Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f901619a-921c-35ea-a909-de1920fc0625.roa
File:                     f901619a-921c-35ea-a909-de1920fc0625.roa (raw, json)
Hash identifier:          og7op7vdxlpAkjMlXCXuOFIE5vQdyCRPVS54ag//uls=
Subject key identifier:   CF:44:26:97:F5:4C:26:C7:37:3E:68:CF:F2:95:EC:27:39:9B:F3:9C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F31322019F6707F04646E3680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f901619a-921c-35ea-a909-de1920fc0625.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        198.200.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:32:20:19:f6:70:7f:04:64:6e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=0ca064ba-fb67-4e90-92eb-984ad86b5dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:22:1a:c7:a6:6b:97:91:f0:b7:50:10:83:
                    bb:e1:7e:f4:4f:12:a0:49:05:b9:d9:cc:6b:af:a6:
                    51:a1:20:10:60:72:f3:34:03:16:fb:6c:7c:75:8d:
                    3a:dd:04:21:31:41:0a:c5:21:1a:36:1f:45:29:af:
                    99:d7:91:03:cc:d7:2c:b3:05:d7:5a:5d:63:f7:68:
                    18:8a:be:00:90:a4:21:cb:c0:54:09:d6:f8:e3:c5:
                    e3:04:6a:ad:11:f5:77:10:0e:71:3e:40:24:6c:5d:
                    26:a7:53:59:4e:48:b2:d1:50:52:af:8f:71:60:48:
                    b2:f7:bc:6b:de:22:d3:e6:3f:95:59:80:35:77:30:
                    9c:24:fe:55:3f:00:73:18:0e:ed:bc:7d:11:94:28:
                    1c:71:00:c6:ca:e2:7c:a3:d0:54:81:ae:8c:4f:a2:
                    d6:81:d9:4b:a7:84:b8:dc:ee:39:3d:79:34:2e:55:
                    4c:a1:89:1b:52:46:3d:70:fc:2b:47:2d:25:8a:01:
                    06:cf:89:57:16:48:f1:4c:39:87:82:16:35:f0:18:
                    40:2f:4f:e4:cb:8a:3b:31:00:44:d1:49:f6:80:45:
                    a1:65:86:3a:f6:bf:fe:ff:7c:c6:cc:5f:8f:fe:aa:
                    d2:2d:4b:c1:00:8d:0e:03:28:37:76:eb:d5:07:84:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:44:26:97:F5:4C:26:C7:37:3E:68:CF:F2:95:EC:27:39:9B:F3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f901619a-921c-35ea-a909-de1920fc0625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:18:74:6a:0e:46:33:76:d0:87:fb:c2:bd:f8:f0:09:60:1f:
         98:ed:f4:4e:53:e8:92:34:d7:76:e0:08:e7:ab:8b:e6:b6:85:
         b5:5a:ef:5c:e7:e2:ec:ff:0b:e1:df:41:ce:c0:38:86:dd:c5:
         5b:cb:c4:8c:80:e6:49:54:da:bd:86:c1:85:2b:9e:28:71:c8:
         85:75:0e:90:25:68:4b:8f:67:c1:6d:e7:76:13:05:fe:67:02:
         a3:f8:1e:00:1b:77:ff:4d:3e:ed:65:11:53:52:c6:46:d7:19:
         3c:49:dc:d6:c9:83:66:7d:08:7a:6e:73:bf:a1:ba:9f:d4:83:
         76:c5:0a:72:75:41:b1:9b:c1:7c:5a:7e:10:f0:f4:de:94:b4:
         90:29:6c:4b:1a:46:5c:0d:b3:c8:16:4c:55:5f:0d:6c:65:e0:
         31:f5:70:55:6f:7a:9a:b4:82:76:a7:31:cd:92:77:f9:2e:2a:
         0f:ad:da:4d:0d:a5:0e:dc:6f:84:ef:39:ff:63:58:e1:ca:06:
         15:bd:e9:55:13:fe:22:77:8d:5a:49:d2:e8:80:e2:74:d1:10:
         3c:91:fc:c9:7b:89:e9:ad:f2:3c:f9:09:17:c1:a0:03:6c:3d:
         3b:13:a7:dd:68:1a:ee:83:6a:7a:77:29:48:89:09:d4:1c:fb:
         09:f3:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:31 2025 by rpki-client