Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17502cb3-dc4c-39ee-984e-17cb6f0efc42.roa
File:                     17502cb3-dc4c-39ee-984e-17cb6f0efc42.roa (raw, json)
Hash identifier:          k4bfbEh1EhxD4it7po73AsHH+VnLsEY6yyVw+yY+UFs=
Subject key identifier:   C7:93:3C:4A:12:AF:3C:91:1C:F3:0C:B8:89:A0:81:B9:A9:62:DB:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF8C849AAEA8564B6F02CF180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17502cb3-dc4c-39ee-984e-17cb6f0efc42.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:c8:49:aa:ea:85:64:b6:f0:2c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=c41ccb16-7594-4c28-b000-4a7cc325fe22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:b9:e9:43:a9:1e:4c:03:a8:97:9d:7f:19:
                    43:48:3d:98:f0:f5:b8:84:72:d4:90:6f:5c:93:ed:
                    85:d6:7c:7c:65:df:6d:ae:b6:a3:ca:af:8f:ac:81:
                    d0:ee:b3:1c:8b:17:03:ab:ef:7f:52:35:84:12:7f:
                    ff:81:20:d6:38:9f:1a:a4:4c:84:a8:be:32:fe:0e:
                    87:74:04:7a:98:29:31:87:68:46:87:0e:13:e6:03:
                    50:82:cc:41:17:a1:20:38:93:31:d0:c4:e6:38:63:
                    39:12:23:1b:09:c4:33:cb:36:e3:2c:c2:e2:43:56:
                    9c:67:7c:f5:5b:5f:53:a3:35:e1:f1:03:9a:63:bc:
                    63:c7:34:99:66:37:76:fc:d8:05:81:2a:7f:52:ef:
                    05:0f:39:8f:ae:a2:23:51:0e:b8:02:0a:cf:e7:a9:
                    fb:66:36:cf:1f:06:c7:6e:73:07:db:d6:ab:5a:cf:
                    c5:54:b7:79:d4:d9:ca:98:e1:a5:dc:82:4c:53:b9:
                    3e:a2:6b:0b:82:bd:6b:b6:16:13:2f:d1:1a:5b:cc:
                    29:0d:3b:b6:14:63:8d:64:bb:19:57:f0:42:27:f4:
                    b8:d3:dd:4d:82:86:2b:5c:77:3a:65:a6:92:69:bb:
                    d0:e1:a2:8b:3d:22:51:de:6b:b2:75:12:6c:ea:a4:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:93:3C:4A:12:AF:3C:91:1C:F3:0C:B8:89:A0:81:B9:A9:62:DB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/17502cb3-dc4c-39ee-984e-17cb6f0efc42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:60:10:d1:f8:1b:f6:3d:e4:50:ac:c3:17:e6:7d:9e:2b:d5:
         ae:92:e8:65:1f:38:19:0e:6a:2a:ee:ca:93:05:2f:40:2f:44:
         ca:c7:f7:bb:51:cc:04:3e:1d:35:1f:89:c0:a7:7b:35:6d:d4:
         ae:71:8c:3c:54:b9:15:6f:74:ce:7c:7e:b8:46:aa:51:9b:73:
         8f:2b:53:82:86:12:06:fd:cd:92:c6:c1:d3:66:50:1f:a9:50:
         5d:a0:b2:c7:a4:85:a1:f0:b9:d1:e6:99:0a:d1:59:49:5f:02:
         08:34:ff:5c:ac:21:ab:16:7b:dd:1f:7c:c9:fb:1e:58:86:83:
         33:c6:f7:b4:e4:ee:fa:3d:fc:d6:03:59:5e:20:f2:8b:70:71:
         23:51:f5:36:5e:3d:41:1b:a4:19:84:21:7e:0b:f6:ab:45:11:
         ed:22:84:82:59:13:88:3c:c6:a7:ab:ac:d2:49:4a:6b:64:cb:
         42:1b:2c:e4:3b:24:11:fc:b9:d8:0d:92:88:3e:71:7f:b6:57:
         65:1e:dd:ad:94:be:cd:df:8c:20:2e:a6:ca:86:22:2e:c8:c4:
         e0:fb:e6:cc:8b:7c:60:20:33:25:72:e9:34:cb:62:14:8d:6b:
         55:07:c2:45:0c:de:0e:91:b9:29:7d:f6:b3:cf:7f:cf:e8:0d:
         45:00:94:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD34yEmq6oVktvAs8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YzQxY2NiMTYtNzU5NC00YzI4LWIwMDAtNGE3Y2MzMjVmZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKm56UOpHkwDqJedfxlDSD2Y8PW4hHLUkG9c
k+2F1nx8Zd9trrajyq+PrIHQ7rMcixcDq+9/UjWEEn//gSDWOJ8apEyEqL4y/g6H
dAR6mCkxh2hGhw4T5gNQgsxBF6EgOJMx0MTmOGM5EiMbCcQzyzbjLMLiQ1acZ3z1
W19TozXh8QOaY7xjxzSZZjd2/NgFgSp/Uu8FDzmPrqIjUQ64AgrP56n7ZjbPHwbH
bnMH29arWs/FVLd51NnKmOGl3IJMU7k+omsLgr1rthYTL9EaW8wpDTu2FGONZLsZ
V/BCJ/S4091NgoYrXHc6ZaaSabvQ4aKLPSJR3muydRJs6qRBAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeTPEoSrzyRHPMMuImggbmpYtvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTc1MDJjYjMtZGM0Yy0z
OWVlLTk4NGUtMTdjYjZmMGVmYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY5eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBgENH4G/Y95FCswxfmfZ4r1a6S6GUfOBkOairuypMFL0AvRMrH97tR
zAQ+HTUficCnezVt1K5xjDxUuRVvdM58frhGqlGbc48rU4KGEgb9zZLGwdNmUB+p
UF2gssekhaHwudHmmQrRWUlfAgg0/1ysIasWe90ffMn7HliGgzPG97Tk7vo9/NYD
WV4g8otwcSNR9TZePUEbpBmEIX4L9qtFEe0ihIJZE4g8xqerrNJJSmtky0IbLOQ7
JBH8udgNkog+cX+2V2Ue3a2Uvs3fjCAupsqGIi7IxOD75syLfGAgMyVy6TTLYhSN
a1UHwkUM3g6RuSl99rPPf8/oDUUAlI8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:37 2025 by rpki-client