Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1324497d-a170-3509-adc4-83fc4c72520f.roa
File:                     1324497d-a170-3509-adc4-83fc4c72520f.roa (raw, json)
Hash identifier:          KZqxQtX9//O+Coj6MB1eeuGIPFR6aQSBP/5lO/dzaRY=
Subject key identifier:   14:7D:4C:3C:27:8B:70:7E:46:81:35:2A:7F:AD:56:AB:51:7B:DD:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401D18D1272FAD821AF86B92A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1324497d-a170-3509-adc4-83fc4c72520f.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:18:d1:27:2f:ad:82:1a:f8:6b:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=b0f6a610-cefe-45cc-8463-c00c294c3498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:cd:f3:51:36:aa:b0:97:5b:9a:4e:d0:9e:
                    6d:53:48:b5:8b:65:ba:6e:56:c0:67:1d:98:ee:63:
                    71:8f:fc:13:94:9e:28:31:05:4f:3e:f7:34:73:71:
                    5e:a3:37:18:ba:be:fc:f4:7b:5c:f8:14:80:ce:3c:
                    9f:9e:52:52:6a:9c:ab:3d:f5:3c:c4:b7:15:49:c7:
                    e0:69:dd:3d:81:d1:be:df:b1:9c:7a:35:d2:2a:64:
                    67:b4:6d:eb:43:0c:a6:06:e9:0d:cb:e0:e2:d2:e4:
                    8f:d9:c8:7f:c8:09:84:e3:ce:5c:de:70:de:d3:5f:
                    e0:c9:f5:1c:52:e6:62:c1:9f:e7:ad:3d:f6:ab:50:
                    73:0b:df:b7:c6:74:42:de:48:6b:1e:f2:5f:1d:46:
                    47:b7:4e:4b:1f:2f:1f:c7:08:09:c7:20:92:62:30:
                    b1:fa:bb:ea:09:4b:ab:c3:8f:8d:1e:59:39:d1:82:
                    48:3f:2b:3e:25:38:24:eb:07:c5:fd:2a:38:7a:f1:
                    e5:b9:16:e4:1d:4d:28:2f:06:4a:33:b8:bb:38:fa:
                    40:c2:58:d6:d4:65:8d:78:e4:3b:c6:37:35:a7:97:
                    c5:ef:f4:a9:42:6b:99:39:5c:6a:3e:da:f2:56:c1:
                    20:ff:9f:14:d4:ee:97:2a:cc:75:50:75:82:7f:ff:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:4C:3C:27:8B:70:7E:46:81:35:2A:7F:AD:56:AB:51:7B:DD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1324497d-a170-3509-adc4-83fc4c72520f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:67:70:21:f1:56:9e:da:3f:2c:e0:b8:0e:16:27:21:e1:
         63:65:37:1d:4f:49:f2:f6:28:a5:6f:7f:12:e4:56:fc:23:39:
         c2:8a:d2:17:eb:62:49:92:c1:8f:c6:7b:2e:36:c3:c8:50:31:
         bc:af:c8:19:a5:be:54:73:99:6b:63:b3:32:8a:2e:19:d4:54:
         b5:84:ba:13:b5:e9:d0:06:57:b5:a2:47:a0:f7:5b:ad:a9:51:
         32:30:c5:fc:a2:30:41:81:67:a3:c4:32:d8:95:63:e8:46:26:
         12:3b:aa:0c:b7:af:7b:1e:4e:ff:03:65:f3:e6:75:05:ef:6e:
         ee:db:65:0b:ff:d7:b9:3e:36:cc:1c:61:a4:ce:7d:db:79:6b:
         ed:b0:0d:b2:01:7b:7e:a7:7b:fd:c6:21:b6:60:49:d0:b9:2c:
         d9:63:99:39:00:e6:05:b9:5b:93:a1:6b:53:e8:b5:db:f8:ff:
         2f:db:10:1d:38:b7:55:c7:80:56:87:e7:af:91:a2:bc:5b:9e:
         9f:f1:7b:b7:ae:a4:f3:37:b3:ae:6a:5f:4a:95:53:b9:6b:34:
         47:1c:e5:22:b6:68:49:1e:ce:8e:40:f6:ac:c1:81:c2:3e:43:
         b1:91:e0:30:5c:74:1e:65:94:83:2d:b7:21:0a:7b:88:9c:ed:
         b1:06:5d:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAdGNEnL62CGvhrkqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YjBmNmE2MTAtY2VmZS00NWNjLTg0NjMtYzAwYzI5NGMzNDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVnN81E2qrCXW5pO0J5tU0i1i2W6blbAZx2Y
7mNxj/wTlJ4oMQVPPvc0c3FeozcYur789Htc+BSAzjyfnlJSapyrPfU8xLcVScfg
ad09gdG+37GcejXSKmRntG3rQwymBukNy+Di0uSP2ch/yAmE485c3nDe01/gyfUc
UuZiwZ/nrT32q1BzC9+3xnRC3khrHvJfHUZHt05LHy8fxwgJxyCSYjCx+rvqCUur
w4+NHlk50YJIPys+JTgk6wfF/So4evHluRbkHU0oLwZKM7i7OPpAwljW1GWNeOQ7
xjc1p5fF7/SpQmuZOVxqPtryVsEg/58U1O6XKsx1UHWCf//lDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBR9TDwni3B+RoE1Kn+tVqtRe92CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTMyNDQ5N2QtYTE3MC0z
NTA5LWFkYzQtODNmYzRjNzI1MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAY08wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoWFncCHxVp7aPyzguA4WJyHhY2U3HU9J8vYopW9/EuRW/CM5worSF+ti
SZLBj8Z7LjbDyFAxvK/IGaW+VHOZa2OzMoouGdRUtYS6E7Xp0AZXtaJHoPdbralR
MjDF/KIwQYFno8Qy2JVj6EYmEjuqDLevex5O/wNl8+Z1Be9u7ttlC//XuT42zBxh
pM5923lr7bANsgF7fqd7/cYhtmBJ0Lks2WOZOQDmBblbk6FrU+i12/j/L9sQHTi3
VceAVofnr5GivFuen/F7t66k8zezrmpfSpVTuWs0RxzlIrZoSR7OjkD2rMGBwj5D
sZHgMFx0HmWUgy23IQp7iJztsQZd6g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:07 2025 by rpki-client