Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f45b6414-8c88-3e36-aa6e-6a5ed556f61f.roa
File:                     f45b6414-8c88-3e36-aa6e-6a5ed556f61f.roa (raw, json)
Hash identifier:          Ip+ZwwBjARglen4ShI2+5eI7mvmfOj1erdDpTCZ22Uw=
Subject key identifier:   B9:12:1A:F2:7D:8E:40:87:A8:94:58:98:C5:29:93:DA:19:F5:53:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F59EFDD665A99E5E10C9A7070
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f45b6414-8c88-3e36-aa6e-6a5ed556f61f.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:ef:dd:66:5a:99:e5:e1:0c:9a:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=92ca012e-0c1c-4661-ba00-f8a35e0458bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:2d:df:b5:db:0c:8b:0d:e0:76:c2:de:d0:
                    27:d9:c2:08:91:71:18:e0:d9:e7:e4:b8:83:c9:ad:
                    bd:60:3c:27:6c:08:e8:d6:5c:4e:50:69:f1:5f:9e:
                    22:74:2f:b1:71:1a:bd:20:57:15:95:39:29:61:b9:
                    55:dd:80:c5:e4:d5:4a:08:61:29:7f:33:c0:09:5d:
                    3c:47:82:3a:38:2b:2f:62:15:48:f1:03:b6:81:a0:
                    45:58:cb:e4:fb:a2:a8:9d:35:a8:2f:77:7f:2d:8c:
                    7f:5c:bc:34:62:17:55:cc:7c:ab:02:1b:f4:51:d1:
                    0c:23:83:63:65:4d:82:28:d5:91:f5:6f:6f:cc:51:
                    10:aa:3c:d3:54:43:1e:fd:da:8b:44:b4:70:40:d7:
                    7a:4e:44:4a:d6:d1:3a:26:ad:05:e1:91:a2:3a:02:
                    de:79:98:69:58:23:8b:b3:21:a1:ef:2d:92:42:c4:
                    e1:3f:48:a8:51:d6:c0:7c:88:fc:e7:2e:f0:cf:0b:
                    c1:fd:c7:a4:d2:3b:1c:34:cc:d3:a9:0f:18:d0:ac:
                    8f:47:4d:69:ae:9d:6e:2f:a5:08:69:6b:8d:68:28:
                    1a:0c:eb:fc:74:47:46:bd:15:f7:1e:30:6e:da:72:
                    26:21:cb:3c:87:4f:ae:2f:9e:e0:5a:5b:84:bc:15:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:12:1A:F2:7D:8E:40:87:A8:94:58:98:C5:29:93:DA:19:F5:53:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f45b6414-8c88-3e36-aa6e-6a5ed556f61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:2a:76:12:30:b1:f4:27:15:86:65:cc:53:53:1f:60:33:
         3e:73:4d:32:07:98:1d:7a:0c:bf:9d:1a:6c:19:2f:c1:f6:2b:
         d8:42:ab:6d:10:09:e7:ec:68:a0:d5:37:45:04:e0:01:6d:8a:
         f1:e7:13:88:17:bf:b6:a8:99:3e:00:4d:03:82:2f:f2:df:59:
         16:97:a5:5e:eb:39:7f:de:45:33:5b:dc:67:47:56:10:31:55:
         ba:55:1c:74:44:d5:fe:2e:21:cb:84:48:e3:3d:94:0b:94:38:
         94:25:66:93:64:0f:e2:47:9d:e3:ba:21:79:59:7f:9b:81:20:
         d5:fd:f8:5a:10:f2:c0:9f:a2:b6:56:63:e7:4a:b4:23:31:69:
         70:80:5c:b2:e8:2a:ba:5f:56:20:f0:11:cb:80:74:e5:ec:6e:
         bd:30:92:fe:6a:6c:82:c6:ff:a9:06:54:b5:e2:64:7f:a2:6f:
         04:18:bf:c7:8d:8b:71:ce:dd:88:e8:c1:1e:53:b8:6b:bc:fc:
         1d:04:cb:3f:28:cd:d2:79:41:63:bf:2a:c4:76:34:7b:68:8e:
         03:06:da:97:bd:f7:78:e6:52:72:6d:ff:b4:e7:8e:b6:0f:35:
         68:bd:76:d3:0e:6f:3d:b0:3b:a9:33:3e:85:84:e4:86:e4:e1:
         f6:e0:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:06 2025 by rpki-client