Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0e3dcac-732d-330f-87f5-b47f009263bc.roa
File:                     d0e3dcac-732d-330f-87f5-b47f009263bc.roa (raw, json)
Hash identifier:          LTyWDFAqynWsm7F1kCavzjOZOpm5YLV/oxWhW5Cv0Ik=
Subject key identifier:   BF:9E:93:A2:69:08:41:A1:68:88:DB:65:E5:CF:DE:36:28:FD:12:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCF9AE302A5A356A3FFDF7080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0e3dcac-732d-330f-87f5-b47f009263bc.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        99.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:9a:e3:02:a5:a3:56:a3:ff:df:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=86f9ccd1-b5ed-4725-aec7-580d8ac64ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:92:f4:7c:20:59:a4:5f:87:10:27:2d:e7:
                    cc:77:50:f2:21:d6:46:21:59:9e:60:00:94:6b:90:
                    29:08:fc:9e:70:61:1e:32:f2:37:0f:08:d0:70:09:
                    96:08:d1:9f:cb:47:fa:c6:85:3c:52:74:6b:04:dd:
                    dc:8f:ad:8c:fe:d0:f9:d3:4f:94:e0:33:32:0a:3c:
                    91:20:a6:67:c5:a3:f8:9c:28:c8:7e:f2:ac:2d:b1:
                    56:68:23:db:e1:82:4d:37:9d:58:ab:19:24:cf:7f:
                    34:3d:75:8f:0a:33:a9:c2:03:dc:fa:85:e3:6f:32:
                    0c:df:9c:41:72:03:dc:12:41:d9:fc:14:9b:9d:16:
                    1f:7a:93:f7:36:8b:8b:76:89:2e:50:90:75:6b:97:
                    be:47:ba:95:be:ee:7b:40:c5:2f:94:fb:69:8d:a4:
                    70:87:d6:f7:d7:6f:da:76:a5:de:87:c8:eb:07:bd:
                    0a:76:33:dd:0c:f6:fa:45:36:65:9d:54:4f:82:a7:
                    dd:9e:6d:f5:1e:48:fd:29:18:76:1c:23:22:e3:d0:
                    e6:ab:78:06:50:32:13:40:83:28:1d:8d:f0:31:32:
                    5e:0a:2a:06:e8:b9:0d:ea:21:38:3c:58:12:c0:bd:
                    4e:28:f6:1d:22:29:6d:8b:b2:de:d2:ab:6e:e4:e8:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9E:93:A2:69:08:41:A1:68:88:DB:65:E5:CF:DE:36:28:FD:12:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0e3dcac-732d-330f-87f5-b47f009263bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:20:01:c9:00:a0:96:70:cf:1f:f5:e7:9b:1c:6b:05:60:1c:
         51:3b:58:9c:66:31:5f:a4:d8:cf:2e:7a:a7:bd:07:28:11:28:
         9d:73:4e:9b:a5:aa:15:ea:c2:d8:f7:27:b2:79:ab:f7:dd:f6:
         4f:28:a3:79:9c:3f:5b:f3:1d:88:df:b5:a3:48:72:7d:8f:ea:
         57:9d:95:e2:89:04:d2:c1:72:f7:ed:91:97:44:02:7d:e4:c0:
         59:89:a5:8f:6c:d3:2e:e2:40:ee:3d:70:27:38:62:79:32:14:
         95:35:d1:75:8c:b0:e1:e4:d7:70:2d:be:9d:a2:1d:a8:91:6b:
         4d:19:73:e5:7b:d4:37:82:5d:f6:dc:c9:ee:b8:42:e8:ce:df:
         64:f0:96:27:b6:f2:7f:bb:48:e7:2c:76:5e:1f:d8:bb:a9:0b:
         f7:d6:58:a3:5e:fc:82:5b:e2:0d:28:44:1a:3a:dd:df:f5:f7:
         65:53:ce:68:74:24:65:66:29:a9:ef:24:a5:44:63:fe:59:0b:
         fc:9a:c9:06:39:1a:7e:2f:34:1e:d0:e1:9a:e2:e2:00:07:0a:
         c8:09:ba:e4:15:6f:ac:4e:42:f0:fa:c4:06:0b:44:e6:b2:5f:
         e2:e9:ab:c4:05:c5:c4:0d:aa:2a:0f:f0:74:51:1d:0e:8b:c9:
         55:90:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:54 2025 by rpki-client