Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed61fdc-79f9-33a1-9342-9cfdcd243a66.roa
File:                     1ed61fdc-79f9-33a1-9342-9cfdcd243a66.roa (raw, json)
Hash identifier:          AuBwqqp93LKeu2nAPeeFpzJqdVI07gn8O4hP3wx9X8g=
Subject key identifier:   33:36:AF:F8:F3:8E:60:95:6C:88:A9:F9:5E:19:15:84:E8:CE:F9:4B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840404180412CFB9A658CBDBA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed61fdc-79f9-33a1-9342-9cfdcd243a66.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:41:80:41:2c:fb:9a:65:8c:bd:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=b5b65547-7d7e-4060-898e-6547b5f64c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:77:a7:83:ed:d1:70:ae:1f:57:16:44:98:
                    b8:d9:39:b3:59:91:0c:8e:7a:c0:22:2a:66:fc:77:
                    7d:3f:d4:96:70:72:ac:c8:4f:b0:75:ed:5e:6b:d2:
                    ae:b3:c0:66:4b:95:62:7c:42:6c:29:3c:25:67:da:
                    94:8b:cb:4b:ff:53:bd:1e:34:73:17:bb:7a:1b:a6:
                    97:4e:1d:f5:76:d4:c0:6d:7f:f2:ac:a9:48:c7:e5:
                    a1:11:39:83:11:2c:02:5d:20:8b:7f:35:2e:f2:54:
                    f1:39:55:4a:c8:2b:65:d4:13:ad:f9:79:0b:2f:38:
                    91:eb:29:7b:d7:93:8f:b6:f7:23:da:9f:35:ed:ce:
                    7b:7a:30:c3:70:4b:4b:81:0f:8f:bd:12:f2:4d:63:
                    6a:4b:03:7d:4f:2f:fd:18:16:d4:80:ea:9f:e4:76:
                    8d:63:43:3b:c4:00:2a:16:3f:fe:8e:a4:6a:31:ec:
                    01:d6:6c:d3:5f:68:93:13:4d:7c:8c:b9:05:67:b9:
                    08:df:c3:d4:b4:3b:25:a8:b9:bd:7d:72:bf:1a:c2:
                    95:1c:5d:8f:78:12:10:ea:6e:28:d9:83:da:ea:9d:
                    0e:2a:21:30:f9:8a:23:12:c7:82:fb:3f:e8:28:d8:
                    c4:b3:0d:10:e6:e7:1d:e5:15:fa:4b:00:fb:9d:c7:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:AF:F8:F3:8E:60:95:6C:88:A9:F9:5E:19:15:84:E8:CE:F9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ed61fdc-79f9-33a1-9342-9cfdcd243a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:48:4d:77:f7:62:c2:04:73:be:24:b7:ff:4e:4e:db:e5:
         24:75:21:57:89:2d:73:12:e3:98:f5:4d:36:f8:38:7a:6a:4f:
         65:b5:0a:b9:6b:00:26:0c:36:6e:3b:58:4d:48:5a:fc:ff:35:
         af:40:55:15:ac:ae:1b:97:93:55:b2:33:68:aa:ff:12:4a:31:
         00:21:f5:8d:75:72:a2:c6:47:ff:3c:71:0d:3d:a5:3e:72:5d:
         b2:0a:a5:fe:86:b2:43:fd:f0:10:89:bf:11:fa:67:b9:19:d9:
         14:db:49:6e:49:ea:02:84:47:c1:46:bd:92:e4:66:4a:1d:39:
         2a:83:81:37:42:19:12:01:a9:9b:15:14:a4:74:5f:c7:f0:42:
         69:d4:d6:59:64:5f:9c:87:52:a6:05:f3:98:2b:99:ae:45:fb:
         a1:75:4f:6c:ba:dc:ea:f7:3d:e3:7d:34:0f:84:47:c2:bb:c4:
         40:c3:96:2a:a5:b1:dc:e3:31:31:07:39:26:76:df:79:4b:1a:
         3e:30:8d:25:d5:1e:27:2f:cf:29:f9:6b:ba:cc:7b:3d:e0:30:
         53:3f:71:1a:fc:04:d9:3a:9d:30:48:48:b2:c6:9e:72:b0:4b:
         86:b6:ee:37:06:ca:8f:b4:d3:90:21:7f:c0:02:9d:cb:ff:79:
         de:18:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:14 2025 by rpki-client