Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/757beff5-d74e-3221-8873-0cf2857c9a36.roa
File:                     757beff5-d74e-3221-8873-0cf2857c9a36.roa (raw, json)
Hash identifier:          sA6k/sdtdsUPJbt/eorNsQVnmPL6BsjZepNVL/KiZT0=
Subject key identifier:   A6:37:65:11:9C:EC:5B:C2:26:01:B2:83:F4:0C:B3:FC:8A:C8:AC:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8159A02A5D3E259846F693C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/757beff5-d74e-3221-8873-0cf2857c9a36.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.151.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:59:a0:2a:5d:3e:25:98:46:f6:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=5b5efac1-e051-45fc-8545-f743613d970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:27:5b:07:81:5f:f6:5d:93:ea:90:a7:78:
                    36:8d:f8:69:bf:6d:3d:f6:57:19:a4:f9:4d:62:2e:
                    94:e9:69:5d:cc:7a:a1:a2:9f:8c:f8:03:f8:b7:b6:
                    79:69:e1:3c:ff:d5:8a:6f:6d:e8:d7:8b:56:24:3c:
                    43:2d:7a:0d:bd:2a:56:91:f3:0f:3a:04:34:a8:1b:
                    8a:f8:c5:c3:c8:88:e3:0a:fe:b5:d6:7f:20:59:67:
                    6e:f6:a8:d0:64:41:12:62:a1:7a:b7:c9:48:e9:7d:
                    7d:dd:9b:07:61:af:c1:b6:c2:37:c7:b1:3b:58:47:
                    06:5d:72:ca:af:44:cc:b9:20:a8:b8:3d:6e:6b:45:
                    56:a9:6c:2a:69:e5:42:8f:d7:34:21:40:57:83:8b:
                    ae:34:41:d9:72:cf:1b:2f:f9:4a:99:1b:14:9c:aa:
                    34:1b:32:9c:a5:2d:5b:19:56:2d:1f:dc:2b:87:7b:
                    96:6e:43:0d:94:09:f9:d6:02:21:9c:da:51:ad:19:
                    a2:f3:65:50:18:2c:e2:f9:64:56:0e:0b:91:12:f4:
                    85:96:af:ff:e8:4f:18:08:f4:49:c8:b2:99:07:5e:
                    f6:a9:6f:cf:bb:be:00:6e:25:56:82:fe:54:22:0b:
                    9d:22:04:86:68:d3:c9:7e:fb:f6:54:1d:03:05:d4:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:65:11:9C:EC:5B:C2:26:01:B2:83:F4:0C:B3:FC:8A:C8:AC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/757beff5-d74e-3221-8873-0cf2857c9a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:de:5d:7e:f1:6d:fb:38:5a:35:5e:2f:30:e6:a7:15:5e:
         f6:38:a0:8a:b6:82:5b:e4:79:33:fe:b7:5d:17:c5:11:ab:81:
         c0:5a:fd:e5:18:9d:60:6f:e6:02:21:6f:bd:97:d3:e6:8e:c0:
         82:f3:2e:c3:38:aa:47:34:05:72:61:94:13:4a:2c:28:3a:6f:
         40:8d:df:22:d7:5e:3d:a3:a3:06:6d:3e:76:71:e0:58:f3:2c:
         08:57:01:da:63:e2:41:97:53:3d:5d:cb:bc:df:c9:98:c3:ca:
         1d:f3:c4:7d:d8:bb:8a:08:d9:63:ad:52:90:ab:88:4f:cb:49:
         91:0a:4f:d4:f9:35:9e:a6:40:b2:57:03:0d:58:b6:31:9f:1f:
         43:f1:c2:a4:0c:5c:e5:47:df:d8:9b:8d:4f:af:64:01:fe:2e:
         09:cd:80:cc:f1:5c:69:f5:aa:9d:60:28:e5:fc:35:23:c7:5a:
         50:52:b8:c9:23:07:ce:59:f4:5c:c5:6b:16:94:e2:ce:82:a6:
         68:8d:05:94:5e:92:f5:04:8d:36:72:2d:82:31:f2:ef:d7:c7:
         12:c6:8d:32:c9:1d:f6:d3:08:39:69:38:03:5e:e4:58:42:5b:
         8e:40:b5:cd:9d:80:5c:92:5a:96:65:cb:5f:1e:74:3c:ad:77:
         2f:60:ef:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2BWaAqXT4lmEb2k8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWI1ZWZhYzEtZTA1MS00NWZjLTg1NDUtZjc0MzYxM2Q5NzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1EnWweBX/Zdk+qQp3g2jfhpv2099lcZpPlN
Yi6U6WldzHqhop+M+AP4t7Z5aeE8/9WKb23o14tWJDxDLXoNvSpWkfMPOgQ0qBuK
+MXDyIjjCv611n8gWWdu9qjQZEESYqF6t8lI6X193ZsHYa/BtsI3x7E7WEcGXXLK
r0TMuSCouD1ua0VWqWwqaeVCj9c0IUBXg4uuNEHZcs8bL/lKmRsUnKo0GzKcpS1b
GVYtH9wrh3uWbkMNlAn51gIhnNpRrRmi82VQGCzi+WRWDguREvSFlq//6E8YCPRJ
yLKZB172qW/Pu74AbiVWgv5UIgudIgSGaNPJfvv2VB0DBdR5vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKY3ZRGc7FvCJgGyg/QMs/yKyKwfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzU3YmVmZjUtZDc0ZS0z
MjIxLTg4NzMtMGNmMjg1N2M5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY5eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE673l1+8W37OFo1Xi8w5qcVXvY4oIq2glvkeTP+t10XxRGrgcBa/eUY
nWBv5gIhb72X0+aOwILzLsM4qkc0BXJhlBNKLCg6b0CN3yLXXj2jowZtPnZx4Fjz
LAhXAdpj4kGXUz1dy7zfyZjDyh3zxH3Yu4oI2WOtUpCriE/LSZEKT9T5NZ6mQLJX
Aw1YtjGfH0PxwqQMXOVH39ibjU+vZAH+LgnNgMzxXGn1qp1gKOX8NSPHWlBSuMkj
B85Z9FzFaxaU4s6CpmiNBZRekvUEjTZyLYIx8u/XxxLGjTLJHfbTCDlpOANe5FhC
W45Atc2dgFySWpZly18edDytdy9g7+s=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:17 2025 by rpki-client