Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa36e3c1-3e70-37f9-b387-e66b8481461e.roa
File:                     fa36e3c1-3e70-37f9-b387-e66b8481461e.roa (raw, json)
Hash identifier:          2TFqVEdotGelzKVsCpoiIT1j5uNcIv8o4eELIt3Nlcs=
Subject key identifier:   5B:54:5A:C6:02:F7:C7:47:D8:53:A3:5F:41:D7:84:8F:F2:14:C6:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFDD5C43E4536B54F57979000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa36e3c1-3e70-37f9-b387-e66b8481461e.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Tue 27 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        198.13.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:d5:c4:3e:45:36:b5:4f:57:97:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Dec 27 05:00:00 2022 GMT
        Subject: CN=f7159792-a37c-4d46-9156-79fef61bd289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:4a:a5:79:04:ea:f1:ad:50:02:d6:17:81:
                    76:49:dd:73:cb:30:28:05:90:af:1d:32:66:16:21:
                    be:9e:92:5c:65:f0:48:cd:66:58:53:4c:59:6c:46:
                    45:29:6d:c6:b2:6b:c3:87:53:d7:fb:35:3a:b9:31:
                    6d:aa:c7:49:8e:90:6b:e6:4c:e6:66:ec:be:44:38:
                    2d:a6:a6:11:30:a0:05:a4:d0:cc:11:e6:c9:06:84:
                    34:38:ce:d0:81:2f:29:da:0f:02:25:81:8d:af:2d:
                    57:f8:2f:f5:91:84:f9:5a:f1:5a:f3:eb:a7:93:a1:
                    2c:61:38:4f:eb:61:ff:c4:ee:34:fa:12:0e:a2:06:
                    83:5b:70:1e:af:9b:f2:93:b3:6d:3c:86:7f:ae:eb:
                    ed:be:93:cc:6c:94:28:16:7e:e1:f9:33:56:b6:22:
                    35:d1:53:b8:53:da:e5:ed:8c:5e:b7:2a:6d:81:93:
                    fb:46:7a:24:17:ae:ee:d5:50:14:90:27:50:57:7f:
                    32:47:4e:41:7f:70:8a:54:1c:7d:3c:59:8b:91:e1:
                    a6:e9:f1:0d:2e:92:7e:9e:c4:d5:b7:99:56:16:b1:
                    3f:a2:15:24:05:99:88:f7:de:1a:d4:b1:25:c2:68:
                    48:8f:5c:d6:dc:68:84:05:f9:cb:fc:22:87:64:6f:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:5A:C6:02:F7:C7:47:D8:53:A3:5F:41:D7:84:8F:F2:14:C6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa36e3c1-3e70-37f9-b387-e66b8481461e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:2b:b6:99:96:54:53:7a:ed:19:e6:04:06:e8:ec:08:96:
         21:1a:4d:da:3a:3d:eb:42:46:ed:2e:cb:26:cd:7a:4c:21:64:
         74:3d:f3:b4:00:13:fe:42:9e:d6:d3:4c:15:cb:7c:91:cf:65:
         fa:45:d2:2b:96:d9:9c:93:04:00:36:32:95:37:8e:e2:77:60:
         a9:32:45:07:73:4f:df:00:d0:05:c3:07:69:b4:bf:6b:3a:9f:
         8b:96:9e:58:12:2c:6b:1b:f1:22:b7:3f:c4:53:3d:7c:0d:c6:
         10:1e:65:45:47:9a:d4:02:bf:35:1b:df:52:f8:ff:53:ea:42:
         f6:f8:d7:57:fc:34:a1:a1:49:66:6b:ba:f7:ca:8d:04:5c:d6:
         11:7f:fb:63:1f:a6:ce:0c:00:6b:f6:23:6e:ef:84:11:07:e2:
         17:60:f5:0b:cb:6b:8a:3a:af:cc:d0:50:27:62:50:a4:53:14:
         60:7c:b3:1a:bc:c8:18:91:5c:48:94:d4:8e:86:41:c4:d0:b1:
         a9:ca:1d:13:c4:3e:fc:c4:61:d5:c0:f9:75:85:46:44:ae:94:
         94:c0:ef:d8:5a:74:18:ad:b2:dc:0d:c5:80:6e:44:39:b9:19:
         31:43:94:e2:04:ed:68:53:d2:d9:97:49:f9:2b:1d:25:56:68:
         3e:6b:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:16 2025 by rpki-client