Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa29a43c-d40d-39db-aea3-99cfb1e05731.roa
File:                     aa29a43c-d40d-39db-aea3-99cfb1e05731.roa (raw, json)
Hash identifier:          tFJ+IH9jwmAG1rtVMnHG0f1u0awlXCbKHQaR/n7ALA8=
Subject key identifier:   40:42:75:C5:B5:96:3B:DC:80:56:F9:AB:28:A1:F7:31:4D:85:7B:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE39BD25286EB8AAE2E71DD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa29a43c-d40d-39db-aea3-99cfb1e05731.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.77.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:9b:d2:52:86:eb:8a:ae:2e:71:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=64616f3f-8403-4861-af6d-8424037ff99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:47:04:b3:57:2d:9f:f9:6f:e1:79:90:83:
                    a7:3e:d4:67:75:7e:ea:6b:9b:f8:24:c6:af:23:57:
                    05:3b:2f:17:a9:62:17:62:70:4c:8a:12:87:c4:9f:
                    f2:f9:de:31:d6:03:08:88:58:94:4b:4c:7c:43:a8:
                    6f:13:fb:2e:2b:8e:74:46:55:bb:94:6c:ef:cb:f4:
                    c4:22:2b:31:3c:c3:dc:84:db:18:b4:ba:b6:82:3d:
                    fa:4d:82:00:19:88:4e:04:37:da:47:b3:e7:a1:b6:
                    c8:7d:a1:30:c2:22:01:a9:ac:bb:fe:c1:56:1a:93:
                    19:d8:cc:75:34:22:99:14:77:5e:ae:75:b0:3c:f9:
                    19:cb:9d:21:7a:b1:c6:4c:6b:42:01:f0:14:b0:d4:
                    61:c7:53:8a:4d:77:43:c1:0d:8b:1a:4d:30:c1:05:
                    78:ba:df:73:17:b0:02:33:e9:b8:4d:ff:81:bf:23:
                    b1:10:21:ee:60:f3:8c:3c:09:b1:b3:aa:1b:8c:46:
                    f1:72:d7:85:c2:34:b9:c7:1c:0e:78:ae:fb:b3:9b:
                    6b:85:f9:d9:a2:5e:35:96:90:99:48:81:ec:74:e3:
                    52:a8:e9:93:bb:c6:91:15:46:87:28:36:df:a8:ec:
                    3a:05:82:cc:e4:d0:a6:6a:60:4f:a2:f2:5c:09:fc:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:42:75:C5:B5:96:3B:DC:80:56:F9:AB:28:A1:F7:31:4D:85:7B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa29a43c-d40d-39db-aea3-99cfb1e05731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:27:8a:e2:ef:52:93:a0:05:8d:10:26:e3:7f:89:a4:a9:a1:
         41:bb:27:a8:05:ac:ca:eb:fa:4f:9e:5e:ef:d6:e7:2e:15:61:
         8d:68:81:c5:a3:0f:5a:69:89:e5:27:b3:58:9a:da:2b:26:97:
         c8:3b:df:5a:60:17:cf:6b:c9:6e:2a:83:76:c5:72:09:56:0a:
         42:df:d8:bc:69:26:ad:90:40:53:af:90:02:88:74:8f:b7:fe:
         9c:93:9b:ec:ea:41:d2:ce:58:ad:1e:92:d7:ff:e9:66:e0:01:
         17:25:42:d2:4e:7a:1b:8f:d1:c8:5e:ed:9e:d9:7b:e4:57:3c:
         95:23:0a:79:b9:19:c2:7c:67:00:3a:2b:90:60:0b:70:92:dd:
         21:af:20:66:71:05:61:16:1f:50:f6:bd:38:15:ff:78:0f:b8:
         cd:d1:a5:df:ee:78:22:92:d7:86:37:80:00:7d:02:01:51:b6:
         5a:bb:d7:1e:1a:62:bf:36:b0:f1:e9:dd:99:ce:2b:33:b3:85:
         6e:81:1f:99:14:81:09:75:0f:74:3b:97:87:a4:20:25:74:a1:
         64:7b:df:2c:de:b4:6c:56:74:2d:30:e5:72:99:7c:07:56:8b:
         61:43:aa:45:e8:39:43:8e:48:e4:c2:40:24:54:7a:94:35:18:
         4d:cc:d7:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7jm9JShuuKri5x3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMjE0NDIwOFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
NjQ2MTZmM2YtODQwMy00ODYxLWFmNmQtODQyNDAzN2ZmOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL5HBLNXLZ/5b+F5kIOnPtRndX7qa5v4JMav
I1cFOy8XqWIXYnBMihKHxJ/y+d4x1gMIiFiUS0x8Q6hvE/suK450RlW7lGzvy/TE
IisxPMPchNsYtLq2gj36TYIAGYhOBDfaR7PnobbIfaEwwiIBqay7/sFWGpMZ2Mx1
NCKZFHdernWwPPkZy50herHGTGtCAfAUsNRhx1OKTXdDwQ2LGk0wwQV4ut9zF7AC
M+m4Tf+BvyOxECHuYPOMPAmxs6objEbxcteFwjS5xxwOeK77s5trhfnZol41lpCZ
SIHsdONSqOmTu8aRFUaHKDbfqOw6BYLM5NCmamBPovJcCfz4cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBCdcW1ljvcgFb5qyih9zFNhXt0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWEyOWE0M2MtZDQwZC0z
OWRiLWFlYTMtOTljZmIxZTA1NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY00AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYniuLvUpOgBY0QJuN/iaSpoUG7J6gFrMrr+k+eXu/W5y4VYY1ogcWj
D1ppieUns1ia2isml8g731pgF89ryW4qg3bFcglWCkLf2LxpJq2QQFOvkAKIdI+3
/pyTm+zqQdLOWK0ektf/6WbgARclQtJOehuP0che7Z7Ze+RXPJUjCnm5GcJ8ZwA6
K5BgC3CS3SGvIGZxBWEWH1D2vTgV/3gPuM3Rpd/ueCKS14Y3gAB9AgFRtlq71x4a
Yr82sPHp3ZnOKzOzhW6BH5kUgQl1D3Q7l4ekICV0oWR73yzetGxWdC0w5XKZfAdW
i2FDqkXoOUOOSOTCQCRUepQ1GE3M118=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:39 2025 by rpki-client