Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32266f1c-a2bb-3ec8-a4e9-e44104d7d16f.roa
File:                     32266f1c-a2bb-3ec8-a4e9-e44104d7d16f.roa (raw, json)
Hash identifier:          8R6186UCfug5ztJBmqCQ4XwU14FDlOcxPbDczNwMC0s=
Subject key identifier:   C2:60:91:1F:7D:FE:27:76:AB:84:02:BE:72:96:82:7D:35:A7:51:97
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F8E8F402CEC0A3ECBA55B78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32266f1c-a2bb-3ec8-a4e9-e44104d7d16f.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:8e:8f:40:2c:ec:0a:3e:cb:a5:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=4b5d35e7-3f51-495f-a14b-0662944508ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:b7:82:46:a8:32:07:bc:d5:75:b8:a3:0f:
                    c5:7e:09:63:fb:49:cb:29:b2:aa:86:76:d7:4b:61:
                    7e:a0:1c:78:19:66:d1:c2:de:09:fa:74:1b:ee:30:
                    fc:89:48:b7:1d:44:fa:aa:f0:e0:08:ea:0a:6c:0d:
                    68:a7:2d:38:5f:48:6b:d3:35:38:d4:43:52:57:36:
                    2d:bc:9e:5c:d1:29:cb:cb:14:ba:b5:ce:ee:87:a4:
                    55:49:e4:4f:53:a5:45:67:f2:25:64:e8:cb:e6:57:
                    23:5f:a0:61:76:a8:da:62:7f:89:57:23:64:65:74:
                    72:94:c6:ba:2f:3b:2b:9a:02:e6:60:ca:84:48:a5:
                    69:4a:88:83:63:41:54:4d:42:a4:a2:38:ec:ac:bb:
                    e1:aa:da:31:97:8d:11:07:35:72:b7:88:a3:d5:d8:
                    36:94:cf:6b:11:bd:de:01:52:80:e2:f5:67:53:1f:
                    8c:46:b1:0c:ba:b2:a8:2b:a8:d2:39:6e:17:69:93:
                    cd:65:3e:fd:31:c1:24:cc:99:28:9f:47:52:db:1c:
                    39:f3:02:bf:c2:c6:5e:2d:ce:f7:17:57:99:db:e7:
                    3e:0a:ed:0e:36:c0:ff:f7:03:42:7e:7c:23:29:27:
                    b4:1a:6a:cb:80:bc:68:db:39:c8:4f:f4:75:c1:06:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:91:1F:7D:FE:27:76:AB:84:02:BE:72:96:82:7D:35:A7:51:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32266f1c-a2bb-3ec8-a4e9-e44104d7d16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bd:ba:a8:d5:78:f6:a3:e2:f2:e9:58:d9:18:02:59:6b:92:
         ea:e5:2e:19:61:58:13:87:64:e0:43:04:84:43:4e:57:e7:44:
         db:24:a0:82:b3:cd:cf:e1:ca:c3:85:9b:8a:27:41:a1:8b:69:
         10:d5:ab:c7:6b:d0:17:f9:0a:24:89:69:78:cc:80:55:84:03:
         38:a0:3e:94:50:de:3d:74:0f:7e:7e:18:1b:f4:91:a2:bf:32:
         22:a7:5b:2e:13:b9:d8:52:5b:f3:c4:14:7e:38:fa:af:b0:06:
         99:0c:13:2c:1f:9f:2b:9d:c3:ff:dc:32:1b:52:2a:04:8e:be:
         2f:14:04:22:f3:be:9d:4d:f1:fb:c3:97:5b:61:57:9e:2f:5d:
         85:69:63:b3:1c:e5:6c:47:4b:9e:62:56:9e:e8:52:09:25:27:
         e5:0f:96:ea:87:97:c7:99:ca:56:a7:13:42:c9:47:00:cd:38:
         99:c1:1f:48:bd:ff:b5:4d:ac:98:09:f2:32:ff:da:ab:a6:6a:
         08:c5:91:38:67:00:61:11:0a:23:23:22:c1:7a:8a:25:33:5e:
         bd:a6:f6:46:a7:78:b8:b7:af:bb:6b:17:53:92:5d:65:c8:12:
         a9:2e:c0:59:9d:d7:97:b0:12:df:95:dc:cb:01:fd:49:c1:fc:
         f8:d0:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:46 2025 by rpki-client