Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ba1d08a-d06a-38fc-ab9a-242be02e8169.roa
File:                     4ba1d08a-d06a-38fc-ab9a-242be02e8169.roa (raw, json)
Hash identifier:          5CwE2K/bvbktAiNcXnnm3dUBTR4Oh1NkePagyVf/oyg=
Subject key identifier:   3F:32:DB:46:ED:F0:38:48:02:3A:B0:C7:82:EB:0B:1E:1F:B1:2C:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401DCB6060702EC3C57CF4B480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ba1d08a-d06a-38fc-ab9a-242be02e8169.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        99.83.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:cb:60:60:70:2e:c3:c5:7c:f4:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=900b9ea9-7db9-4f0a-89ed-4e6204649862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:a5:fa:42:ef:7c:82:a0:11:44:0d:38:c9:
                    81:51:4b:c8:9d:3c:cd:cc:97:df:89:13:4b:0f:06:
                    eb:c4:5a:4f:e6:aa:e8:22:13:ca:80:13:6c:dc:69:
                    0e:2f:f9:3b:db:e9:1e:40:c5:a6:85:7d:4e:d7:1a:
                    f4:12:2d:64:77:7d:63:f4:6d:5f:f1:6c:d4:99:f2:
                    8e:3b:ba:d6:3a:1f:aa:55:59:ba:6f:00:7c:35:6f:
                    d3:7f:a6:4a:bf:51:79:e7:50:d2:3c:14:95:30:be:
                    e5:52:c9:6e:23:67:88:0a:24:af:43:f7:95:c6:ca:
                    e1:fe:29:0c:44:58:cf:8a:0b:7c:ff:a9:cf:b7:11:
                    50:1b:99:5d:86:e6:d9:db:ba:87:93:3b:cf:06:d3:
                    4a:5d:fb:ef:2c:9b:65:ee:bf:f3:39:df:7a:67:ed:
                    28:f6:6f:54:6f:00:6a:c2:fe:c8:38:28:31:47:01:
                    10:65:e1:31:91:64:1b:23:aa:ed:e3:40:1c:f7:93:
                    a1:db:03:11:1c:66:16:35:83:9f:6d:4d:e5:93:66:
                    82:97:c9:05:80:3f:86:a2:30:e0:da:5a:2c:d5:31:
                    9c:4d:1c:af:1d:72:ae:c4:9b:2c:a8:c7:8e:1d:97:
                    bd:7b:75:62:b4:65:ea:a9:f2:04:2a:17:c0:8a:23:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:DB:46:ED:F0:38:48:02:3A:B0:C7:82:EB:0B:1E:1F:B1:2C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ba1d08a-d06a-38fc-ab9a-242be02e8169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:2f:f5:e1:cf:b6:b6:cb:37:ec:5e:c4:89:b6:cc:70:8c:
         ab:08:05:59:dd:e4:a2:5f:62:65:1c:bc:d5:32:f5:ca:85:91:
         14:8e:a5:70:7f:e6:95:70:67:cd:01:5a:f3:ce:a4:ef:87:e2:
         48:9b:bb:e6:14:a4:9a:39:6f:23:23:7b:ee:61:83:e1:78:8c:
         76:9d:6b:db:44:ba:7a:c9:d1:a8:0d:3b:03:0d:d9:fe:8c:f8:
         9e:82:c5:36:eb:82:a1:4c:bf:6c:a3:dd:58:05:1b:3d:87:6c:
         9f:3c:31:08:60:42:57:de:8c:73:a2:15:35:d2:12:a0:de:98:
         5d:7b:78:46:30:83:7f:4b:e7:0b:57:0b:3e:61:71:3c:9d:c1:
         bd:47:79:4d:2d:b5:ba:1d:7c:d5:1d:e1:98:0d:fc:02:d9:4e:
         31:45:3b:85:6a:85:90:64:5e:5e:91:58:2d:a7:0c:46:a2:4a:
         f6:79:79:42:13:fe:30:29:e7:b9:83:0c:49:f0:0b:36:db:bf:
         40:27:71:9f:a5:69:2d:aa:83:f7:33:0e:28:34:5e:b1:5a:79:
         f4:36:5a:8e:9f:4f:ea:86:87:b5:7b:6f:7b:92:3e:65:25:fe:
         bb:47:3b:9a:24:fb:fb:06:f8:3a:d7:dc:46:27:6b:02:36:c1:
         ee:fe:73:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAdy2BgcC7DxXz0tIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTAwYjllYTktN2RiOS00ZjBhLTg5ZWQtNGU2MjA0NjQ5ODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWl+kLvfIKgEUQNOMmBUUvInTzNzJffiRNL
DwbrxFpP5qroIhPKgBNs3GkOL/k72+keQMWmhX1O1xr0Ei1kd31j9G1f8WzUmfKO
O7rWOh+qVVm6bwB8NW/Tf6ZKv1F551DSPBSVML7lUsluI2eICiSvQ/eVxsrh/ikM
RFjPigt8/6nPtxFQG5ldhubZ27qHkzvPBtNKXfvvLJtl7r/zOd96Z+0o9m9UbwBq
wv7IOCgxRwEQZeExkWQbI6rt40Ac95Oh2wMRHGYWNYOfbU3lk2aCl8kFgD+GojDg
2los1TGcTRyvHXKuxJssqMeOHZe9e3VitGXqqfIEKhfAiiON+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8y20bt8DhIAjqwx4LrCx4fsSxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGJhMWQwOGEtZDA2YS0z
OGZjLWFiOWEtMjQyYmUwMmU4MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY1NAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETdL/Xhz7a2yzfsXsSJtsxwjKsIBVnd5KJfYmUcvNUy9cqFkRSOpXB/
5pVwZ80BWvPOpO+H4kibu+YUpJo5byMje+5hg+F4jHada9tEunrJ0agNOwMN2f6M
+J6CxTbrgqFMv2yj3VgFGz2HbJ88MQhgQlfejHOiFTXSEqDemF17eEYwg39L5wtX
Cz5hcTydwb1HeU0ttbodfNUd4ZgN/ALZTjFFO4VqhZBkXl6RWC2nDEaiSvZ5eUIT
/jAp57mDDEnwCzbbv0AncZ+laS2qg/czDig0XrFaefQ2Wo6fT+qGh7V7b3uSPmUl
/rtHO5ok+/sG+DrX3EYnawI2we7+c3M=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:45 2025 by rpki-client