Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c94ab6a7-a53b-304e-90a4-6665dd29eb96.roa
File:                     c94ab6a7-a53b-304e-90a4-6665dd29eb96.roa (raw, json)
Hash identifier:          UoThkrHKrFRX/qFKBf1g9zmc+GIUm9BrXz7xvTXfeus=
Subject key identifier:   B1:33:BE:1B:6A:DE:AA:0E:5C:F4:1C:07:F2:A1:E8:5D:5E:7D:10:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401C92BECCD1A289DE10CE3E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c94ab6a7-a53b-304e-90a4-6665dd29eb96.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        99.78.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:92:be:cc:d1:a2:89:de:10:ce:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=feb52a6f-1394-451e-aa8c-d175815600c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:f9:7e:57:f8:82:78:7c:3c:df:c2:48:db:
                    c0:c8:e1:4d:5d:5b:2e:52:45:e9:88:e8:bb:ff:84:
                    86:c0:a1:8e:c1:14:85:be:8b:48:a5:1b:e8:60:31:
                    36:d3:d4:e1:de:68:46:0d:99:ec:00:f1:26:14:82:
                    c5:82:a4:bd:99:27:0c:e0:b5:92:90:81:61:cb:27:
                    dc:96:7d:b3:0c:4e:4a:87:dc:c3:05:28:59:b1:86:
                    2b:fa:e6:39:83:4b:08:13:06:83:36:0a:96:ce:54:
                    a5:3f:69:b7:d7:b7:0c:48:ae:89:a3:cd:a7:d2:dc:
                    17:8c:08:0b:a2:0d:99:fc:11:5e:23:dd:62:47:f3:
                    6a:df:21:25:b9:d7:e8:f4:6a:d7:7b:0b:3a:22:88:
                    71:69:7e:c9:cc:80:d0:c6:85:ad:67:39:6a:23:52:
                    be:f4:1f:ef:f7:6f:0a:13:9e:c4:32:9d:0a:99:7a:
                    5f:32:7e:d1:4b:0d:e6:49:73:0a:b3:41:ae:91:88:
                    97:74:e3:f2:4f:d5:58:d6:1f:7e:6b:5e:6c:1e:27:
                    68:93:b9:59:4a:47:26:93:89:e9:64:94:56:d5:84:
                    13:fb:bf:05:1a:0c:8c:37:f5:24:30:46:af:48:d1:
                    b5:a5:31:88:4b:e2:77:3c:53:94:69:27:40:1d:fc:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:33:BE:1B:6A:DE:AA:0E:5C:F4:1C:07:F2:A1:E8:5D:5E:7D:10:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c94ab6a7-a53b-304e-90a4-6665dd29eb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:94:e5:01:9a:3d:73:ca:1d:b6:8e:dd:99:a1:f9:4d:34:
         d6:64:58:df:d4:76:ec:09:57:da:d0:4c:83:a1:cf:24:df:e6:
         04:18:1a:d2:0b:23:57:42:2e:9e:cc:a1:3b:c0:90:fb:63:7f:
         78:6f:14:3c:ed:5e:ca:fc:c2:4e:7b:1e:0c:75:01:ca:4b:c1:
         fe:fa:f7:4b:50:09:cd:e9:29:5d:15:94:ed:23:a8:a2:4b:80:
         8a:d9:eb:d4:0b:b8:6d:f6:c2:d5:3b:70:67:a7:89:87:87:a9:
         ee:53:17:58:8a:9d:c5:54:41:09:ae:0b:fa:85:d8:63:ff:9f:
         71:58:de:b7:dc:97:97:0c:28:9d:3d:ab:2b:e8:8f:df:64:24:
         ed:2d:5d:44:fa:8e:54:62:f9:8e:83:00:a1:02:0c:b3:ae:81:
         56:9f:b2:c8:d3:84:8e:93:29:4b:9e:6d:f3:b6:2d:9d:3a:73:
         f0:97:30:bd:6a:37:c6:e3:4d:78:94:51:14:eb:de:ff:b2:01:
         5f:8b:61:73:d6:57:a8:3d:b4:45:4f:71:6f:ef:b3:07:a0:f7:
         99:be:9c:d9:00:d5:a6:bd:7b:f8:c6:e0:e5:62:83:ac:4b:fa:
         66:27:9f:50:aa:4c:0a:7c:0e:67:e6:2e:b0:6c:a6:d9:cb:05:
         e9:fc:10:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAckr7M0aKJ3hDOPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZmViNTJhNmYtMTM5NC00NTFlLWFhOGMtZDE3NTgxNTYwMGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9f5flf4gnh8PN/CSNvAyOFNXVsuUkXpiOi7
/4SGwKGOwRSFvotIpRvoYDE209Th3mhGDZnsAPEmFILFgqS9mScM4LWSkIFhyyfc
ln2zDE5Kh9zDBShZsYYr+uY5g0sIEwaDNgqWzlSlP2m317cMSK6Jo82n0twXjAgL
og2Z/BFeI91iR/Nq3yEludfo9GrXews6IohxaX7JzIDQxoWtZzlqI1K+9B/v928K
E57EMp0KmXpfMn7RSw3mSXMKs0GukYiXdOPyT9VY1h9+a15sHidok7lZSkcmk4np
ZJRW1YQT+78FGgyMN/UkMEavSNG1pTGIS+J3PFOUaSdAHfzDQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEzvhtq3qoOXPQcB/Kh6F1efRD7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzk0YWI2YTctYTUzYi0z
MDRlLTkwYTQtNjY2NWRkMjllYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY06AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+qlOUBmj1zyh22jt2ZoflNNNZkWN/UduwJV9rQTIOhzyTf5gQYGtIL
I1dCLp7MoTvAkPtjf3hvFDztXsr8wk57Hgx1AcpLwf7690tQCc3pKV0VlO0jqKJL
gIrZ69QLuG32wtU7cGeniYeHqe5TF1iKncVUQQmuC/qF2GP/n3FY3rfcl5cMKJ09
qyvoj99kJO0tXUT6jlRi+Y6DAKECDLOugVafssjThI6TKUuebfO2LZ06c/CXML1q
N8bjTXiUURTr3v+yAV+LYXPWV6g9tEVPcW/vsweg95m+nNkA1aa9e/jG4OVig6xL
+mYnn1CqTAp8DmfmLrBsptnLBen8EOI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:08 2025 by rpki-client