Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72ae03f7-f63f-37dd-a67c-317d29f99b2a.roa
File:                     72ae03f7-f63f-37dd-a67c-317d29f99b2a.roa (raw, json)
Hash identifier:          sYktR3b3sv0lrMve9mS0ogObdV22figSiKsTf6lFcNE=
Subject key identifier:   C3:C9:09:31:81:30:16:FF:B4:06:B0:25:A4:14:BA:67:ED:01:BF:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F786AACED098E7E33F93540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72ae03f7-f63f-37dd-a67c-317d29f99b2a.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        99.77.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:78:6a:ac:ed:09:8e:7e:33:f9:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=8799a5f2-023f-4d14-8aaa-dec1d120f35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:0d:08:53:51:fe:93:be:6e:bb:a0:ff:04:
                    bd:e7:b9:70:77:bc:eb:fc:07:96:3c:0f:19:90:61:
                    aa:86:3f:dd:1b:9b:cb:2e:b0:6d:21:ac:d7:4a:9a:
                    25:89:70:78:0e:18:d4:16:38:f4:f9:1d:5f:6e:49:
                    50:14:58:96:46:6e:9e:73:f8:3d:53:55:bb:93:de:
                    89:37:d5:b8:2b:9d:c3:e8:0b:5a:2c:80:2a:23:65:
                    87:f1:a5:21:c5:18:61:bc:08:65:ab:b0:ed:8d:ed:
                    4c:2b:d5:bb:70:1e:f0:57:41:88:6a:3f:03:2d:06:
                    eb:7c:3c:cb:c1:f7:da:80:32:a3:be:ad:99:a2:bb:
                    4c:15:42:13:52:a5:49:68:c5:c4:51:75:fe:b5:1d:
                    b6:6c:6c:52:bd:67:b6:85:27:02:d1:43:67:df:ac:
                    07:95:2c:10:1e:d1:c0:df:89:fb:6a:cb:bb:fd:17:
                    eb:27:29:be:e5:54:e0:dc:0e:fa:ac:96:82:ad:9d:
                    5c:b8:17:94:0d:03:16:c4:59:12:e0:63:5a:44:26:
                    2b:af:bb:ba:05:d9:1c:40:33:20:e0:82:f4:f6:16:
                    6a:0f:cd:3a:3a:dd:b2:3a:5b:b2:7c:ca:48:29:1a:
                    61:e6:36:82:34:48:36:ec:e7:12:16:02:53:bb:6c:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:09:31:81:30:16:FF:B4:06:B0:25:A4:14:BA:67:ED:01:BF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72ae03f7-f63f-37dd-a67c-317d29f99b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:05:14:2a:df:a1:6c:a9:a0:2e:3d:53:8f:1c:de:a1:2b:
         99:4a:ad:2e:67:04:5e:f1:cf:b7:47:e0:7c:b8:e7:7f:ea:5e:
         32:d1:61:a5:26:93:7b:38:2d:98:64:24:98:a2:74:9f:b1:85:
         32:d1:da:80:3f:43:19:d0:e5:c7:e6:24:82:9b:69:d8:ca:15:
         57:99:06:ee:44:48:b7:71:34:66:7f:41:07:a9:9b:ad:52:12:
         84:c2:59:6b:c1:f8:2b:07:4c:64:9a:32:fc:1b:50:e0:df:e9:
         5c:83:db:18:86:0e:61:77:28:51:f0:6f:93:b8:82:ce:cc:85:
         da:77:c6:27:6d:e7:e2:a5:c3:d2:02:c3:e7:6a:d3:e1:6f:30:
         31:19:e9:90:b4:d8:58:5c:0c:e5:04:45:d3:5f:63:b1:96:e4:
         ec:12:14:98:a4:e0:96:09:92:2b:5b:0e:43:ba:c0:9d:c5:f5:
         c3:34:5e:0c:8b:c5:18:f7:13:60:50:3c:70:36:64:03:79:d0:
         f8:79:1c:1f:cc:dd:05:fd:cb:1a:a4:38:8d:25:05:77:25:f8:
         3d:08:34:4c:29:18:7f:b5:7a:20:a2:10:54:82:d3:2b:ac:52:
         ae:12:12:62:2b:a4:23:db:d6:09:0a:b8:86:ea:71:5a:69:23:
         01:e5:65:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxveGqs7QmOfjP5NUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ODc5OWE1ZjItMDIzZi00ZDE0LThhYWEtZGVjMWQxMjBmMzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5INCFNR/pO+brug/wS957lwd7zr/AeWPA8Z
kGGqhj/dG5vLLrBtIazXSpoliXB4DhjUFjj0+R1fbklQFFiWRm6ec/g9U1W7k96J
N9W4K53D6AtaLIAqI2WH8aUhxRhhvAhlq7Dtje1MK9W7cB7wV0GIaj8DLQbrfDzL
wffagDKjvq2ZortMFUITUqVJaMXEUXX+tR22bGxSvWe2hScC0UNn36wHlSwQHtHA
34n7asu7/RfrJym+5VTg3A76rJaCrZ1cuBeUDQMWxFkS4GNaRCYrr7u6BdkcQDMg
4IL09hZqD806Ot2yOluyfMpIKRph5jaCNEg27OcSFgJTu2wiSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPJCTGBMBb/tAawJaQUumftAb+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzJhZTAzZjctZjYzZi0z
N2RkLWE2N2MtMzE3ZDI5Zjk5YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY00AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjPBRQq36FsqaAuPVOPHN6hK5lKrS5nBF7xz7dH4Hy453/qXjLRYaUm
k3s4LZhkJJiidJ+xhTLR2oA/QxnQ5cfmJIKbadjKFVeZBu5ESLdxNGZ/QQepm61S
EoTCWWvB+CsHTGSaMvwbUODf6VyD2xiGDmF3KFHwb5O4gs7Mhdp3xidt5+Klw9IC
w+dq0+FvMDEZ6ZC02FhcDOUERdNfY7GW5OwSFJik4JYJkitbDkO6wJ3F9cM0XgyL
xRj3E2BQPHA2ZAN50Ph5HB/M3QX9yxqkOI0lBXcl+D0INEwpGH+1eiCiEFSC0yus
Uq4SEmIrpCPb1gkKuIbqcVppIwHlZac=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:43 2025 by rpki-client