Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70479ddf-0675-324e-bd94-95ba18e9d9d8.roa
File:                     70479ddf-0675-324e-bd94-95ba18e9d9d8.roa (raw, json)
Hash identifier:          wLbThnGw0GdZESgJt2sFc6eCLtJTr6SG5oFNyuHHN1o=
Subject key identifier:   0E:6E:E2:B2:81:A6:6F:24:E0:01:3F:84:18:5F:7C:8B:F8:DC:4F:8B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A3C653773E70CEA3DCDF200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70479ddf-0675-324e-bd94-95ba18e9d9d8.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.141.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:3c:65:37:73:e7:0c:ea:3d:cd:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=9863727e-fd81-4ea1-b1c7-15d1c786fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:6f:36:4f:62:57:bc:19:10:f1:c2:6c:1d:
                    3d:9d:e2:cb:bd:41:5a:f5:9b:a3:cf:8e:75:4f:50:
                    7e:c6:6c:b4:77:96:c1:1a:d9:5a:07:09:5d:1a:c9:
                    fd:52:e6:34:ed:6d:27:bc:5a:d5:39:2e:64:26:c7:
                    c2:72:f5:ef:fb:71:f5:0a:e9:0c:a3:98:90:74:c4:
                    c5:e3:58:28:4e:49:2d:d0:1b:36:03:aa:c1:6f:6d:
                    4b:75:0c:1d:84:25:30:42:1c:f3:c9:4f:05:c7:fd:
                    b1:e7:bb:3d:f5:51:82:98:d4:51:0d:cf:27:e0:5f:
                    a7:44:6b:8f:11:7f:68:ad:d2:34:75:4f:72:28:ee:
                    ec:c9:a3:ad:3e:9f:08:35:fc:b8:b5:6e:a5:de:f3:
                    f3:29:d8:b5:c8:88:da:c3:66:ca:99:2c:ac:96:90:
                    b6:24:e0:f2:8e:0e:df:f6:39:31:29:57:1b:6b:e8:
                    ac:a1:cb:56:59:00:2c:6a:b0:c4:e7:b7:e9:60:47:
                    70:2f:52:51:f0:27:c5:3f:0f:b1:df:5d:92:fb:d1:
                    48:a1:ad:37:65:62:2a:9a:c3:d1:32:76:8f:f7:84:
                    82:ca:83:dc:ea:32:10:b4:35:1b:fb:3e:20:4a:a9:
                    53:6f:bd:00:6a:2e:8d:2c:d9:82:36:64:59:5f:13:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:E2:B2:81:A6:6F:24:E0:01:3F:84:18:5F:7C:8B:F8:DC:4F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70479ddf-0675-324e-bd94-95ba18e9d9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.141.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:dc:99:bb:1d:5e:9e:2f:db:c7:b9:e2:d6:66:fe:10:b6:d8:
         b1:ee:26:6a:39:6d:0e:e7:e7:f0:39:98:20:d1:05:0d:26:64:
         4c:1a:f7:00:6b:2e:9b:32:4e:23:4a:fe:47:50:b1:b0:a2:79:
         fd:d1:e6:f0:24:be:56:7c:fe:e7:c0:46:b5:95:dc:ee:8a:33:
         20:3f:cf:d1:2a:63:9f:ca:9e:0e:8b:78:a3:5e:75:28:7e:57:
         04:38:37:bf:15:a2:32:4b:9f:4f:56:f1:45:dc:3f:cf:90:c4:
         24:44:3d:32:ed:30:43:e0:56:77:23:af:4a:b9:34:1c:56:f0:
         13:d7:8c:95:f6:33:93:ae:67:84:38:18:65:e0:83:b5:34:55:
         6d:e9:a0:37:bd:e9:6e:d7:6e:61:d3:f7:66:b7:41:12:a4:31:
         c4:f9:3b:cc:26:f0:8e:75:e3:0f:39:fb:54:09:e6:9c:43:f8:
         3d:f0:d3:16:f3:9f:d9:0c:67:2c:bd:bc:30:3a:51:d4:67:be:
         6d:4d:3a:04:91:31:ea:19:9e:84:8f:0a:7d:e9:d7:8b:25:43:
         88:4d:3d:0f:ce:ba:25:9a:b4:eb:21:e7:ec:8d:63:d9:2f:0d:
         92:73:75:93:82:e1:02:df:dd:47:92:8e:20:38:ea:a2:c3:00:
         b4:d2:a3:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1aPGU3c+cM6j3N8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTg2MzcyN2UtZmQ4MS00ZWExLWIxYzctMTVkMWM3ODZmZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdvNk9iV7wZEPHCbB09neLLvUFa9Zujz451
T1B+xmy0d5bBGtlaBwldGsn9UuY07W0nvFrVOS5kJsfCcvXv+3H1CukMo5iQdMTF
41goTkkt0Bs2A6rBb21LdQwdhCUwQhzzyU8Fx/2x57s99VGCmNRRDc8n4F+nRGuP
EX9ordI0dU9yKO7syaOtPp8INfy4tW6l3vPzKdi1yIjaw2bKmSyslpC2JODyjg7f
9jkxKVcba+isoctWWQAsarDE57fpYEdwL1JR8CfFPw+x312S+9FIoa03ZWIqmsPR
MnaP94SCyoPc6jIQtDUb+z4gSqlTb70Aai6NLNmCNmRZXxPxwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5u4rKBpm8k4AE/hBhffIv43E+LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzA0NzlkZGYtMDY3NS0z
MjRlLWJkOTQtOTViYTE4ZTlkOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY40AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/cmbsdXp4v28e54tZm/hC22LHuJmo5bQ7n5/A5mCDRBQ0mZEwa9wBr
LpsyTiNK/kdQsbCief3R5vAkvlZ8/ufARrWV3O6KMyA/z9EqY5/Kng6LeKNedSh+
VwQ4N78VojJLn09W8UXcP8+QxCREPTLtMEPgVncjr0q5NBxW8BPXjJX2M5OuZ4Q4
GGXgg7U0VW3poDe96W7XbmHT92a3QRKkMcT5O8wm8I514w85+1QJ5pxD+D3w0xbz
n9kMZyy9vDA6UdRnvm1NOgSRMeoZnoSPCn3p14slQ4hNPQ/OuiWatOsh5+yNY9kv
DZJzdZOC4QLf3UeSjiA46qLDALTSo7k=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:16 2025 by rpki-client