Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd826494-e5ea-3a7c-985f-f52668aa36ee.roa
File:                     fd826494-e5ea-3a7c-985f-f52668aa36ee.roa (raw, json)
Hash identifier:          tUieHqbJut5ksQjVvOx5l8nkg+qUvnKZCOfkVTZtHKQ=
Subject key identifier:   68:2B:99:B2:BD:5D:07:0C:9D:DD:A3:CE:20:57:2F:48:F9:90:CD:02
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5A154EBCF1446A606DF6B760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd826494-e5ea-3a7c-985f-f52668aa36ee.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.78.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:15:4e:bc:f1:44:6a:60:6d:f6:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=ae3f94af-72ff-46d9-8721-dc4b7db2f53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:93:d1:0d:3b:f2:9d:b9:5c:cd:12:78:84:
                    1a:12:2b:98:81:76:6d:8c:b0:82:44:02:e4:e3:cc:
                    81:11:2d:fe:f6:00:12:3e:10:4d:37:64:1a:fd:07:
                    2c:d5:e0:c5:2b:3e:c8:13:6c:2a:e2:77:d2:7b:ee:
                    ba:cf:4f:16:4b:af:a8:76:e8:08:a0:c6:9d:5d:c2:
                    43:f0:89:3f:71:95:91:85:1a:43:f7:b6:7a:e4:09:
                    45:9e:3b:4a:d9:a4:7c:dd:0d:c3:c9:1e:58:b0:a9:
                    e7:1d:1d:57:51:7c:7e:ae:6e:33:31:9b:0b:41:1a:
                    25:0d:1d:74:ea:3e:b1:91:be:ac:e7:37:c9:fa:01:
                    28:6d:4a:20:65:07:a6:01:49:17:64:93:9d:3d:2d:
                    42:ed:73:89:9e:47:3c:d6:86:4f:0c:38:1b:1b:f3:
                    22:89:f5:71:b5:80:85:63:eb:80:4d:43:e0:ae:34:
                    ce:5d:1d:e4:a1:5f:69:72:96:d9:8e:e5:29:24:5a:
                    14:ca:fa:67:44:f3:55:47:c7:96:06:7b:50:b8:1c:
                    db:cc:8a:76:6c:6f:6a:25:93:1c:1f:fd:65:1d:f2:
                    f3:e5:fb:ca:ac:59:2b:8e:23:df:92:61:80:0d:8f:
                    23:50:af:98:a0:cf:51:c2:67:38:bb:62:51:02:db:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:99:B2:BD:5D:07:0C:9D:DD:A3:CE:20:57:2F:48:F9:90:CD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd826494-e5ea-3a7c-985f-f52668aa36ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:70:0b:03:e1:e6:01:25:09:59:91:57:32:c8:78:4f:3b:
         49:03:34:a5:92:d7:1c:41:77:d6:f7:a2:33:c3:37:14:02:76:
         b7:dd:04:a1:08:fe:78:36:92:d9:ce:e6:e2:34:0f:18:fe:03:
         d3:e6:e8:4a:44:29:7e:19:c3:0d:77:d0:dd:12:39:55:d6:04:
         a7:fe:de:52:ba:4e:44:11:a4:ce:6b:6b:14:d8:8c:84:93:12:
         83:8b:21:01:e9:2c:f4:a2:2e:b6:84:25:61:ee:8a:65:ce:37:
         3d:4c:a7:bf:91:96:ff:42:3a:2a:de:91:35:ef:07:a1:ef:02:
         a5:b3:a1:16:31:e6:2d:59:21:04:12:f9:33:49:69:c9:0e:6b:
         ac:45:7e:b0:60:6a:fe:be:ca:27:ed:44:b2:6d:5d:8b:b4:63:
         34:65:61:66:46:f9:11:d1:2b:92:62:82:bc:3b:0b:05:d2:a7:
         3b:96:2b:46:38:89:49:c8:a6:68:00:a3:39:00:3f:72:74:8f:
         4b:02:5e:98:b9:e3:3a:24:17:da:62:a8:4f:fd:76:71:7c:3a:
         4d:ba:aa:97:4f:03:2a:44:53:e9:ad:d8:c8:9b:5e:fb:7d:10:
         ac:6f:11:41:a6:fd:b9:25:cb:f3:eb:0e:0e:1c:3d:7a:68:b6:
         0a:e7:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:10 2025 by rpki-client