Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d277950-ad0d-3d0b-b7ba-c7bf21d5f914.roa
File:                     9d277950-ad0d-3d0b-b7ba-c7bf21d5f914.roa (raw, json)
Hash identifier:          xwl0K6L1RWMYvW98mzZP21jVowpmRvzJoiChsGvz56M=
Subject key identifier:   AA:E5:21:58:CA:4C:27:81:EA:9C:2B:10:9A:E7:4A:F9:44:E4:40:F5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584044803791C516E538BA729F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d277950-ad0d-3d0b-b7ba-c7bf21d5f914.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.87.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:80:37:91:c5:16:e5:38:ba:72:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=c0211d71-b225-4240-ad6b-1a1240ad5669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:08:93:e9:0f:9e:0a:60:97:c3:35:94:21:
                    4f:57:aa:82:53:91:e2:bd:aa:48:4b:57:d6:0c:e5:
                    42:54:aa:4e:1b:9d:5d:61:a3:23:c7:6e:fb:84:36:
                    67:b1:ac:ab:08:69:e7:41:16:dc:5b:99:c3:c2:fc:
                    91:09:7a:5e:71:6d:5d:c7:81:0e:01:e6:6a:7c:6b:
                    6b:20:6d:e8:64:32:79:7d:f6:33:03:aa:6e:4a:4b:
                    4c:eb:85:a8:20:be:dc:be:71:72:70:b2:9b:89:0b:
                    57:9f:86:ba:0a:ac:07:47:1b:a0:7a:1b:eb:bf:86:
                    42:cf:ef:75:c5:3a:79:1f:69:db:d2:fa:e5:ca:29:
                    ab:4c:58:af:80:86:69:b9:cf:3a:12:99:fb:f1:51:
                    1a:71:70:47:9c:02:ca:dc:f4:a6:7f:24:37:13:6c:
                    b4:1e:45:ad:56:10:d0:9b:52:9a:37:35:42:c8:77:
                    91:a7:80:b8:90:55:ef:9f:49:29:a1:2c:40:9a:a6:
                    77:83:5d:03:1f:70:5b:2c:a0:90:e0:8d:5d:3b:fa:
                    c1:9d:bb:4c:99:0b:97:4a:f1:cd:a6:54:6b:e6:1b:
                    b6:71:d4:af:4b:8b:28:67:c7:0c:86:c2:a9:22:93:
                    f8:fc:f0:21:da:c8:d5:21:6b:d6:a3:41:13:82:e7:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:21:58:CA:4C:27:81:EA:9C:2B:10:9A:E7:4A:F9:44:E4:40:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d277950-ad0d-3d0b-b7ba-c7bf21d5f914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.87.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a1:a0:a8:07:65:ec:c8:00:86:47:4a:db:df:9f:54:ca:4a:
         70:55:f1:9f:5d:2b:ad:95:26:65:ad:5e:f3:4c:a6:89:f7:31:
         a6:b1:82:41:f7:4d:3b:4a:8b:4c:95:de:73:a0:8b:7f:c3:ff:
         8d:9a:1d:e0:9e:81:3d:62:23:bf:52:b8:48:e5:d9:01:16:4e:
         d6:cb:bd:1f:f2:06:98:28:19:83:f9:c8:94:ac:61:6c:c0:d2:
         0f:77:f5:78:a6:83:f8:1a:24:27:cc:c2:b0:4b:6e:6e:dd:0e:
         36:66:9f:99:51:55:5d:ea:56:c2:27:ef:1f:a2:f2:5b:10:f5:
         6d:fe:ec:42:2c:30:14:97:c9:d9:24:b6:c5:63:d9:71:1c:8a:
         d4:ff:5e:77:2f:a0:e3:b9:6f:d8:09:66:85:73:7c:a6:a8:23:
         35:9f:3d:d9:91:f0:80:e7:9d:9b:95:4e:b3:6b:02:31:76:64:
         71:c2:5d:cd:98:ee:38:30:5e:33:ed:5a:57:42:f0:b2:c8:7c:
         c0:f6:02:25:18:6c:87:e2:68:3e:15:9d:97:a6:db:71:d5:3b:
         43:46:34:4c:55:aa:cc:de:68:ff:e7:ee:a2:df:a1:c3:52:91:
         2f:ab:ac:83:27:36:17:e0:e6:21:e9:50:a4:e1:53:e3:57:28:
         56:cb:1c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:30 2025 by rpki-client