Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33913722-f639-3a3c-8860-69ca8aa43f67.roa
File:                     33913722-f639-3a3c-8860-69ca8aa43f67.roa (raw, json)
Hash identifier:          Ks8d74PaF8ugNG9bc/mwC56EpaKeT+D3CfGKQw0zVLw=
Subject key identifier:   E3:B5:FE:2C:26:70:8E:0F:83:9D:07:A3:EE:83:6F:D3:F3:0A:95:E4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96ABF739CE75512D92050400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33913722-f639-3a3c-8860-69ca8aa43f67.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:ab:f7:39:ce:75:51:2d:92:05:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=ea76345c-f730-44c1-9df6-8f22d6ce105b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:99:75:19:11:dd:4e:5f:03:51:54:be:c0:
                    b8:3c:8e:12:c3:f2:16:23:50:68:0b:fe:95:e5:d7:
                    bf:12:d0:79:01:10:71:08:d0:fe:ac:06:21:38:fa:
                    98:01:02:e9:df:09:4c:59:ac:ad:35:87:72:74:94:
                    37:69:91:02:dc:b7:6c:06:07:f1:0e:01:9f:2b:b4:
                    72:32:d3:0b:c0:d5:db:b1:d2:d6:a8:1f:90:02:97:
                    d8:d1:7d:bf:d4:aa:1a:60:14:5a:6d:51:1b:85:43:
                    40:57:79:1b:a2:4c:28:aa:b4:8c:10:91:81:3f:f8:
                    a9:e0:21:e7:9e:12:0c:e4:0a:d1:8b:ab:2e:66:65:
                    c0:52:f3:21:69:a4:dd:d3:f9:72:d5:74:ea:d3:86:
                    b3:b7:59:cb:c3:be:18:c0:1e:e6:a0:75:6e:10:a8:
                    9b:3e:70:07:a0:3d:00:b9:7e:2d:5b:68:7e:d6:7d:
                    71:37:1f:20:10:de:78:6c:3b:a6:5d:0c:58:48:d2:
                    ec:49:e9:26:b9:56:dd:d0:d8:09:63:8d:28:db:33:
                    64:de:46:92:95:af:50:f9:97:1a:3c:4c:6c:26:ad:
                    b8:05:43:d6:98:63:e7:f3:f0:53:e7:b0:2a:e2:6f:
                    30:61:a3:86:dd:6f:62:bb:d4:27:6f:1a:ed:0b:e5:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:FE:2C:26:70:8E:0F:83:9D:07:A3:EE:83:6F:D3:F3:0A:95:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33913722-f639-3a3c-8860-69ca8aa43f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:71:af:90:f6:2b:c8:51:0e:da:1b:8d:2c:6e:7f:63:2c:cc:
         1a:b8:3f:89:17:1e:16:23:d9:31:24:32:d1:2f:7b:e5:40:f7:
         07:45:5a:f6:61:06:ac:18:a5:88:0d:e3:e6:a9:ba:d2:70:95:
         03:80:8c:5c:ed:4c:48:0c:f2:5e:21:e1:aa:14:5d:25:1f:e7:
         28:13:fc:dd:a6:c5:6d:6c:d1:0c:e5:11:0c:ba:db:01:53:cd:
         e6:5d:19:e5:b9:1c:78:5a:82:71:60:21:6d:e0:30:3d:30:59:
         51:57:fc:86:52:48:69:bc:37:7b:8d:22:5a:aa:99:89:43:7f:
         81:9d:ab:9b:29:6e:c8:c8:24:29:7a:92:46:7e:85:aa:59:39:
         13:f5:11:e8:0e:90:a2:85:d7:5c:a3:76:90:8a:4a:4f:25:0a:
         41:93:9c:5c:3a:ae:74:8a:7e:fa:f1:fa:47:1b:c6:94:af:03:
         f8:66:1c:ea:ae:62:3d:8f:b4:08:b5:a0:84:e5:3f:7f:8e:e5:
         56:c0:f4:d3:8b:89:89:e6:b0:1f:f0:91:53:af:b5:6b:4e:af:
         a7:2d:3b:bb:dd:de:5e:40:a9:e5:11:38:6f:30:cc:4c:25:9f:
         a3:9e:5b:f2:99:bd:23:52:0c:f2:b1:02:9d:5a:5e:f7:c6:86:
         e0:6b:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:35 2025 by rpki-client