Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/444348eb-db48-3793-ab30-4704d1420891.roa
File:                     444348eb-db48-3793-ab30-4704d1420891.roa (raw, json)
Hash identifier:          ssSv+NwPOhng+P4FNao37xHWwpkAV7PcHJRw+XH80Ps=
Subject key identifier:   7D:C3:2E:68:13:EF:9B:75:78:84:82:D9:4E:5D:5C:D0:E5:B6:B8:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F060CA26ABF0C6E8241EE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/444348eb-db48-3793-ab30-4704d1420891.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.77.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:06:0c:a2:6a:bf:0c:6e:82:41:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=2b36e53b-60ae-44d1-98d9-c036a39385f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:1b:a1:9a:9f:2d:7f:5c:ee:fa:55:a0:5e:
                    cc:20:c8:4a:48:1c:75:86:64:c4:c2:fc:3e:76:14:
                    45:27:a7:b5:49:ac:a6:1f:7d:b9:2a:64:db:60:21:
                    39:59:2d:d6:aa:ba:0f:80:1a:b8:b9:ed:0d:a4:84:
                    1f:1f:e8:fc:5d:60:f0:71:52:df:eb:f1:34:d1:4b:
                    ab:e2:85:c5:49:24:2e:af:27:d4:a0:29:b6:7f:aa:
                    4f:4c:c6:8e:92:46:a2:40:84:c4:86:6c:a1:98:9d:
                    80:bb:a2:f7:4b:ca:1e:6f:5d:74:92:1a:7e:4e:1a:
                    5d:79:41:49:2a:88:cf:41:01:6e:c0:ab:6d:df:d7:
                    5e:8d:20:14:af:30:a1:c4:f1:7c:d1:dc:05:ce:20:
                    68:b6:8f:4e:b1:03:3a:8f:60:3d:51:90:73:4c:6a:
                    13:d9:b3:ca:7d:22:c0:26:94:0c:d1:22:0c:53:ec:
                    42:e2:41:86:87:60:51:ed:65:80:cf:e0:72:d7:83:
                    bd:6d:87:3b:df:b1:15:e0:c0:3c:88:6c:41:f1:cb:
                    67:c3:19:dc:19:62:16:2b:56:42:f8:6b:db:d7:c3:
                    9b:16:44:b4:d0:81:2d:27:74:9d:a2:41:28:d7:80:
                    16:76:40:aa:45:f2:87:a1:18:83:4f:65:99:64:19:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:2E:68:13:EF:9B:75:78:84:82:D9:4E:5D:5C:D0:E5:B6:B8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/444348eb-db48-3793-ab30-4704d1420891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:19:39:ac:e5:c7:e9:d6:e2:e9:1b:7f:8f:31:b8:07:74:df:
         48:b3:6c:7f:2a:25:f0:c0:70:1d:71:51:c3:3a:b2:f8:14:e0:
         76:00:28:d6:a1:20:a0:6f:46:77:e7:33:46:a0:21:1c:c1:94:
         95:bf:86:99:fe:e1:84:00:0b:bb:32:36:6b:87:8f:fd:4e:25:
         18:21:cb:2d:09:79:73:04:21:fe:5b:99:cf:dc:b1:29:26:27:
         9b:c0:cd:46:df:39:f5:55:36:c6:00:14:7f:07:75:9a:e8:f5:
         40:04:37:bc:79:33:af:92:21:d6:6c:31:e3:0f:4f:d0:5f:f7:
         a3:49:c8:73:92:44:bd:a8:c3:b1:61:48:ac:f1:bd:f9:04:c8:
         97:3b:a6:12:5d:30:45:90:7c:24:0c:3c:a6:2e:09:b5:62:47:
         f1:89:fe:05:53:c6:d3:de:bb:fc:00:4e:3f:fd:94:12:e4:e9:
         27:65:f1:48:b4:2d:67:5d:63:04:dd:15:93:26:6c:11:a3:b7:
         0b:76:20:e4:b1:da:86:28:17:a9:19:a1:95:e9:79:a1:f2:67:
         7c:e7:e1:7d:a9:4b:77:d3:f5:c5:6d:da:ee:72:d2:57:d2:6e:
         c8:cc:7e:20:e0:ca:c0:4f:07:f6:26:24:bd:48:94:94:74:d6:
         af:f7:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:28 2025 by rpki-client