Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ced0152-4491-3c3b-ba13-ef5712c7a2f2.roa
File:                     9ced0152-4491-3c3b-ba13-ef5712c7a2f2.roa (raw, json)
Hash identifier:          oaTwSryhb8U+OXtn+zcAIqLrTcG0QQrDZGXuKJSDE7g=
Subject key identifier:   9D:C3:6F:33:66:23:0C:C6:17:8D:EF:DB:8E:2B:A3:D4:BE:B4:A9:CB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DEDB42EF3FF4D6724B914DB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ced0152-4491-3c3b-ba13-ef5712c7a2f2.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Tue 21 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.77.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ed:b4:2e:f3:ff:4d:67:24:b9:14:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2022 GMT
        Subject: CN=199255f6-7d02-4a6a-9f64-7c944e38b892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:3f:28:8a:d1:52:24:37:8a:4f:72:c2:cc:
                    21:5f:3c:b1:8b:75:03:98:8c:5a:bb:8d:50:b2:60:
                    6c:ea:42:cc:a8:4e:30:c0:4b:d8:80:67:e4:37:d3:
                    d9:ac:47:0a:cf:98:f2:dc:09:b7:86:13:5f:05:5b:
                    ed:1d:a8:ab:f3:68:8c:5b:ca:34:6d:16:fe:78:b5:
                    b2:c5:c2:6b:fb:e0:f6:b1:0d:21:c9:81:af:82:7a:
                    c9:a9:b6:81:d2:54:42:54:3a:30:b6:15:dc:f1:d3:
                    90:d8:61:58:65:34:38:12:51:fa:77:0e:db:36:10:
                    6e:bf:f7:7a:ba:51:cd:1f:d2:23:3c:b2:fb:d7:0d:
                    6f:bd:e5:40:4e:ca:bb:a1:d2:7a:ad:34:f9:22:5d:
                    0c:90:9a:d7:c9:bc:50:fd:e5:48:83:f2:23:e8:78:
                    d2:be:b0:40:78:ef:0f:3e:13:c8:e2:53:52:99:d0:
                    cf:e9:9a:f5:d1:6e:b7:18:31:e8:32:64:36:2c:6f:
                    99:e1:4f:4a:ea:c8:3f:39:0f:74:84:de:f8:87:29:
                    97:1c:b7:21:40:4a:d3:ad:4c:54:6d:04:0c:bb:41:
                    24:b4:37:85:15:e9:b2:76:74:d5:bd:70:b5:4f:90:
                    e8:6d:1a:8e:be:ec:4c:3c:5f:5c:ff:57:b8:0e:91:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:6F:33:66:23:0C:C6:17:8D:EF:DB:8E:2B:A3:D4:BE:B4:A9:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ced0152-4491-3c3b-ba13-ef5712c7a2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:11:77:4d:24:fb:12:ca:4b:a9:c3:d3:80:75:b2:3e:7b:de:
         5d:8d:8a:df:01:b7:4a:8f:54:a9:3a:35:25:23:81:51:28:d0:
         54:bc:e8:5a:0c:00:db:b3:9e:e6:8c:71:7f:bc:8e:e2:95:b6:
         bf:4a:6f:b8:9d:4c:85:f7:7c:7c:38:7c:9c:f8:09:10:32:12:
         0b:09:64:3a:12:53:de:10:5a:78:75:9f:95:d0:0f:db:da:3a:
         c8:99:85:07:cc:b1:59:5a:51:70:19:4a:91:5a:17:22:dd:d5:
         18:11:08:38:61:98:35:40:6f:a1:28:25:ea:ed:aa:4c:a3:e6:
         bd:65:52:8c:dd:d4:1a:14:d7:80:84:43:0f:ca:f0:f9:53:68:
         dd:c5:0e:21:8a:38:a6:d0:6b:63:70:a0:bc:7c:8b:0d:75:f4:
         64:0f:c4:e7:38:e9:f0:90:ce:dd:0e:f2:18:2e:1e:33:ee:21:
         39:d0:f0:ad:ac:e0:5e:c6:e2:83:2f:e9:2c:cb:ee:72:86:2e:
         09:27:ab:34:3c:82:83:b1:4a:16:b3:6b:0a:fb:fb:66:a7:fb:
         fb:fd:45:13:da:cb:e9:53:e9:0f:2e:73:c8:8d:da:2a:4b:a9:
         7c:e8:f7:93:d5:e7:56:56:46:08:56:ab:8e:40:63:5b:f7:bc:
         97:70:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:42 2025 by rpki-client