Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9fe0079-f548-3686-828b-0fcb3f786091.roa
File:                     c9fe0079-f548-3686-828b-0fcb3f786091.roa (raw, json)
Hash identifier:          0tMlLB7gXdd/bO4qbb1FFzPmBW8kHIMUTdsuHqFFeW8=
Subject key identifier:   73:BA:D3:3F:40:60:85:B5:C3:1F:B4:31:13:AD:F1:16:26:B6:8C:14
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584067571820EC10FC38ECA33CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9fe0079-f548-3686-828b-0fcb3f786091.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        99.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:67:57:18:20:ec:10:fc:38:ec:a3:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=f833e362-2c50-40bf-af32-b670b87e57ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:f3:c5:c5:d5:8b:b3:26:8e:2b:f2:24:91:
                    0b:12:b2:69:75:6a:80:43:90:7e:60:50:27:cf:ba:
                    29:e5:1f:56:cc:14:34:06:2f:d8:d1:8c:c6:04:31:
                    8b:12:71:6e:b8:c0:15:3d:40:28:9d:96:7c:c1:17:
                    8e:a9:a0:5a:83:c8:2b:f3:75:e5:0d:71:f5:11:07:
                    c9:9b:d5:2c:67:bf:98:9e:2b:8f:19:8f:15:a7:fa:
                    6e:95:63:45:cf:b9:34:95:29:cd:97:8e:9f:d3:d6:
                    18:6f:13:c1:85:32:5c:91:17:3c:85:e7:32:db:2b:
                    f4:1b:ba:a2:54:6d:62:b3:2e:a3:14:02:34:46:19:
                    a4:bf:5e:8b:2d:c2:ff:df:1e:4f:c8:41:af:cc:d7:
                    b9:81:cc:29:3f:ce:a4:e0:94:98:93:df:c0:20:a5:
                    5f:53:85:27:6e:3c:26:12:d8:ec:eb:16:71:95:e4:
                    56:76:80:2d:aa:9b:6d:3c:be:75:42:b7:ec:cd:f3:
                    92:9a:8c:e6:b0:ac:45:ba:1e:9a:ba:d6:37:6b:32:
                    b6:35:a7:bf:c1:07:fa:70:67:3e:92:f1:31:e1:9c:
                    95:93:d8:4f:8f:d0:f8:9f:60:4f:7b:49:45:2d:89:
                    97:3b:c7:bb:0d:81:26:29:7f:ba:3c:ca:51:0a:4a:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:D3:3F:40:60:85:B5:C3:1F:B4:31:13:AD:F1:16:26:B6:8C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9fe0079-f548-3686-828b-0fcb3f786091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:02:21:69:d1:26:87:8c:da:22:22:c5:55:38:cd:72:13:
         73:f1:87:9a:ae:73:f5:f8:57:5f:e5:98:3a:a9:ee:14:fb:ae:
         32:e2:7d:33:e8:ab:9e:67:de:91:d3:1d:0e:00:48:35:d2:ae:
         e9:eb:f2:9e:04:f8:82:d3:fc:95:54:08:73:2c:be:92:6f:86:
         ff:00:72:48:07:69:64:84:50:c2:f5:a3:25:d4:bb:44:52:f6:
         0e:7e:fa:c7:05:46:31:89:78:77:b8:36:cf:fc:09:29:6e:ce:
         6f:54:26:93:88:06:98:3e:33:4b:c9:e8:85:a9:b9:c1:73:5a:
         69:ec:fc:86:ed:e9:17:85:39:d4:ec:c2:3c:fc:00:3a:b6:2d:
         16:5e:e0:47:b0:27:87:85:b9:03:77:50:6b:33:ba:da:a4:38:
         39:74:5b:02:0f:e2:1b:a2:ec:23:5f:41:d7:3b:ea:fd:e7:df:
         2e:f7:46:05:fb:92:48:4c:02:e4:41:44:92:90:32:df:ff:55:
         94:be:df:5e:aa:2d:df:ff:33:bb:65:6c:4d:df:4f:70:7e:84:
         58:5c:fc:c5:b5:d9:92:5b:4c:b6:e3:39:71:81:ec:eb:65:0f:
         5c:02:7c:fc:9d:3a:a0:dc:11:6c:d6:ed:5d:d4:e4:85:07:49:
         f5:32:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:02 2025 by rpki-client