:71:b4:cf:
                    99:21:ed:a0:11:b7:dd:22:d9:b2:89:a9:b3:93:6a:
                    00:45:09:d0:73:8d:31:68:3c:9c:e8:8b:b5:1b:22:
                    53:b7:13:e9:22:48:eb:51:54:f7:52:25:fa:82:93:
                    a8:9b:47:22:fb:e1:d0:91:07:0d:b0:95:f2:7f:49:
                    8c:6d:68:de:79:f0:b9:b6:81:e5:e0:59:fd:cc:51:
                    10:e8:89:70:bf:d6:e3:b0:af:a4:93:82:dc:23:43:
                    28:f2:13:0b:00:30:c4:62:02:46:83:7f:91:e3:51:
                    b6:2a:8c:e6:29:36:bd:8d:33:1b:ea:28:c6:e0:da:
                    29:d7:19:25:81:c1:bb:c8:c1:9b:5f:03:b3:6c:74:
                    1a:17:3b:c4:e6:ff:03:24:9e:ec:9e:58:c6:93:c0:
                    a1:1a:65:3f:46:ce:d2:08:a3:88:af:49:d4:8e:f5:
                    54:54:c2:ef:0a:11:8e:bb:98:63:68:75:7f:e7:e6:
                    b2:cf:a7:88:ff:33:99:f0:b1:95:13:df:2f:e9:b7:
                    a6:fd:97:7c:77:ad:e7:41:d0:8c:60:ee:34:5a:13:
                    d1:98:9b:c2:a8:9f:a7:7a:26:57:04:5f:ff:76:27:
                    6c:fa:38:c4:50:b1:8f:32:c8:52:fe:1a:c5:19:89:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FF:45:06:FE:22:92:EA:44:AF:3B:D0:E9:4F:87:A6:3E:4B:47:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df3fd968-093f-319c-9658-8b5106f2348b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:0d:e8:11:03:21:ab:28:43:da:2a:9d:ea:78:eb:ed:7a:
         ed:7f:78:e2:61:ce:7e:8f:82:8d:88:f1:1c:3b:96:fe:f1:5c:
         76:45:22:07:29:69:54:b5:b2:28:e5:54:64:1b:9d:1a:9c:0d:
         d2:fc:56:da:9b:3c:de:1d:93:f9:b7:04:34:ac:1b:59:09:4a:
         4a:fc:ac:94:63:f5:4b:b6:35:88:dc:58:cf:9b:56:c3:32:06:
         8e:8f:41:98:7d:d7:cd:2c:86:93:21:87:cc:e1:7d:1c:2c:2f:
         36:c9:df:a8:66:fe:c8:1c:24:d6:c9:c0:5a:58:89:84:d6:82:
         6c:62:d5:07:9a:5f:4e:86:a8:f4:4a:90:24:f7:bb:70:18:ac:
         7e:63:4d:04:e2:86:42:bd:f9:ef:3c:a6:97:8e:b9:2a:c6:c6:
         f3:f0:df:64:b8:20:48:ae:f5:9a:e8:a2:a3:f9:a6:48:3f:d8:
         01:19:17:80:7e:8e:17:75:f4:52:ee:94:8b:d5:13:16:54:ec:
         72:50:ae:73:1d:6e:26:ab:4d:e7:1a:22:29:c3:a5:7c:e0:3d:
         ee:0d:fe:a6:a8:04:cb:67:68:18:42:10:ee:d3:2c:56:ac:e9:
         1c:e7:1b:16:f5:22:d6:d6:df:83:8d:25:12:82:52:ce:6d:1d:
         4c:22:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:43 2025 by rpki-client