Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d12ff916-79b6-3469-abbc-72893323ecb4.roa
File:                     d12ff916-79b6-3469-abbc-72893323ecb4.roa (raw, json)
Hash identifier:          lUaliW3ikWX/7ktAzvcGWfdiRV2hVukb9C+bJFcqycY=
Subject key identifier:   5D:D1:EA:75:1E:94:E4:8E:96:9F:B9:28:FD:B4:CD:2C:52:91:08:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C02F74D00FC8AFD2AF401E5
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d12ff916-79b6-3469-abbc-72893323ecb4.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:02:f7:4d:00:fc:8a:fd:2a:f4:01:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=dc9d44f9-27ef-4dbb-b95e-5fdd42e42099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:4c:fb:f1:45:0a:b7:f7:3d:9c:31:1c:6d:
                    d1:5f:6f:f7:99:b8:37:63:5c:9e:89:c1:9f:32:9c:
                    0b:28:78:2c:54:f6:09:ef:8a:53:d4:b8:03:e8:90:
                    56:db:73:19:1b:04:45:7e:cc:a6:35:94:50:a8:3a:
                    27:79:9c:3c:2c:c9:85:2b:9b:cf:f5:47:a2:59:5f:
                    c5:ef:29:2a:96:47:a6:e1:2a:3d:b8:98:85:10:34:
                    5e:17:d9:e4:90:d3:b3:54:37:1a:3a:5f:f1:6e:d3:
                    84:6b:11:69:a5:ac:5c:7a:bf:cf:bc:21:bb:9b:42:
                    49:5c:33:af:40:59:dc:86:5e:17:8a:c4:4d:ab:52:
                    84:89:09:59:37:1b:5a:68:7e:09:33:f4:aa:74:8a:
                    f9:42:b5:cc:9d:21:a6:32:61:42:fe:8c:d3:b0:92:
                    68:b3:8c:0f:ac:6a:7e:ca:e9:33:64:c1:ff:4c:02:
                    54:b9:e6:20:f8:a3:f8:74:d1:5c:55:49:7b:f1:03:
                    62:c9:92:8c:52:1a:c1:fc:57:db:8c:7d:43:49:99:
                    c1:a4:fb:17:0b:3c:bf:43:1e:f8:51:2d:1c:f0:8a:
                    13:06:6c:8e:3e:db:9d:9a:b3:ca:2a:8b:85:bb:44:
                    ed:a4:9e:95:02:52:41:08:2a:d9:49:ef:a6:06:c9:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D1:EA:75:1E:94:E4:8E:96:9F:B9:28:FD:B4:CD:2C:52:91:08:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d12ff916-79b6-3469-abbc-72893323ecb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:e9:d7:52:7b:fd:ca:09:b4:95:b8:06:96:c3:29:67:fa:
         ac:e8:41:af:31:49:60:3f:e2:d0:66:ce:e6:cc:cc:0b:c5:c2:
         bb:0d:57:6c:25:bb:4a:b1:44:52:40:45:5b:cc:11:bf:57:ec:
         68:fb:e1:3a:25:32:ee:04:85:ed:df:3f:e9:ec:59:86:c5:d6:
         c5:c1:c1:35:c1:41:0c:32:86:99:4b:5b:5e:94:b4:06:32:7a:
         87:39:c1:ca:cf:c6:57:11:81:52:29:fc:c4:a9:66:5f:1b:18:
         c2:cb:a9:07:9a:84:92:79:3d:d5:64:eb:4e:5c:b8:61:11:53:
         e5:20:d8:95:83:00:8d:1e:a9:50:85:63:a4:d2:93:dd:34:aa:
         86:56:45:e3:17:b3:bd:79:fb:08:b8:39:e4:cc:a6:c5:70:a3:
         6a:42:5d:2f:98:59:eb:77:d6:eb:d9:ba:0a:c3:65:61:a8:b8:
         a2:67:94:59:18:8e:da:a7:aa:f1:63:4a:0b:2d:38:b8:cb:33:
         de:78:de:52:f2:d4:4d:7d:44:3a:f0:83:12:bb:ed:34:62:2b:
         0d:d2:2c:89:b8:56:59:61:2e:0c:2f:3a:fb:45:e9:6e:71:1e:
         ee:08:20:c1:38:48:0e:07:94:79:12:47:18:2b:9e:aa:f7:fb:
         f0:6b:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:39 2025 by rpki-client