Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52d00434-c01c-377e-b842-2f31aae9550b.roa
File:                     52d00434-c01c-377e-b842-2f31aae9550b.roa (raw, json)
Hash identifier:          48sqnogjIljuD2T/f1J8lGthgaj1BEkcuofP/v4FdxA=
Subject key identifier:   72:3C:FE:B5:B1:B5:14:E6:7D:8E:8A:ED:F0:95:BA:6A:B6:F2:50:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBC861FB7CE78657BD1B13C46
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52d00434-c01c-377e-b842-2f31aae9550b.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.75.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:86:1f:b7:ce:78:65:7b:d1:b1:3c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=a8f322bf-4b1e-4cb7-9901-a88e103189dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:30:47:c3:74:fb:77:0f:ef:0c:41:e0:43:aa:
                    6c:f2:04:81:9d:57:f4:c9:d6:f4:a7:3c:ab:fc:58:
                    63:5d:eb:51:8a:27:dc:55:61:72:ab:54:de:77:b3:
                    26:70:e6:be:5c:08:b4:80:6d:35:74:1e:11:57:01:
                    f4:f8:c1:43:1a:71:f2:47:7f:0e:da:4d:0a:df:da:
                    92:5c:c1:27:48:4b:74:bb:6d:e7:eb:03:5a:43:89:
                    9e:03:f9:00:93:65:90:aa:f5:3e:44:13:60:36:c5:
                    54:22:df:24:5c:b3:3d:ef:58:98:45:2c:9e:8d:3f:
                    eb:a7:5a:05:fd:5d:6d:ab:40:07:55:37:cc:84:2c:
                    d0:25:49:5c:3f:13:20:be:48:bd:42:13:3c:34:91:
                    42:61:3b:8b:b8:90:e4:11:b0:18:d4:f2:f7:6d:1e:
                    b5:15:51:26:cb:04:47:cc:4b:a4:3b:9d:44:f8:e3:
                    48:16:98:cc:50:35:34:3d:87:90:9c:5c:08:5f:f6:
                    06:81:a5:ff:9c:0b:2c:a8:9c:9a:c1:9b:77:07:b4:
                    c2:31:f4:3b:a7:72:b7:3a:83:db:8e:f0:a6:5e:9c:
                    7e:8a:90:06:9b:6a:3b:77:d4:91:f7:6a:e9:8a:dc:
                    00:6f:ca:a5:50:4a:a5:73:ae:66:c1:dd:cc:b8:39:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:FE:B5:B1:B5:14:E6:7D:8E:8A:ED:F0:95:BA:6A:B6:F2:50:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52d00434-c01c-377e-b842-2f31aae9550b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.75.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ec:29:8c:bc:50:39:7e:5d:e5:a7:ee:e0:c6:b6:89:5e:70:
         fc:ac:8d:6e:8b:eb:bf:72:ca:7a:4c:b0:bb:83:7b:a1:79:b0:
         f1:8c:d2:37:0e:a0:64:13:eb:19:5e:a9:f2:f1:28:6b:eb:88:
         41:e5:85:65:22:e8:9f:96:45:75:9b:78:c9:a7:c2:e7:0f:88:
         c8:f1:c3:01:9e:a2:2e:55:60:4e:2f:2e:ac:c2:0c:db:74:83:
         e3:f8:58:b8:8d:b7:a1:49:22:18:61:31:73:eb:8a:9a:65:97:
         c7:94:bc:e0:bd:d1:42:be:2e:25:39:dd:24:de:7c:b3:e8:51:
         13:14:86:f1:8c:e1:8d:49:d0:02:02:cc:28:78:70:22:52:cb:
         0e:47:26:b7:97:7e:9f:f7:84:0a:a9:93:1a:56:88:07:87:bd:
         f5:e1:1d:bb:7b:f9:c9:57:07:be:26:90:ee:25:fd:dc:84:c9:
         0a:dc:85:e4:87:94:dd:7b:53:26:31:f5:6f:b6:e2:86:3e:38:
         48:77:e9:b9:df:cb:da:8f:3b:ca:76:09:f5:d5:ef:29:86:25:
         3d:04:bf:05:f8:d0:ee:60:5f:97:79:8f:0f:9b:62:fd:b6:9e:
         bf:ef:35:73:79:21:36:0b:88:ee:68:4b:78:3a:ec:57:18:a7:
         27:31:59:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD68hh+3znhle9GxPEYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YThmMzIyYmYtNGIxZS00Y2I3LTk5MDEtYTg4ZTEwMzE4OWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBHw3T7dw/vDEHgQ6ps8gSBnVf0ydb0pzyr
/FhjXetRiifcVWFyq1Ted7MmcOa+XAi0gG01dB4RVwH0+MFDGnHyR38O2k0K39qS
XMEnSEt0u23n6wNaQ4meA/kAk2WQqvU+RBNgNsVUIt8kXLM971iYRSyejT/rp1oF
/V1tq0AHVTfMhCzQJUlcPxMgvki9QhM8NJFCYTuLuJDkEbAY1PL3bR61FVEmywRH
zEukO51E+ONIFpjMUDU0PYeQnFwIX/YGgaX/nAssqJyawZt3B7TCMfQ7p3K3OoPb
jvCmXpx+ipAGm2o7d9SR92rpitwAb8qlUEqlc65mwd3MuDkhdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHI8/rWxtRTmfY6K7fCVumq28lAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTJkMDA0MzQtYzAxYy0z
NzdlLWI4NDItMmYzMWFhZTk1NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY0vAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfsKYy8UDl+XeWn7uDGtolecPysjW6L679yynpMsLuDe6F5sPGM0jcO
oGQT6xleqfLxKGvriEHlhWUi6J+WRXWbeMmnwucPiMjxwwGeoi5VYE4vLqzCDNt0
g+P4WLiNt6FJIhhhMXPrippll8eUvOC90UK+LiU53STefLPoURMUhvGM4Y1J0AIC
zCh4cCJSyw5HJreXfp/3hAqpkxpWiAeHvfXhHbt7+clXB74mkO4l/dyEyQrcheSH
lN17UyYx9W+24oY+OEh36bnfy9qPO8p2CfXV7ymGJT0EvwX40O5gX5d5jw+bYv22
nr/vNXN5ITYLiO5oS3g67FcYpycxWWE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:24 2025 by rpki-client