Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68bfb7f-76e8-3ceb-87ea-6ab3ac8c47d5.roa
File:                     d68bfb7f-76e8-3ceb-87ea-6ab3ac8c47d5.roa (raw, json)
Hash identifier:          ZQpibD/fbuQVZfIqaK5ksSgMXceUTck1JjPjGfj1HPs=
Subject key identifier:   BC:00:3D:EB:5A:E9:48:87:52:42:98:B0:61:A4:55:78:76:3B:D5:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF646378837B7DA78AC638540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68bfb7f-76e8-3ceb-87ea-6ab3ac8c47d5.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        99.82.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:46:37:88:37:b7:da:78:ac:63:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=7f4d5726-c9ba-43fe-a8b4-ede67a7fba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:9f:69:da:cd:c5:f1:0e:56:e7:7a:cb:bd:
                    2b:7b:ed:62:41:8c:26:da:ee:de:5b:53:47:c8:43:
                    54:3f:f5:ac:d7:db:a7:44:4d:1c:8d:aa:40:e2:ed:
                    3c:74:46:bb:0f:a1:63:df:76:39:1b:71:a1:2c:9f:
                    e0:43:67:92:c3:98:dc:83:56:92:1f:ae:97:18:fe:
                    89:a1:11:18:35:8e:1f:30:bf:98:05:a0:91:25:f5:
                    3a:1b:dd:12:d8:cc:ad:03:92:f0:ee:6e:df:44:f4:
                    a4:da:e6:d2:a6:42:90:ba:f2:07:38:4a:78:dd:b6:
                    b7:ad:9c:fe:a0:3e:77:0b:65:a1:f5:e8:dc:39:eb:
                    a3:91:06:13:d6:f7:99:db:1d:e4:92:01:47:72:90:
                    67:94:ee:ad:1e:d2:fc:95:7a:e7:68:2d:e9:42:be:
                    db:51:ce:da:86:6a:de:4f:c2:e4:6d:9f:84:d9:83:
                    fd:d3:2e:03:fc:98:8f:9e:79:cf:6d:75:eb:ba:59:
                    2b:42:9e:29:d0:26:6a:56:b9:e3:81:46:16:6d:11:
                    a3:22:49:99:56:f2:e6:9f:fe:d0:ec:10:0f:05:b8:
                    d2:0a:3b:43:4c:c5:d4:27:4a:e0:df:6c:22:ef:69:
                    0b:38:5c:2c:f8:6f:2f:b4:e6:fd:1a:0d:0b:d1:09:
                    cc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:3D:EB:5A:E9:48:87:52:42:98:B0:61:A4:55:78:76:3B:D5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68bfb7f-76e8-3ceb-87ea-6ab3ac8c47d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:4a:a5:90:d9:85:98:1e:e5:e8:c5:4c:08:c2:c8:3e:3d:
         60:0d:f1:ef:af:89:e4:55:96:8e:66:b3:90:e1:62:59:42:83:
         c4:f2:20:07:ea:9f:4b:4a:3d:9d:47:c2:a6:b2:b4:8c:fa:94:
         07:d9:89:f6:52:fc:17:1e:d1:17:7f:5b:2b:d3:d5:c8:ab:06:
         85:59:d7:59:01:02:eb:33:86:af:c3:8c:46:1f:cc:50:2e:6f:
         6a:3d:0a:1e:d3:0d:58:af:98:99:a8:02:27:fa:33:ec:9f:13:
         91:db:ac:eb:3b:58:ec:db:82:db:48:56:21:4b:e4:03:59:40:
         9a:67:e8:f2:87:7a:5d:cc:0d:1b:0d:98:48:63:7f:31:f5:cd:
         93:a3:42:6d:d8:06:53:54:b7:c3:71:78:f4:2f:b5:60:13:a0:
         92:e8:41:1d:84:c1:4b:1c:c1:cc:88:4d:f3:12:2b:d2:f1:62:
         ff:7b:3a:ee:10:91:32:c6:a6:6f:7b:ed:5d:12:08:d3:2c:4e:
         f3:6a:99:32:91:15:92:2b:64:c6:19:44:bd:1c:09:c0:bd:fe:
         19:d2:94:2f:68:50:32:87:de:04:0c:70:ed:10:63:9e:52:19:
         dd:1f:24:ec:39:a8:a7:3c:77:3f:81:c3:96:b5:6e:d8:79:01:
         19:3a:4c:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/2RjeIN7faeKxjhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
N2Y0ZDU3MjYtYzliYS00M2ZlLWE4YjQtZWRlNjdhN2ZiYTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihWfadrNxfEOVud6y70re+1iQYwm2u7eW1NH
yENUP/Ws19unRE0cjapA4u08dEa7D6Fj33Y5G3GhLJ/gQ2eSw5jcg1aSH66XGP6J
oREYNY4fML+YBaCRJfU6G90S2MytA5Lw7m7fRPSk2ubSpkKQuvIHOEp43ba3rZz+
oD53C2Wh9ejcOeujkQYT1veZ2x3kkgFHcpBnlO6tHtL8lXrnaC3pQr7bUc7ahmre
T8LkbZ+E2YP90y4D/JiPnnnPbXXrulkrQp4p0CZqVrnjgUYWbRGjIkmZVvLmn/7Q
7BAPBbjSCjtDTMXUJ0rg32wi72kLOFws+G8vtOb9Gg0L0QnMUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLwAPeta6UiHUkKYsGGkVXh2O9XuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDY4YmZiN2YtNzZlOC0z
Y2ViLTg3ZWEtNmFiM2FjOGM0N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY1KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNYSqWQ2YWYHuXoxUwIwsg+PWAN8e+vieRVlo5ms5DhYllCg8TyIAfq
n0tKPZ1HwqaytIz6lAfZifZS/Bce0Rd/WyvT1cirBoVZ11kBAuszhq/DjEYfzFAu
b2o9Ch7TDVivmJmoAif6M+yfE5HbrOs7WOzbgttIViFL5ANZQJpn6PKHel3MDRsN
mEhjfzH1zZOjQm3YBlNUt8NxePQvtWAToJLoQR2EwUscwcyITfMSK9LxYv97Ou4Q
kTLGpm977V0SCNMsTvNqmTKRFZIrZMYZRL0cCcC9/hnSlC9oUDKH3gQMcO0QY55S
Gd0fJOw5qKc8dz+Bw5a1bth5ARk6TN4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:45 2025 by rpki-client