Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1270f23-5cde-3428-88e5-3071af41df74.roa
File:                     b1270f23-5cde-3428-88e5-3071af41df74.roa (raw, json)
Hash identifier:          TwBqwEfyc7B4NDS+TErpalomwxbkPP4nY3lrjgkvveM=
Subject key identifier:   84:02:CA:89:E2:E3:DF:32:C7:C8:94:E3:FF:46:38:37:69:D5:46:48
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B29988B0D6AF7734019CD880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1270f23-5cde-3428-88e5-3071af41df74.roa
Signing time:             Wed 25 Jan 2023 12:00:00 +0000
ROA not before:           Wed 25 Jan 2023 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.99.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b2:99:88:b0:d6:af:77:34:01:9c:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 12:00:00 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=4ce84768-5b7a-4d74-8349-09bc2b45a071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ee:83:d0:89:5f:ae:f4:10:31:97:ca:eb:d0:
                    18:5f:20:64:4e:26:4d:b4:24:3d:cc:fd:f2:82:49:
                    a5:c7:0c:86:c7:65:3b:44:d2:0b:27:aa:38:45:db:
                    e3:b6:9f:3d:8f:b0:13:87:6d:d4:fb:74:9b:7a:f7:
                    91:ed:27:96:e0:b7:41:f2:6b:6e:3f:f3:6f:34:1f:
                    3d:e4:0f:cf:6f:69:30:67:71:d2:7c:b7:01:b1:83:
                    1a:0c:6d:29:49:24:11:26:01:8a:65:69:b0:ad:18:
                    ae:a9:44:32:01:51:6d:5c:6b:aa:44:0f:84:b2:5c:
                    e1:c5:2a:62:ce:51:90:04:bd:8e:c9:0b:11:6d:1c:
                    58:96:5e:fb:b7:f3:95:1a:eb:31:65:45:4d:56:a3:
                    e0:5c:3d:45:d9:65:7c:59:61:80:0b:bc:02:71:26:
                    71:67:7d:39:69:ba:0b:6d:af:a5:bb:d9:ee:dd:09:
                    7f:6a:09:34:07:60:6f:9b:57:cf:e5:c5:59:26:93:
                    dc:10:95:59:d2:73:1a:8f:75:16:48:3a:41:08:7e:
                    f6:cd:5f:ce:c3:2a:06:30:03:f7:31:75:a1:f9:4d:
                    41:3f:4f:b2:ff:aa:d4:ea:b7:4d:c3:0c:ae:0f:e3:
                    23:c6:eb:58:3e:62:19:e1:66:ff:e2:b3:74:cf:07:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:02:CA:89:E2:E3:DF:32:C7:C8:94:E3:FF:46:38:37:69:D5:46:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1270f23-5cde-3428-88e5-3071af41df74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:be:4e:0d:95:0a:73:8e:21:3a:ad:d7:1d:a3:a7:0b:d5:
         df:ef:c0:71:b3:f2:61:ce:41:9e:d3:93:54:ec:cc:6d:bf:31:
         87:2f:7e:05:3a:ba:32:9d:59:32:39:8b:66:56:44:f5:db:c4:
         64:8d:62:99:48:7b:ff:4c:a1:94:ce:1b:e1:b6:5b:54:6b:2c:
         16:ef:ce:93:68:38:cb:ee:22:01:3e:e3:71:c2:83:ab:6d:38:
         0d:bf:74:fa:1e:7f:ef:e5:e7:53:3b:1d:d7:48:78:11:f5:ea:
         b8:f0:de:ba:34:3c:f7:0a:3b:6d:28:27:88:54:a8:da:3f:4e:
         cb:3b:15:f7:82:f9:5b:27:c5:b9:ad:73:cb:fa:73:20:f4:53:
         9e:8c:f9:bc:fb:8d:ba:cd:64:6d:f5:d1:ba:11:51:1f:54:87:
         76:56:b6:59:87:2f:64:37:9e:64:d9:ac:10:e5:e9:42:76:0a:
         9c:52:db:9b:e8:78:53:e9:3c:6d:76:94:cb:96:10:73:05:3b:
         36:79:1c:1c:93:3b:e3:9d:3e:fa:7d:a3:72:f5:6d:b9:c7:bd:
         0f:42:62:30:31:32:81:39:79:36:a0:de:5b:ca:c8:24:6c:e3:
         74:e4:44:30:46:fe:d5:e9:fe:d4:69:76:ae:17:20:fb:86:bb:
         d3:c1:4a:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECymYiw1q93NAGc2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNTEyMDAwMFoXDTIzMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
NGNlODQ3NjgtNWI3YS00ZDc0LTgzNDktMDliYzJiNDVhMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge6D0IlfrvQQMZfK69AYXyBkTiZNtCQ9zP3y
gkmlxwyGx2U7RNILJ6o4Rdvjtp89j7ATh23U+3SbeveR7SeW4LdB8mtuP/NvNB89
5A/Pb2kwZ3HSfLcBsYMaDG0pSSQRJgGKZWmwrRiuqUQyAVFtXGuqRA+EslzhxSpi
zlGQBL2OyQsRbRxYll77t/OVGusxZUVNVqPgXD1F2WV8WWGAC7wCcSZxZ305aboL
ba+lu9nu3Ql/agk0B2Bvm1fP5cVZJpPcEJVZ0nMaj3UWSDpBCH72zV/OwyoGMAP3
MXWh+U1BP0+y/6rU6rdNwwyuD+MjxutYPmIZ4Wb/4rN0zwdu0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIQCyoni498yx8iU4/9GODdp1UZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjEyNzBmMjMtNWNkZS0z
NDI4LTg4ZTUtMzA3MWFmNDFkZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEGMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGOC+Tg2VCnOOITqt1x2jpwvV3+/AcbPyYc5BntOTVOzMbb8xhy9+BTq6
Mp1ZMjmLZlZE9dvEZI1imUh7/0yhlM4b4bZbVGssFu/Ok2g4y+4iAT7jccKDq204
Db90+h5/7+XnUzsd10h4EfXquPDeujQ89wo7bSgniFSo2j9OyzsV94L5WyfFua1z
y/pzIPRTnoz5vPuNus1kbfXRuhFRH1SHdla2WYcvZDeeZNmsEOXpQnYKnFLbm+h4
U+k8bXaUy5YQcwU7NnkcHJM7450++n2jcvVtuce9D0JiMDEygTl5NqDeW8rIJGzj
dOREMEb+1en+1Gl2rhcg+4a708FKzw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:10 2025 by rpki-client