Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e0bd24-c702-3315-8378-0f13c1eced35.roa
File:                     b2e0bd24-c702-3315-8378-0f13c1eced35.roa (raw, json)
Hash identifier:          OrO41OjJK7I3xdA1ya16DLHl6WHOhexLt/Xge01hDnI=
Subject key identifier:   1F:43:BD:CC:52:B8:F6:B2:17:7C:39:90:DF:C5:2A:00:74:DB:FF:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F31A963CD4D501C66095924A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e0bd24-c702-3315-8378-0f13c1eced35.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.150.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:a9:63:cd:4d:50:1c:66:09:59:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=584ed6db-343d-414e-9a13-b0d4c0934008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:b4:65:e0:5d:77:4f:c8:1c:00:d4:4f:fc:
                    73:43:d9:36:d0:60:2a:6e:76:29:4b:93:86:02:bc:
                    32:1b:f3:a9:a6:f3:51:61:23:16:df:e6:a4:39:e5:
                    ba:1c:19:e2:9b:de:d8:28:85:ac:be:95:f8:b9:d7:
                    95:76:83:bc:9e:d0:1e:52:f9:a6:b4:97:39:1c:a4:
                    a4:21:7f:64:30:bd:e1:7e:d1:c8:77:3a:29:e8:88:
                    a6:4a:6d:f3:7f:84:7c:20:c6:9a:c9:57:26:71:1d:
                    60:c5:68:38:62:11:6e:bb:31:1b:67:d0:2b:f5:a0:
                    b3:46:4b:d6:ef:61:a1:26:58:34:4f:41:64:76:ce:
                    fe:07:b7:21:f6:31:02:38:79:e7:e9:3e:df:f0:88:
                    c6:c5:bd:79:bf:b5:d2:ec:da:c0:fc:27:ae:2f:3a:
                    c0:4d:7e:cd:c6:f7:39:66:4d:7b:66:af:aa:f8:7a:
                    4e:62:b7:b3:df:6f:fc:5e:ba:3c:21:48:00:47:09:
                    07:89:f0:45:a0:d8:c9:d5:04:8f:a3:fd:11:39:88:
                    4a:53:dd:43:3b:9e:f9:d1:6e:18:f2:de:90:19:c8:
                    c3:4a:9a:ff:13:86:59:f4:46:94:b7:bf:cb:a7:4b:
                    a6:27:66:43:25:bd:39:27:64:81:d4:3c:17:c0:ed:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:43:BD:CC:52:B8:F6:B2:17:7C:39:90:DF:C5:2A:00:74:DB:FF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2e0bd24-c702-3315-8378-0f13c1eced35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:45:b6:96:45:dd:3f:2e:3e:2f:6c:d9:bc:17:36:c5:0e:
         bc:ed:23:d4:73:a5:84:77:6e:25:b7:1e:58:c6:0d:12:f1:75:
         61:da:e5:c8:83:3a:14:1e:57:7f:42:6d:ff:b0:62:95:ce:68:
         5f:43:94:8c:b6:e2:ed:8c:24:1b:3a:97:2d:83:55:a8:9a:7c:
         6a:ac:5e:b5:7a:a4:78:45:47:8c:e9:70:f4:b0:bf:9c:29:02:
         34:4a:fe:d0:96:99:cd:c1:c3:18:4c:b1:c5:08:32:59:ee:b2:
         9a:6c:79:de:b2:cd:0c:c7:eb:64:fd:13:18:27:fc:3f:00:00:
         71:da:96:5b:c7:b0:eb:1f:76:57:d4:25:b9:63:13:4a:51:f4:
         59:90:f4:9b:22:62:ae:3b:44:a4:5b:8a:23:08:77:cb:0a:cc:
         fe:cc:a0:62:aa:6c:16:44:14:94:fa:d5:48:32:9a:4a:b0:0f:
         c7:cb:62:15:41:86:de:be:a7:e5:17:0d:1f:24:37:1e:01:0f:
         b4:7f:e2:8a:ea:0a:f7:db:e4:a4:8b:5f:14:78:de:1d:de:43:
         1b:37:20:ac:83:58:7e:5e:1a:54:99:9e:3f:da:52:f4:cf:e1:
         37:7f:d7:30:0a:2b:5f:cc:d2:7f:cc:dd:af:b7:91:fd:07:cc:
         79:b8:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:17 2025 by rpki-client