Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af17b374-3b78-3c92-86ff-4ff503af5dbb.roa
File:                     af17b374-3b78-3c92-86ff-4ff503af5dbb.roa (raw, json)
Hash identifier:          9jtZ4kZe4wiUQ7lLngpUysv5BGCg9zIQPOUyTtHNKPY=
Subject key identifier:   C8:BD:44:32:43:A6:F5:14:7F:E3:FC:B8:C6:D4:D5:AE:75:E5:DA:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE15E8AA4A82B8A391F3FD200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af17b374-3b78-3c92-86ff-4ff503af5dbb.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:5e:8a:a4:a8:2b:8a:39:1f:3f:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=3cb67b69-5af7-4905-aa77-1bc9c2d99b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:c4:32:5e:5d:b3:4f:c4:ae:56:02:fc:1b:
                    6a:e9:e0:aa:0d:70:3f:f4:11:08:0d:78:55:4d:65:
                    61:ad:30:ed:ac:76:ff:ff:e1:e5:ca:83:4c:41:38:
                    8e:60:a7:e0:b7:48:67:76:7a:9f:cd:45:d2:f8:fe:
                    2f:77:fe:d8:ea:2b:c7:28:52:90:c4:a3:42:d2:8b:
                    4f:eb:a7:bd:83:97:a0:a6:30:fd:ec:4f:3a:6b:08:
                    93:bb:61:c6:2c:0e:ac:de:ec:e5:23:1d:af:c0:57:
                    56:5b:93:df:83:8e:cf:98:e5:aa:34:31:cc:63:e6:
                    e9:43:49:14:33:09:15:6a:d6:5d:6c:d2:d8:0a:d2:
                    54:38:ac:c6:b9:b6:97:23:53:f1:90:cb:f3:5e:94:
                    51:32:d0:86:1c:0f:60:ad:41:49:d5:bf:f3:b0:43:
                    ff:3c:91:0b:de:69:bf:15:d8:e6:be:38:56:5d:77:
                    32:b9:4e:07:2e:05:6c:89:7b:48:5f:fa:f5:01:75:
                    31:06:9b:3a:8d:84:92:e5:8d:03:9d:85:4f:d9:31:
                    80:a6:07:ee:40:17:cd:96:5f:c3:fd:f9:d0:8b:3f:
                    69:c1:77:79:eb:12:d7:30:22:70:6c:a6:fc:35:d7:
                    42:08:8e:98:01:cb:38:6a:11:f6:e3:1c:d6:53:ac:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BD:44:32:43:A6:F5:14:7F:E3:FC:B8:C6:D4:D5:AE:75:E5:DA:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af17b374-3b78-3c92-86ff-4ff503af5dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:78:38:cd:98:f2:6c:4a:dd:f5:83:38:72:71:9a:87:2f:3f:
         56:f4:dc:7a:79:d9:66:14:ce:85:84:42:05:49:1a:40:ea:43:
         eb:9b:3a:e9:ac:c7:8e:2e:36:59:26:0c:c4:a3:29:e1:21:87:
         0e:5a:72:1d:f4:d5:75:eb:76:12:54:40:40:bd:52:24:fc:60:
         32:72:51:45:65:05:66:1c:b8:fa:36:21:bf:56:e3:57:ab:ab:
         2b:cc:f2:9e:d7:f0:ab:12:cc:69:c0:71:8d:b7:6e:ec:f0:c4:
         6f:bd:e7:9a:94:00:2b:e7:d9:a7:02:25:c8:43:94:44:95:07:
         6c:5a:ad:11:51:f4:5f:ec:11:59:9e:80:2c:3d:56:bf:93:f5:
         0f:e4:19:98:30:73:00:44:50:c6:90:40:70:80:11:d8:69:69:
         8d:fe:16:25:52:c6:ef:c7:03:17:d3:c3:cb:40:8a:e7:82:e3:
         2c:5a:3f:79:55:59:8c:db:15:89:57:e2:fc:e7:30:b0:72:cb:
         38:a5:fa:a3:44:3f:67:4d:89:93:21:f3:c2:d6:c0:02:90:05:
         bc:7e:32:f6:53:39:54:d4:87:bc:dc:4b:67:d8:0d:e6:49:db:
         0f:97:6e:39:0a:61:e0:36:b1:05:3e:fb:8f:ed:4a:d2:65:62:
         8e:b3:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:54 2025 by rpki-client