Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56401ec-61ba-3c3b-8b1e-8159503c451d.roa
File:                     c56401ec-61ba-3c3b-8b1e-8159503c451d.roa (raw, json)
Hash identifier:          g9gx+X4ss8AUfi1jyqi2ZCJ2ABpjhFj5/xF7eDg5osA=
Subject key identifier:   E4:D6:E2:01:D5:A7:B1:3B:48:52:59:BA:65:B6:DD:CF:F2:AA:16:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDD7C385E4A5D7AAB046F7B8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56401ec-61ba-3c3b-8b1e-8159503c451d.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        99.82.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:d7:c3:85:e4:a5:d7:aa:b0:46:f7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=e3bedae6-3ecf-4bd3-ade1-9bec47cf7aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:ed:f0:58:23:49:75:ed:d8:e0:18:2a:31:
                    85:40:01:6d:db:ee:87:2b:b1:1a:e1:3f:a3:68:22:
                    dc:05:bc:e4:ac:2f:70:1f:ea:86:db:06:7a:92:bb:
                    8f:8c:9e:78:77:a9:cf:9f:50:dd:20:57:43:0d:8b:
                    31:12:ba:0f:63:a0:99:88:a1:bb:70:87:0a:ac:34:
                    7e:c4:96:13:c0:dd:a1:9c:d2:de:54:36:89:6f:ea:
                    c5:e4:e1:48:27:fb:77:c2:f4:a2:4a:b5:05:d5:67:
                    60:dc:33:cb:72:2f:c5:09:7a:6f:52:25:f5:b3:c1:
                    be:1e:03:92:26:61:92:fb:9b:6b:5d:6e:66:f5:ea:
                    8e:8c:cc:be:ff:f2:43:57:38:6e:64:82:38:a3:d8:
                    a3:4b:90:29:49:81:1c:80:e0:37:f3:08:01:db:d6:
                    69:b2:f8:82:b2:7c:f3:89:4c:b8:96:04:e8:8d:00:
                    07:4f:77:dc:7a:ad:08:34:6a:e2:04:df:97:9b:6a:
                    11:9b:e5:5e:f0:af:7d:a4:83:73:fd:0f:c5:97:e4:
                    7f:e1:46:b0:6e:36:cb:aa:89:6f:43:1f:47:5b:05:
                    b3:bc:07:67:4b:20:44:a7:71:4a:d3:d4:be:f1:e1:
                    f7:67:32:84:6e:fe:8d:b6:66:66:14:dc:ff:a2:70:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:E2:01:D5:A7:B1:3B:48:52:59:BA:65:B6:DD:CF:F2:AA:16:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56401ec-61ba-3c3b-8b1e-8159503c451d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:3a:c6:ee:2a:e2:e0:d2:96:c6:32:07:dd:e4:7a:ac:48:
         98:1c:c0:2f:89:b5:bf:1d:13:67:f2:50:fc:87:d7:63:22:c2:
         2d:39:b8:c9:31:9d:b7:b5:11:95:3b:81:5e:63:a1:70:f2:3d:
         da:c4:2e:c5:27:4b:1c:48:ad:f3:63:a7:47:1d:cb:5b:93:c6:
         bb:1f:96:50:ba:54:fe:29:d9:c7:fd:d2:11:14:d5:1a:37:05:
         76:79:d3:4f:b9:51:e1:12:97:3b:b5:ed:9d:2d:be:13:dd:49:
         83:25:fb:71:3b:a6:6a:1f:7e:04:f2:8f:69:f9:b0:7e:bb:06:
         0d:d6:0d:95:3f:fa:5a:36:d0:62:ed:2a:f3:3f:9d:f5:9a:c9:
         a6:ef:04:84:05:bc:08:4e:d2:85:7b:cb:67:54:a7:dd:b8:7e:
         6a:b8:b2:48:1b:63:04:35:ae:9c:0d:a2:b6:ca:52:73:eb:96:
         aa:d4:1e:f6:30:af:cf:ae:7f:ab:0b:83:e3:bc:32:ba:56:c4:
         1e:a8:a2:96:4e:f5:6e:1b:49:10:34:8b:68:df:cf:3d:3e:c6:
         63:95:b3:b7:ba:e5:3a:5a:33:af:a4:7d:fa:e2:eb:dc:c7:34:
         60:4a:8e:0c:c8:14:92:43:b5:4e:c4:f4:bc:63:af:75:18:36:
         88:5d:50:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy918OF5KXXqrBG97gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTNiZWRhZTYtM2VjZi00YmQzLWFkZTEtOWJlYzQ3Y2Y3YWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7t8FgjSXXt2OAYKjGFQAFt2+6HK7Ea4T+j
aCLcBbzkrC9wH+qG2wZ6kruPjJ54d6nPn1DdIFdDDYsxEroPY6CZiKG7cIcKrDR+
xJYTwN2hnNLeVDaJb+rF5OFIJ/t3wvSiSrUF1Wdg3DPLci/FCXpvUiX1s8G+HgOS
JmGS+5trXW5m9eqOjMy+//JDVzhuZII4o9ijS5ApSYEcgOA38wgB29ZpsviCsnzz
iUy4lgTojQAHT3fceq0INGriBN+Xm2oRm+Ve8K99pINz/Q/Fl+R/4UawbjbLqolv
Qx9HWwWzvAdnSyBEp3FK09S+8eH3ZzKEbv6NtmZmFNz/onDPuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTW4gHVp7E7SFJZumW23c/yqhZ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzU2NDAxZWMtNjFiYS0z
YzNiLThiMWUtODE1OTUwM2M0NTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOdOsbuKuLg0pbGMgfd5HqsSJgcwC+Jtb8dE2fyUPyH12Miwi05uMkx
nbe1EZU7gV5joXDyPdrELsUnSxxIrfNjp0cdy1uTxrsfllC6VP4p2cf90hEU1Ro3
BXZ500+5UeESlzu17Z0tvhPdSYMl+3E7pmoffgTyj2n5sH67Bg3WDZU/+lo20GLt
KvM/nfWayabvBIQFvAhO0oV7y2dUp924fmq4skgbYwQ1rpwNorbKUnPrlqrUHvYw
r8+uf6sLg+O8MrpWxB6oopZO9W4bSRA0i2jfzz0+xmOVs7e65TpaM6+kffri69zH
NGBKjgzIFJJDtU7E9Lxjr3UYNohdUHc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:13 2025 by rpki-client