Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b31fa00-9a22-3669-b244-8b603fab7c7a.roa
File:                     5b31fa00-9a22-3669-b244-8b603fab7c7a.roa (raw, json)
Hash identifier:          WF2ceb0ByJkUkVo1deRjYBKTkdtvHVf9nLZM3sjSYNI=
Subject key identifier:   C8:B9:7A:5B:42:41:0D:85:DA:07:08:ED:E6:E1:F0:80:D9:64:5E:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5A50F14DE37D0BD1AD1A7280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b31fa00-9a22-3669-b244-8b603fab7c7a.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.85.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:50:f1:4d:e3:7d:0b:d1:ad:1a:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=1c7476b8-3586-4f60-a297-a1f17c02f4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:04:5e:2d:a1:cb:0a:f2:cd:10:e3:16:12:
                    f5:a6:d7:ff:fc:63:d2:6d:93:56:81:a2:e9:8c:d4:
                    76:07:85:c3:44:d5:54:0c:11:ab:c4:cd:b7:c8:1d:
                    2c:a8:dd:4c:5c:54:c7:c5:cd:36:c0:0d:33:dc:04:
                    b0:5e:b3:9c:80:71:73:61:b0:73:87:80:21:6d:bf:
                    7e:8d:7f:b7:cf:d8:4d:46:32:c7:13:da:4d:cb:8c:
                    1b:18:5b:b1:29:be:27:cd:de:2d:75:f0:90:b1:f1:
                    3a:96:a8:c3:cb:47:f9:1c:82:0d:58:ad:52:f5:94:
                    e3:b5:54:81:86:72:19:5c:e0:42:cf:91:e2:05:2c:
                    79:d2:ac:64:35:0c:83:8a:11:7a:37:37:2d:20:f3:
                    ac:03:cc:b7:6b:84:36:77:1b:5e:51:01:2c:2c:0a:
                    49:38:fd:08:68:d3:12:80:84:f8:3c:b1:e8:5d:9e:
                    07:27:39:89:0a:68:f9:d7:91:23:92:30:94:f4:15:
                    9a:b5:7d:a5:c8:73:0f:da:85:8a:b7:98:d8:ae:ba:
                    04:89:63:7f:81:6f:7c:41:72:d3:ef:68:ce:1c:0b:
                    e3:6b:6d:bb:2a:3c:ab:37:ce:43:a7:b8:e4:90:b6:
                    1c:ea:7c:7a:d8:91:92:78:f9:89:eb:8d:19:c8:f9:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:7A:5B:42:41:0D:85:DA:07:08:ED:E6:E1:F0:80:D9:64:5E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b31fa00-9a22-3669-b244-8b603fab7c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:c3:43:db:11:b1:fc:a9:2b:02:2a:15:00:e5:d3:46:38:
         ff:31:a3:52:b6:3a:54:86:0d:70:d1:19:b1:fe:a9:77:b1:f8:
         10:0c:9e:84:a1:8d:a3:4b:70:33:7b:ee:31:00:64:63:2b:5d:
         09:98:51:d9:51:72:4e:9a:7b:dd:2e:6a:a6:1c:3f:06:d4:7a:
         bc:b0:1c:a5:0a:7a:94:ed:8b:bc:db:05:e4:45:2b:f8:7f:83:
         85:2d:99:6c:57:39:f6:b5:5c:bb:15:ef:d5:b6:de:da:31:ee:
         94:3e:60:38:f8:ef:cb:88:53:7e:d9:cc:ad:51:f4:b0:70:b5:
         0e:90:66:2e:b2:a8:99:20:80:fa:e8:27:e3:c8:75:24:00:d6:
         a3:84:89:78:4a:a2:7e:cb:f6:7c:8b:3d:44:a9:7b:b7:29:e9:
         6f:dc:d8:cc:a0:37:0d:4c:b7:d1:46:e5:5a:f4:17:1c:b5:43:
         41:f1:e5:c2:e1:92:b5:a4:cd:5a:a0:23:c0:03:1b:91:2c:20:
         b7:d8:93:bd:c2:8a:33:63:44:2a:a1:0f:fa:2b:77:34:be:2f:
         26:7c:92:5a:b3:d8:20:c6:f5:7b:2a:a6:15:73:b9:cf:1b:f1:
         e1:31:16:5a:77:0a:12:38:30:10:9c:43:40:4e:70:b0:fb:76:
         a3:40:82:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9aUPFN430L0a0acoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMzEyMDAwMFoXDTIyMTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MWM3NDc2YjgtMzU4Ni00ZjYwLWEyOTctYTFmMTdjMDJmNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJEEXi2hywryzRDjFhL1ptf//GPSbZNWgaLp
jNR2B4XDRNVUDBGrxM23yB0sqN1MXFTHxc02wA0z3ASwXrOcgHFzYbBzh4Ahbb9+
jX+3z9hNRjLHE9pNy4wbGFuxKb4nzd4tdfCQsfE6lqjDy0f5HIINWK1S9ZTjtVSB
hnIZXOBCz5HiBSx50qxkNQyDihF6NzctIPOsA8y3a4Q2dxteUQEsLApJOP0IaNMS
gIT4PLHoXZ4HJzmJCmj515EjkjCU9BWatX2lyHMP2oWKt5jYrroEiWN/gW98QXLT
72jOHAvja227KjyrN85Dp7jkkLYc6nx62JGSePmJ640ZyPku5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMi5eltCQQ2F2gcI7ebh8IDZZF6ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWIzMWZhMDAtOWEyMi0z
NjY5LWIyNDQtOGI2MDNmYWI3YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb0w0PbEbH8qSsCKhUA5dNGOP8xo1K2OlSGDXDRGbH+qXex+BAMnoSh
jaNLcDN77jEAZGMrXQmYUdlRck6ae90uaqYcPwbUerywHKUKepTti7zbBeRFK/h/
g4UtmWxXOfa1XLsV79W23tox7pQ+YDj478uIU37ZzK1R9LBwtQ6QZi6yqJkggPro
J+PIdSQA1qOEiXhKon7L9nyLPUSpe7cp6W/c2MygNw1Mt9FG5Vr0Fxy1Q0Hx5cLh
krWkzVqgI8ADG5EsILfYk73CijNjRCqhD/ordzS+LyZ8klqz2CDG9XsqphVzuc8b
8eExFlp3ChI4MBCcQ0BOcLD7dqNAguw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:33 2025 by rpki-client