Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f101f3-24d1-3844-a903-be1627e8f155.roa
File:                     f3f101f3-24d1-3844-a903-be1627e8f155.roa (raw, json)
Hash identifier:          sp0MeoQWpHuSYD7wS4RC8KhLVbw/LoHRHmHjX0sHMQo=
Subject key identifier:   7D:CF:20:07:A1:3C:25:1C:B1:42:2A:AF:BF:98:1B:BD:9E:90:A4:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD94075134881F58D45BAA700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f101f3-24d1-3844-a903-be1627e8f155.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 12:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        56.98.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d9:40:75:13:48:81:f5:8d:45:ba:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  8 12:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=d0450278-db76-49d1-88ae-073d648bab06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:31:76:d3:2a:ec:09:ae:36:8e:42:57:cb:
                    2a:09:54:ab:9f:88:3c:ab:d5:f5:e4:7f:79:95:b1:
                    c9:b9:d9:02:1e:92:64:9c:7e:a3:82:41:5d:10:f0:
                    12:02:b3:8f:d6:c3:10:75:b3:d0:c4:7a:27:bd:3c:
                    a3:f3:07:9b:90:d9:8c:f0:9e:f2:59:04:48:ba:3c:
                    0a:37:13:90:43:89:f2:31:65:db:b9:aa:50:31:f9:
                    ee:51:63:7f:e3:23:43:77:c6:d5:c8:49:05:25:db:
                    6d:7e:59:c5:ae:37:35:ce:89:ed:63:58:f8:21:cd:
                    b4:93:67:1a:21:08:d1:46:f1:69:c9:8d:d6:ef:b5:
                    9a:53:0b:96:97:b5:e3:29:a7:e8:2b:07:3b:6d:e7:
                    d2:4e:ae:9c:61:97:80:68:3e:b3:b3:39:d5:93:91:
                    11:c6:ee:22:0c:18:b3:0e:fa:cf:48:f6:3c:c4:32:
                    99:66:16:16:dd:05:b1:f0:29:2d:2e:04:45:ce:af:
                    fd:84:1a:2b:9f:dd:9b:5c:c3:3e:4f:ec:5f:de:93:
                    68:ae:37:4f:15:0d:b1:70:4c:a0:51:53:49:07:df:
                    31:4d:e6:2c:72:c4:1d:c5:9b:2b:03:18:df:8c:e1:
                    ef:27:98:59:4b:09:28:24:14:9c:96:6f:72:23:c5:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CF:20:07:A1:3C:25:1C:B1:42:2A:AF:BF:98:1B:BD:9E:90:A4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f101f3-24d1-3844-a903-be1627e8f155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:0c:01:85:94:2f:b3:ca:75:98:7d:c7:8f:7f:fb:7c:24:
         b1:ae:88:9d:1a:5c:7c:1c:10:7b:83:02:7e:56:24:0f:58:7d:
         38:8b:08:f2:37:c7:4d:1e:7c:6a:fd:c9:d5:ed:1d:95:6d:bb:
         85:4d:d4:b0:6d:b7:68:3a:2f:c3:bd:27:2a:77:a0:1b:ef:59:
         d8:51:1f:b1:41:2a:7f:52:aa:33:6f:38:c3:14:65:c8:b8:7b:
         f4:dd:2d:62:25:31:d3:27:48:1a:85:c2:24:d5:d5:bf:99:82:
         cb:26:92:a6:29:50:f7:df:c4:32:3a:b6:2a:c0:ed:a3:32:32:
         ea:50:41:25:f6:db:6d:3b:09:0e:fe:62:96:40:b3:34:1a:7f:
         db:10:a9:be:e1:25:79:0e:5b:f4:4b:3f:57:9d:7e:12:66:85:
         6b:fe:07:10:dd:84:3d:f7:c5:90:3e:4d:f8:5f:e8:d4:bc:07:
         d3:c2:ea:ee:f7:00:80:13:e2:80:7d:3f:fa:01:3a:a0:f7:bc:
         fd:3f:9b:7d:7a:ab:56:f4:1f:eb:ff:9c:2e:be:30:65:e1:2d:
         ea:20:ea:9b:27:c5:5c:15:cb:38:6c:d9:5b:2e:73:69:37:fb:
         30:55:de:57:55:b7:7a:34:60:10:c2:ea:1a:cd:d0:ee:31:24:
         c0:fa:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:05 2025 by rpki-client