Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aedc5642-522d-3aef-86e2-0c9db148134c.roa
File:                     aedc5642-522d-3aef-86e2-0c9db148134c.roa (raw, json)
Hash identifier:          VxrqwS6Fm4WNSVuLx3f3xuJvlB5raADYaFRSMf37kdg=
Subject key identifier:   B6:C7:BE:DC:50:EF:04:93:63:5D:8F:E4:12:D7:9D:46:85:4C:3B:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6BDCA64DD41717FE5209F900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aedc5642-522d-3aef-86e2-0c9db148134c.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.99.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:dc:a6:4d:d4:17:17:fe:52:09:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=9a8a1e41-7db0-4db9-89c8-2127e41ff476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:85:fa:9a:0c:48:99:75:87:2e:ce:2e:34:
                    61:3f:39:9a:1a:eb:0a:84:f9:cd:58:d9:b4:91:df:
                    d3:d7:55:c4:9d:28:9c:fd:6d:e8:85:2c:5e:8d:a8:
                    06:29:c0:3b:94:db:9e:0b:8c:a9:0f:40:9e:3e:a3:
                    d7:9c:90:cc:e4:0a:2b:c1:9c:3d:52:dc:8e:71:c9:
                    88:a4:38:7c:f5:f6:c0:5e:af:c0:d4:64:eb:5d:eb:
                    d0:df:af:15:a4:dc:2a:7f:76:b8:32:dc:d2:39:57:
                    47:aa:65:3e:b0:80:5a:3f:98:c0:a2:cb:0d:44:b9:
                    b8:ad:7d:ba:f8:5b:39:dc:6a:03:a4:3f:50:b1:36:
                    9d:fe:4e:af:32:5a:ac:84:30:26:3f:95:d3:af:81:
                    fb:f6:ee:2f:07:8d:40:1e:8c:09:67:e6:96:b3:6a:
                    d0:6e:60:25:6c:5a:46:3e:64:a5:18:cf:51:82:a2:
                    b1:dd:8e:02:c0:89:7a:d3:93:d8:03:a3:f9:80:a8:
                    9b:8c:38:e4:e2:c3:7c:9a:83:b4:48:c1:80:27:91:
                    8a:03:a3:bb:68:3d:0c:11:75:7b:3d:55:97:50:bb:
                    f7:07:94:81:7a:83:00:2c:14:18:f5:6d:6d:8f:ce:
                    27:95:f2:42:06:d9:6f:1c:68:3c:65:d1:60:4d:ef:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C7:BE:DC:50:EF:04:93:63:5D:8F:E4:12:D7:9D:46:85:4C:3B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aedc5642-522d-3aef-86e2-0c9db148134c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:ca:26:a4:46:b9:4d:be:2e:bb:2e:64:a9:b8:9b:9d:a7:
         65:15:92:b9:ea:56:8a:95:9d:47:5d:fc:27:48:dc:42:56:26:
         6a:c5:f6:77:41:89:6f:84:c2:c3:c5:c1:f2:8b:b7:f7:e8:e4:
         c6:d4:9f:fe:73:7e:80:93:9d:3b:e0:1a:2a:db:fc:6e:62:81:
         a2:5b:b1:0e:07:9a:da:53:7f:42:95:fb:3c:60:59:50:43:43:
         0a:4b:74:d7:e7:fa:8d:46:7c:14:52:05:5f:58:ea:7f:fc:a8:
         be:09:2f:ba:70:65:e9:07:de:24:9d:14:25:b5:f3:5d:b0:dc:
         2b:07:37:1f:34:93:66:2e:e0:6e:0f:96:d0:70:96:a0:91:46:
         ff:52:78:ec:ad:54:21:df:74:f7:76:30:64:c7:4e:8a:e8:5e:
         0e:0c:be:65:ce:82:ef:20:81:5a:4b:27:f9:33:7b:14:74:e5:
         0c:24:28:bd:9a:73:6a:8d:cb:87:da:1f:6f:e4:2e:9d:b7:fa:
         a5:fc:86:97:e1:ef:a0:96:7d:d9:a7:18:11:ad:6d:da:30:76:
         7f:bc:8a:97:51:c4:d9:79:a0:de:9b:5f:06:12:bf:cf:31:ca:
         63:5b:19:ea:06:8c:3c:ec:d5:d4:fa:c8:d3:b8:db:75:26:f5:
         40:69:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:41 2025 by rpki-client