Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/390a336c-5d0d-36c1-9993-54e1c74e297e.roa
File:                     390a336c-5d0d-36c1-9993-54e1c74e297e.roa (raw, json)
Hash identifier:          zzLjzKzefXDo838pRMZJbRxDm4tbta5H+ULyvdmjvUI=
Subject key identifier:   8B:9F:EE:99:31:BD:AE:BD:CF:72:FB:4F:5F:8F:8E:8B:CB:23:D7:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1DCD9754DEFF75991A772700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/390a336c-5d0d-36c1-9993-54e1c74e297e.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1d:cd:97:54:de:ff:75:99:1a:77:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=ee059151-3384-4adc-a907-6c452e075b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:1a:11:e6:43:a4:00:0f:21:07:0a:84:53:
                    ce:14:e6:9f:46:27:f2:44:7c:5c:fb:9e:8b:28:dd:
                    2d:5f:a5:2d:80:03:3f:5c:b0:ca:38:11:70:5f:17:
                    97:85:1e:6c:19:e0:6b:93:21:90:07:3e:46:5a:08:
                    bf:fc:bd:ea:bc:f5:6e:f0:87:b4:50:51:94:69:77:
                    e5:f3:9d:5c:7c:0d:a8:01:f8:88:cf:65:da:f4:29:
                    18:30:34:04:d1:76:72:30:dc:71:08:41:60:e9:6e:
                    86:13:25:16:84:96:7c:60:35:b3:ab:0e:f9:e6:cd:
                    62:a5:70:05:aa:e6:6d:6e:67:4a:7f:dd:de:3e:f8:
                    29:3e:8e:27:da:35:28:41:62:ae:fa:00:b5:9e:41:
                    ea:39:01:4e:5f:48:e2:e0:b3:b6:4b:e8:50:80:84:
                    8b:55:5c:cf:ad:d6:e5:0b:30:95:c3:40:43:32:d2:
                    b2:15:af:11:9a:34:a5:37:2c:8e:3b:38:54:7f:7c:
                    d1:8f:7e:af:c5:09:4c:ab:21:fe:78:bf:96:b3:b1:
                    ac:40:7f:e2:c6:08:1a:d3:38:54:d5:a5:a8:71:40:
                    bc:24:41:5a:21:4f:c7:19:af:ef:fb:1e:09:ad:a6:
                    5a:6b:62:d8:55:c0:fa:f9:65:7e:ca:c1:9e:40:d3:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:EE:99:31:BD:AE:BD:CF:72:FB:4F:5F:8F:8E:8B:CB:23:D7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/390a336c-5d0d-36c1-9993-54e1c74e297e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:45:cf:cd:a7:62:b4:8d:13:a2:7a:7f:70:b7:24:15:07:
         01:c6:b1:76:6c:f4:86:ac:7c:f1:26:80:69:5d:c5:33:6c:41:
         07:3a:72:50:07:ba:8d:78:8f:7b:dd:75:02:34:98:2b:dc:97:
         b9:eb:83:b7:b2:d7:3d:45:ea:45:4e:01:86:df:9a:4f:70:01:
         66:f4:7e:d2:94:5b:b1:f3:10:09:8f:a4:ee:72:01:38:a3:3b:
         f9:53:e7:a3:f2:df:19:41:51:26:2a:5f:fa:3f:94:36:42:7f:
         0d:f7:17:3f:c6:dd:07:4d:bc:41:7f:eb:e0:d4:cd:8c:15:a0:
         d6:1e:00:33:75:04:10:bb:2c:87:eb:73:22:91:a5:68:4d:e9:
         47:35:da:3b:67:07:6a:0a:9f:e8:ea:13:ac:01:bf:46:87:1c:
         22:74:b1:86:ad:e7:5c:e1:ff:2f:21:c1:98:12:1c:80:65:0f:
         89:8a:80:8c:99:89:ca:f7:93:69:9b:4b:a8:64:64:1d:f3:3a:
         2c:6c:14:eb:bb:ed:d4:8a:cd:e9:38:2f:8a:8b:81:fc:d6:58:
         d5:c7:fb:e8:cb:74:a0:03:7c:9e:d8:f4:57:19:01:b6:ba:d1:
         a4:5e:ef:3e:8d:ae:82:af:35:8a:31:42:53:e4:9c:72:41:db:
         d2:6e:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:40 2025 by rpki-client