Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244ace29-f121-3e01-935b-2212bd2f4cff.roa
File:                     244ace29-f121-3e01-935b-2212bd2f4cff.roa (raw, json)
Hash identifier:          u1/dwsv9AhH+vLdjdlLLsMjsSFGDNVRCtwtW0W6aNXk=
Subject key identifier:   35:BE:01:8F:B8:8A:74:76:2D:17:D8:A4:4F:22:83:7A:A4:D0:8E:C1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4CF9E0AEC4FAD1528D15B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244ace29-f121-3e01-935b-2212bd2f4cff.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.78.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:cf:9e:0a:ec:4f:ad:15:28:d1:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=77d658bb-2888-47af-a902-c646b7278736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:07:d7:77:c1:97:9a:f3:a0:92:e6:7b:41:
                    45:e5:21:bd:c3:c1:01:02:2f:c0:11:f1:39:78:27:
                    a1:80:48:18:19:8f:5c:0e:66:a0:62:7d:30:08:15:
                    c6:0b:e1:3e:e5:fe:4c:35:35:3e:28:d3:34:e8:f7:
                    43:56:77:20:ea:47:3e:27:e1:69:17:32:0e:2b:b0:
                    15:97:1f:a6:b4:ca:3b:c0:e8:06:6e:de:01:d3:89:
                    0d:02:02:7f:8b:76:52:1a:1e:44:a0:a5:2f:b1:31:
                    e4:51:6e:e1:d4:d5:1f:4e:40:95:0d:76:84:5d:bb:
                    d6:cc:56:02:e6:9c:ed:7f:a4:28:8a:0f:ff:82:20:
                    84:14:00:4e:6d:1c:2b:e8:51:ca:5e:80:d5:53:c5:
                    d6:15:87:57:ca:e1:e0:58:f8:39:81:97:df:87:78:
                    53:d3:7a:f5:a3:ab:7c:75:0c:87:8f:93:04:d0:a6:
                    c2:7d:5c:44:6d:a3:24:b5:84:35:38:28:b2:93:e9:
                    18:69:71:c3:ea:d8:3a:9c:82:8a:26:11:06:18:8d:
                    41:5c:94:72:ac:c5:9a:de:f0:4e:21:f2:80:84:ae:
                    2e:cd:a8:60:75:1b:98:be:d9:51:cb:eb:03:a2:f5:
                    a2:36:9e:71:f2:79:59:6a:33:ef:09:9e:1d:7e:16:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:01:8F:B8:8A:74:76:2D:17:D8:A4:4F:22:83:7A:A4:D0:8E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244ace29-f121-3e01-935b-2212bd2f4cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:03:04:2f:07:49:29:13:b4:39:6b:7e:45:fb:10:8b:b2:
         39:5f:23:76:3a:a5:02:a4:cf:f0:46:b9:e2:a9:4f:73:70:95:
         f5:c7:a2:d6:7d:27:4a:a2:a2:98:ba:fb:63:d2:ff:00:dc:63:
         48:07:51:ea:3f:42:a2:d7:c1:e9:7e:57:dc:fb:59:d5:da:9d:
         b0:25:68:95:6f:ba:25:ad:a6:67:db:24:fe:7c:5b:d4:06:3b:
         63:60:c0:ce:55:0f:a7:1b:d3:2e:ab:a8:3a:93:28:68:fc:86:
         13:8e:e6:db:26:25:38:bb:7c:08:3f:a6:2c:6b:38:3f:5d:d7:
         de:c5:cc:5e:d7:20:a4:db:bb:c4:18:07:33:82:35:87:10:38:
         c8:a0:d7:52:7f:d0:48:99:cd:59:36:22:c0:47:f0:d1:7c:ce:
         8c:a0:54:8f:29:8f:7b:6b:96:6b:31:d0:14:35:1c:12:a6:2b:
         1b:4a:78:05:e6:ee:41:7b:88:2e:40:c1:12:71:eb:85:c3:63:
         16:54:81:77:ce:05:7f:a0:41:ea:b0:f5:6b:3d:b0:fc:cd:66:
         fe:5c:23:91:dc:11:ba:45:60:43:74:fc:3d:6f:e1:f5:6f:7a:
         8d:29:e4:d5:d1:89:09:f1:50:d4:ae:91:66:ca:27:00:0f:cc:
         da:b4:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:02 2025 by rpki-client