Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29f6a45f-ec1b-3277-991c-000b01b289ec.roa
File:                     29f6a45f-ec1b-3277-991c-000b01b289ec.roa (raw, json)
Hash identifier:          Xmld74w2fAu7xfbUfHenys175/HG1I6Cqxq5qkCNuGY=
Subject key identifier:   C8:69:1B:99:36:A5:56:F8:71:F7:5E:E5:AD:48:4E:BA:C9:DF:86:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCF9ABCD8E222A1568ABC2E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29f6a45f-ec1b-3277-991c-000b01b289ec.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:9a:bc:d8:e2:22:a1:56:8a:bc:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=cb0071ba-284e-47c8-852e-13484d2b813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:9e:32:a6:9a:ac:4e:f2:4c:f8:ac:a5:64:
                    f8:69:0d:3d:77:2f:0d:cf:e9:84:6e:7b:f5:d4:8d:
                    31:3a:fa:44:57:cd:30:9c:95:58:74:6c:c9:0a:c0:
                    43:7d:06:01:cc:9b:3a:a0:5e:f6:9f:61:27:a9:04:
                    ed:a1:9a:5e:25:4a:11:8e:fd:5d:5f:8f:e5:63:ce:
                    9a:43:c8:e4:1e:ca:99:d3:c3:73:4f:3a:72:38:15:
                    eb:e4:53:6a:d7:69:2e:10:02:68:b9:80:9e:db:bf:
                    56:a2:a1:18:d4:dc:b1:c8:64:0d:93:d0:cf:c7:33:
                    84:c3:4b:d6:68:1c:81:46:aa:8b:e4:05:93:cb:22:
                    37:8a:4a:d7:cb:e1:2d:4a:32:55:ca:3c:90:e1:a1:
                    a0:88:a7:45:4b:e6:0c:37:47:f6:3b:14:3a:36:23:
                    42:3a:59:46:85:56:c0:dc:db:43:ba:55:35:34:40:
                    ac:56:78:6b:be:f8:5e:d2:fc:05:ae:66:4f:ad:a7:
                    5d:cf:63:d3:84:75:0d:b6:01:62:65:86:6a:0b:f1:
                    5c:ba:c1:0e:f6:f0:f7:23:9e:61:05:ac:c2:d2:72:
                    23:4f:7e:ed:ef:e1:a4:63:2a:58:03:e9:e3:d5:9d:
                    45:03:bf:dc:b6:55:26:08:5f:c1:40:aa:cf:7f:3a:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:1B:99:36:A5:56:F8:71:F7:5E:E5:AD:48:4E:BA:C9:DF:86:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29f6a45f-ec1b-3277-991c-000b01b289ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1a:01:6b:87:e8:73:47:8d:d9:f0:39:9c:13:f3:a6:07:18:
         36:c8:27:6c:df:e6:a2:a9:98:7f:5b:32:59:77:4d:29:a9:2d:
         60:65:2b:fd:0b:c9:68:f5:46:27:9f:5b:aa:3f:32:84:66:3a:
         1b:5d:16:4c:ea:3d:75:84:62:95:15:39:19:8f:01:00:f4:76:
         6c:e5:84:92:7b:7f:37:74:e5:a7:44:37:a7:46:19:6e:b4:4c:
         7f:24:86:cb:00:61:f7:50:5a:92:bc:ae:2f:93:dc:56:2d:c6:
         fd:a2:ac:96:d7:10:ce:c1:26:e8:11:50:8e:2a:72:c0:8f:56:
         fb:26:9c:f9:fc:c8:88:a1:23:55:a2:07:26:e1:e8:a8:34:49:
         23:ae:d4:09:f7:60:8f:13:12:67:66:ea:15:f9:07:1e:1c:e7:
         81:38:bd:a7:84:52:ca:31:1f:17:6c:e4:65:2e:50:59:c4:5a:
         e5:32:cd:90:9d:f1:2d:b0:7d:98:04:aa:b0:5e:e0:c4:ff:ae:
         72:d2:d4:c0:7b:a4:e3:50:bf:5c:c0:bb:09:17:ae:f8:42:06:
         83:db:ca:af:36:3c:58:11:9c:ab:7a:d7:3f:5d:78:d8:8d:15:
         25:33:73:d6:77:33:0e:08:40:25:06:0d:3b:bd:e3:44:45:34:
         2d:04:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:39 2025 by rpki-client