Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bbbeabc-0927-3387-8e67-d1d618d8101d.roa
File:                     0bbbeabc-0927-3387-8e67-d1d618d8101d.roa (raw, json)
Hash identifier:          kurXqqP3oTZ8xeVbnTp6xMrd/xAQMB3S4/QYR4Qq1Tg=
Subject key identifier:   E4:2C:C5:93:7D:69:02:45:08:70:E6:F8:15:93:74:4D:76:5D:ED:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96ABD0F464AD9B43266EF8F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bbbeabc-0927-3387-8e67-d1d618d8101d.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.87.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:ab:d0:f4:64:ad:9b:43:26:6e:f8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=893cdd22-b9a4-414a-9f8d-6d413e4f5d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:75:a4:60:c8:ff:6c:c0:f8:04:a2:bd:01:
                    25:a1:cb:72:f2:82:6d:95:1a:d8:2b:ba:03:55:24:
                    24:83:f1:cf:9a:13:cc:39:6b:95:e1:95:92:43:66:
                    1b:de:fb:75:0e:f6:c0:47:57:50:d0:d6:9e:94:73:
                    61:13:81:33:fa:87:12:0d:f9:c3:72:68:02:73:6a:
                    99:fa:53:9c:2f:86:4d:6a:bd:27:c5:39:4e:6d:41:
                    81:25:53:ab:d7:41:94:bf:84:bb:a8:03:22:bc:ed:
                    59:71:6c:23:8a:4a:fe:1f:09:67:3e:eb:1c:95:22:
                    7b:10:94:16:e3:71:6e:49:1c:a5:df:be:56:09:95:
                    6c:eb:9a:15:2c:6f:cf:f6:ec:a8:46:11:60:95:92:
                    b1:94:7a:5c:00:9f:01:4c:9b:8d:bc:75:a2:03:22:
                    c7:db:22:50:b9:b6:93:bc:c7:56:eb:91:a6:d8:d4:
                    4a:b9:d3:a3:0e:ce:91:79:21:af:b2:63:27:89:15:
                    85:19:8c:73:b9:59:fb:b7:be:ae:b7:b3:ff:6c:94:
                    44:e3:01:d9:78:47:59:36:e6:71:20:25:99:87:5e:
                    b5:69:5a:8e:06:ef:4e:2d:4b:1f:82:99:49:07:68:
                    dd:70:1d:2c:3a:25:f5:ad:d4:4b:f8:96:56:ab:b5:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2C:C5:93:7D:69:02:45:08:70:E6:F8:15:93:74:4D:76:5D:ED:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bbbeabc-0927-3387-8e67-d1d618d8101d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:f5:7e:cb:f7:69:d1:8d:24:1d:22:02:00:b2:ad:7e:bd:
         e8:4a:1e:5c:90:8f:4d:26:a7:99:46:f6:e9:7b:08:2e:5f:8f:
         5b:65:f6:89:bf:1f:34:9c:67:db:46:a2:0c:fd:ec:6a:c7:99:
         70:ce:99:82:98:e0:49:90:d2:03:82:c8:c2:a1:33:15:09:f6:
         5f:e4:69:b3:fa:c0:18:4e:b4:0e:11:3c:46:c3:03:19:49:5b:
         1f:ea:81:3b:36:5a:fc:3e:ce:3b:17:96:74:40:1b:9d:92:fe:
         83:5f:b4:0e:f3:08:19:f7:a0:11:ca:d9:d8:0d:36:1d:9c:46:
         8d:ee:b1:2c:b9:81:f9:be:e6:a9:ab:26:91:e4:15:75:83:01:
         64:4d:18:8c:09:10:89:fa:3d:c6:12:e3:ac:0b:1c:f8:c6:cd:
         2a:1c:e9:dc:c1:e8:aa:4d:03:d5:52:32:45:af:ce:6c:88:0b:
         9f:b3:65:18:73:bb:b9:65:96:af:23:cc:df:a0:90:c8:b8:92:
         59:a0:77:fd:eb:1c:db:1d:b9:af:a9:05:68:07:d8:d1:8b:23:
         75:f8:80:59:0a:f4:87:dc:cb:fe:26:8e:5c:fa:78:a9:e9:72:
         b1:a2:cf:c2:69:7d:bb:26:c2:aa:9f:c1:5c:61:d5:88:ff:d5:
         df:7a:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:04 2025 by rpki-client