Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93c2faa3-5a3b-31fd-9c07-4fd3831505cd.roa
File:                     93c2faa3-5a3b-31fd-9c07-4fd3831505cd.roa (raw, json)
Hash identifier:          mk+Nql3INpg6TF/tw4Y5GQiQOFHbjIG/NB5rgtGc6XY=
Subject key identifier:   8E:55:6C:ED:22:D9:1C:FF:CB:68:65:46:53:6B:08:CC:67:56:49:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCF292E1B6ABA5847E06A1820
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93c2faa3-5a3b-31fd-9c07-4fd3831505cd.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.87.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:29:2e:1b:6a:ba:58:47:e0:6a:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=042dcb2d-f395-4282-8767-a1ff0a9e84bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:e5:b1:1c:72:88:ba:d7:fe:8b:c7:a4:24:
                    74:e1:ef:9d:72:af:32:5a:09:ac:66:44:85:22:13:
                    a6:da:5b:37:b1:c6:3b:e2:a3:dd:b6:59:da:8a:b3:
                    53:f1:a7:c7:dc:1b:50:d6:aa:35:9c:d0:14:3b:28:
                    2f:06:23:a0:a7:8d:85:60:5c:21:6a:c1:3a:96:8d:
                    68:2e:fa:06:c2:f6:0f:76:9e:44:b6:bf:cd:c6:1a:
                    ef:74:a2:a4:56:b6:51:c6:14:80:99:03:eb:48:74:
                    d5:54:68:be:fd:a9:38:38:96:59:8d:1c:b8:97:e6:
                    af:cd:a0:06:10:ff:ce:71:fb:9f:6f:df:db:7a:a3:
                    57:6d:6f:f4:d0:93:3c:1a:6f:bb:2f:41:c0:d1:ff:
                    d2:1f:05:45:b9:e3:48:a9:81:77:c1:fe:cc:87:08:
                    b3:5d:d7:82:e5:5f:9b:64:e5:c8:a7:a8:46:88:50:
                    12:dd:8b:fe:45:cd:b0:0e:fd:6e:4c:29:ea:12:40:
                    dd:1f:21:1b:1f:36:2c:2f:ad:59:18:6d:27:c9:50:
                    e8:10:35:18:58:a8:11:0b:de:32:c4:1d:3f:80:63:
                    62:09:09:e4:ac:9f:5b:6d:92:01:84:06:60:56:71:
                    ec:bd:09:6a:4e:95:2a:1a:f2:52:dc:68:41:f5:37:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:55:6C:ED:22:D9:1C:FF:CB:68:65:46:53:6B:08:CC:67:56:49:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93c2faa3-5a3b-31fd-9c07-4fd3831505cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:e5:7e:d5:79:b7:42:95:82:a8:16:d9:f4:7c:e0:e9:ee:
         aa:bb:f0:e1:0c:8f:0d:e9:04:a4:6a:66:ed:04:65:68:46:4f:
         70:0b:12:cc:79:d5:37:50:d1:35:cf:b9:c6:bf:70:82:02:e1:
         6c:c6:ad:fe:97:41:a1:46:8c:f4:90:85:b7:34:97:07:b8:0b:
         74:0d:58:f3:fe:3f:9d:57:65:43:27:c9:d1:fc:c7:4d:62:e3:
         36:c5:33:f9:cb:a5:c7:24:99:e2:6e:ee:ed:e9:c7:64:d2:a2:
         1d:61:af:6a:df:dd:db:4b:2f:f6:dd:15:3b:13:f1:0c:4f:fd:
         41:ef:1e:f3:c8:9f:0b:54:c9:c1:c5:84:67:e9:02:08:b2:3f:
         c0:45:b8:17:dc:1d:1d:66:a2:98:14:52:72:cf:e3:5f:ea:38:
         6e:09:ae:42:61:38:63:a0:22:03:a1:49:61:42:6f:59:88:f9:
         21:19:b1:88:d2:62:6e:5d:bb:3d:56:1a:81:c8:f4:97:3c:4e:
         b1:1f:2d:9c:06:53:1d:67:92:59:69:48:df:d1:a2:32:3c:08:
         57:e7:7c:3f:a2:7e:70:da:e8:69:56:bc:89:60:b6:cd:2b:5c:
         01:ca:5e:c1:5c:f3:66:d6:f1:10:c9:d8:17:8f:61:f3:a1:fc:
         18:33:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:38 2025 by rpki-client