Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/649a3b1f-9811-3413-91bc-41b104e2161a.roa
File:                     649a3b1f-9811-3413-91bc-41b104e2161a.roa (raw, json)
Hash identifier:          YQwLUyriclBiHHmaMU/d/GaXdrjuXTtFiDRtZaWbE+4=
Subject key identifier:   1C:0B:EB:F7:E4:65:81:B7:51:2F:5C:F7:49:2A:6F:25:82:C4:CA:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE17CA2AC2415BC34EF717D1C
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/649a3b1f-9811-3413-91bc-41b104e2161a.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.151.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:7c:a2:ac:24:15:bc:34:ef:71:7d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=6510b4ed-df1e-4325-b79c-586a25418970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:de:f1:8f:6a:72:99:6d:8a:b4:0d:56:b1:
                    51:e2:bf:61:d7:6e:a1:37:31:5f:a0:fb:a0:96:d7:
                    27:69:ba:5c:05:ee:da:ef:7c:5b:34:4e:ad:f5:18:
                    c3:6b:fa:59:03:24:30:1d:a8:c4:8b:3e:ee:64:3e:
                    cd:2a:2d:31:ee:67:d3:fe:af:01:fb:d4:0b:a4:fa:
                    17:0d:13:47:7e:1f:71:b6:c3:13:04:a2:d1:54:7a:
                    bb:6e:51:9f:d7:0f:34:db:08:40:3e:e1:52:dc:2c:
                    75:da:61:e6:56:e2:78:7d:69:0d:c6:39:7f:08:4b:
                    df:d4:31:69:bb:e5:e0:04:3e:7f:d1:7b:5e:e6:ba:
                    b3:b7:be:6d:99:3b:ff:b7:ef:6d:6b:16:7e:6b:e3:
                    6a:77:fa:bd:90:e8:bc:c8:b5:fe:0a:ff:b5:65:ec:
                    45:a5:30:44:d1:84:c8:0e:be:cf:60:fc:cb:07:5e:
                    23:d4:44:07:f9:6e:3d:3b:b3:5c:f8:5e:89:14:e6:
                    6d:75:8b:ba:41:ea:6e:16:69:7b:ce:8a:a5:5f:b6:
                    25:d4:3e:e2:6d:5e:68:c7:e4:85:38:4c:fa:5d:9d:
                    00:67:ed:44:d6:f2:b1:e1:2e:24:0d:0b:6c:f9:0a:
                    e8:00:6d:a4:03:2e:dc:6c:49:42:a1:34:32:e9:e9:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0B:EB:F7:E4:65:81:B7:51:2F:5C:F7:49:2A:6F:25:82:C4:CA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/649a3b1f-9811-3413-91bc-41b104e2161a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:29:ca:cc:3a:ea:21:27:76:61:8d:60:f9:82:d1:b5:87:
         45:5c:0f:82:e9:01:27:1b:e6:af:47:06:7a:d3:d7:0e:15:c8:
         9c:6a:8e:68:b1:73:2d:8f:2f:0f:ff:d2:5c:b2:c9:2e:3e:14:
         db:93:91:2c:fb:ca:ed:14:76:45:0c:68:af:5f:2a:ee:f0:51:
         f5:b6:57:5b:48:d2:76:68:96:45:ce:86:b5:19:84:77:64:18:
         eb:9e:ee:c9:5d:3b:22:c8:12:3c:fc:45:2f:92:27:fc:19:8a:
         74:43:1b:ed:f4:f9:46:75:57:2e:08:a2:43:62:c6:7f:cd:04:
         e8:82:f7:ef:24:27:ac:28:51:05:8d:b2:3f:19:0e:62:95:1d:
         de:48:97:44:79:44:26:fb:67:d9:34:29:ce:65:01:13:63:0c:
         d9:9b:9f:d2:ef:c1:66:1e:f0:07:0f:6b:df:21:3e:21:bc:ed:
         2e:94:88:ab:b1:dd:c2:6b:0b:ac:27:8d:e7:35:a3:67:de:44:
         9b:bf:d9:7c:ff:26:d9:89:e0:ff:c6:c8:04:2c:11:58:21:dd:
         f1:03:2a:ca:3a:51:96:5c:33:0a:fb:48:c5:33:39:29:64:13:
         8e:a0:33:85:85:8d:37:51:25:60:25:f4:04:40:ca:2b:61:a2:
         de:8b:22:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7hfKKsJBW8NO9xfRwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMjE0NDIwOFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjUxMGI0ZWQtZGYxZS00MzI1LWI3OWMtNTg2YTI1NDE4OTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpve8Y9qcpltirQNVrFR4r9h126hNzFfoPug
ltcnabpcBe7a73xbNE6t9RjDa/pZAyQwHajEiz7uZD7NKi0x7mfT/q8B+9QLpPoX
DRNHfh9xtsMTBKLRVHq7blGf1w802whAPuFS3Cx12mHmVuJ4fWkNxjl/CEvf1DFp
u+XgBD5/0Xte5rqzt75tmTv/t+9taxZ+a+Nqd/q9kOi8yLX+Cv+1ZexFpTBE0YTI
Dr7PYPzLB14j1EQH+W49O7Nc+F6JFOZtdYu6QepuFml7zoqlX7Yl1D7ibV5ox+SF
OEz6XZ0AZ+1E1vKx4S4kDQts+QroAG2kAy7cbElCoTQy6en1CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwL6/fkZYG3US9c90kqbyWCxMo5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjQ5YTNiMWYtOTgxMS0z
NDEzLTkxYmMtNDFiMTA0ZTIxNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY5dAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADr8KcrMOuohJ3ZhjWD5gtG1h0VcD4LpAScb5q9HBnrT1w4VyJxqjmix
cy2PLw//0lyyyS4+FNuTkSz7yu0UdkUMaK9fKu7wUfW2V1tI0nZolkXOhrUZhHdk
GOue7sldOyLIEjz8RS+SJ/wZinRDG+30+UZ1Vy4IokNixn/NBOiC9+8kJ6woUQWN
sj8ZDmKVHd5Il0R5RCb7Z9k0Kc5lARNjDNmbn9LvwWYe8AcPa98hPiG87S6UiKux
3cJrC6wnjec1o2feRJu/2Xz/JtmJ4P/GyAQsEVgh3fEDKso6UZZcMwr7SMUzOSlk
E46gM4WFjTdRJWAl9ARAyithot6LIoU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:13 2025 by rpki-client