Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2692cba-c24a-3c93-b740-e9bab4bcc9d4.roa
File:                     f2692cba-c24a-3c93-b740-e9bab4bcc9d4.roa (raw, json)
Hash identifier:          nysZnpCB8CK9NQpu+AihFviziuLLZ5N/o7Zsar8WbTE=
Subject key identifier:   D4:7C:C3:3D:C3:B3:A0:6F:8D:3E:9C:6B:A2:F4:A7:B4:18:BF:E4:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D81AC312578CECD9DB353A600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2692cba-c24a-3c93-b740-e9bab4bcc9d4.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        198.41.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:ac:31:25:78:ce:cd:9d:b3:53:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=9b94f5be-850e-4cd9-bede-86c640528a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:1d:67:a9:01:f8:f8:12:ac:84:4e:f1:63:
                    a2:dc:93:29:03:c8:5c:5e:bb:ed:d7:33:7b:ff:e5:
                    0b:93:c4:81:ff:dd:e3:de:9d:62:6b:4a:81:70:ea:
                    91:91:c9:39:96:07:73:6c:6f:74:c9:d9:67:e5:a5:
                    47:61:22:8b:45:86:fb:10:e4:82:a9:ab:0e:d0:14:
                    82:15:e7:9b:7c:55:e8:4e:18:ef:a5:fa:f0:0c:52:
                    f7:01:c6:a8:58:ac:f7:64:e8:7c:a8:2b:26:84:c0:
                    f8:a3:02:e8:6e:48:69:51:4d:7b:68:86:b6:58:d2:
                    52:44:04:07:7c:76:c7:19:fc:ab:46:27:e8:c0:e4:
                    23:23:a7:fc:95:13:e0:ac:d0:59:6b:13:5a:64:65:
                    7d:7a:97:e5:68:64:2d:d5:ee:d3:4a:bd:0f:b8:75:
                    aa:c7:b3:49:48:47:53:ab:e0:68:4c:94:02:48:57:
                    54:78:d4:be:d6:52:bb:9d:89:0a:78:bb:c9:13:11:
                    47:9d:e5:f8:7f:1a:09:68:49:c1:35:97:37:82:9d:
                    d2:76:62:9f:4e:e0:c1:ea:2a:3e:96:e4:8b:1e:d2:
                    98:93:a6:5f:d2:6c:69:9d:db:d9:b2:06:66:85:1d:
                    a3:fc:fc:6b:92:de:03:fe:2d:78:8e:aa:28:b6:b8:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7C:C3:3D:C3:B3:A0:6F:8D:3E:9C:6B:A2:F4:A7:B4:18:BF:E4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2692cba-c24a-3c93-b740-e9bab4bcc9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:fd:25:40:6a:b2:d4:c1:de:b3:d4:12:73:f3:14:0c:ba:
         e4:a1:1c:10:bd:64:0f:8b:24:62:4a:e9:ec:7a:2f:57:5d:2e:
         3b:a7:13:e0:ac:45:74:12:cc:2a:fb:c2:8d:3e:44:0b:e5:35:
         c5:91:19:dc:91:d1:93:69:c8:b8:ed:c7:50:2d:af:8c:34:55:
         a6:93:e5:6a:cf:ff:fa:cb:10:b7:38:e1:e3:68:cd:b5:15:21:
         35:05:bc:75:88:6b:00:9d:25:ef:ee:e6:1b:14:94:64:29:0a:
         bf:49:69:ac:e3:7c:ce:8b:00:b0:e7:6b:4d:e1:cc:fc:b2:48:
         9d:d2:6c:71:32:c3:6f:c8:23:87:a1:4c:c4:cd:eb:d6:a9:db:
         46:49:89:67:d5:33:fc:2d:c6:4f:cd:0e:c3:8e:de:5b:a5:82:
         e9:19:4c:8f:57:84:a8:ec:05:b1:09:76:ba:23:cd:bb:70:2e:
         de:4c:42:b6:b2:9b:2f:51:26:e1:57:ea:c3:cb:14:63:96:00:
         66:12:3f:ab:7a:49:94:5b:73:9f:11:3c:48:28:8a:09:12:61:
         5c:33:90:08:b8:8b:eb:51:57:78:e5:d1:a2:5c:c0:5b:7d:8d:
         9f:68:2b:b1:c4:80:07:5a:5c:d0:15:8a:43:88:5d:51:1d:ff:
         29:d6:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:20 2025 by rpki-client