Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b6538e6-6814-33fa-a0d2-961be488e90a.roa
File:                     6b6538e6-6814-33fa-a0d2-961be488e90a.roa (raw, json)
Hash identifier:          Dxq9dM4KnriUYxde9UbK01LdTDfCQe/LON2tAkP3MPU=
Subject key identifier:   00:90:85:45:59:B9:DA:51:69:0B:86:4E:65:86:CE:06:A4:37:EB:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F80BB048F31F00C922C7C0700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b6538e6-6814-33fa-a0d2-961be488e90a.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.150.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:bb:04:8f:31:f0:0c:92:2c:7c:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=815a8fb8-01f7-48ec-9ee5-670b6ebf036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:76:e0:2a:56:80:82:7a:ae:e1:a3:55:4f:
                    f3:59:43:dc:8d:1e:99:21:6b:1e:12:d6:cd:77:af:
                    e9:7e:86:7c:9c:c5:ea:3c:69:82:b1:9a:95:24:bb:
                    85:8b:78:39:18:9c:32:2c:a1:65:51:73:5d:bf:09:
                    e3:b6:62:29:77:df:f5:b0:b1:a3:7c:19:c6:c3:88:
                    e2:1a:88:13:8b:b3:9b:a8:25:4a:6b:24:2c:fd:cd:
                    ac:e8:e0:4c:d9:b7:36:5a:29:4e:c3:68:47:fc:e2:
                    d8:51:a9:e5:89:8b:05:ee:4a:c2:0f:94:a7:cc:95:
                    51:26:d3:41:a9:72:2e:bd:14:c5:f3:b1:7f:8d:92:
                    95:69:eb:f0:16:1a:d6:9d:a3:cf:ee:78:b3:63:4b:
                    13:2b:fe:30:66:cf:a0:43:04:a5:7b:ab:4d:8b:c9:
                    59:19:39:c9:68:0c:18:5a:2b:23:3f:ef:e6:bf:2f:
                    55:5f:9d:89:75:70:e9:49:86:38:73:dd:1f:a7:a5:
                    0d:9b:1b:61:54:21:a1:75:41:50:ed:e6:fa:01:ce:
                    fd:4f:db:d1:2f:43:58:45:59:f3:b9:a9:b2:9c:c5:
                    e6:63:e1:0d:78:39:23:b1:c5:ad:5b:2e:11:88:39:
                    40:87:2c:37:12:a2:35:03:82:0a:e1:75:fe:7b:71:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:85:45:59:B9:DA:51:69:0B:86:4E:65:86:CE:06:A4:37:EB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b6538e6-6814-33fa-a0d2-961be488e90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:76:45:51:3d:46:53:22:7d:1b:6d:96:64:04:35:1d:f1:
         66:ef:ee:76:c0:eb:20:dc:c6:fa:07:5c:19:50:93:ed:ff:71:
         fa:b0:df:37:6d:75:dc:2d:a6:4e:9d:8f:12:1c:63:8a:1b:1b:
         bf:55:64:ed:33:c1:40:29:33:62:35:39:cb:45:ef:d3:15:1b:
         b1:83:e3:89:e3:8e:02:53:0a:98:51:cd:9b:00:82:43:3d:1b:
         a5:63:3a:69:ff:83:58:fc:d2:84:06:3b:0c:4b:c7:20:fc:9b:
         9a:96:d0:f4:77:d7:28:e1:0a:84:db:e7:f8:85:20:6d:a0:2a:
         a8:21:9c:b2:44:04:4e:01:f8:ef:bc:b6:10:ee:0f:1b:15:11:
         de:4e:f2:47:bd:21:80:ac:8b:3d:76:75:11:a2:32:fa:0a:a4:
         b3:84:13:53:81:f6:c7:ad:da:bf:c4:77:bc:52:af:8b:62:ff:
         5a:29:1f:0c:20:8b:82:ef:b9:46:ad:33:2d:5b:32:ac:33:85:
         e3:e4:c7:4d:e3:71:59:51:21:50:06:b5:56:b1:3d:f3:d5:df:
         92:46:40:f5:b3:bd:4e:d7:92:36:f4:09:ee:3f:99:d1:d4:a0:
         c0:c6:ff:f0:56:1f:5a:ac:b4:02:47:94:16:e2:bd:bf:1b:42:
         4b:a7:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:23 2025 by rpki-client