Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e9dd0e-87cf-3389-85bf-bda4602601e5.roa
File:                     d8e9dd0e-87cf-3389-85bf-bda4602601e5.roa (raw, json)
Hash identifier:          7Xn7rBWHH57kPKEGAYoelg7gpvnNQazomvlgwtbEOnY=
Subject key identifier:   4A:E5:50:8C:1D:C2:E8:1D:82:57:91:9C:4A:1A:3D:38:FB:48:75:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2003566F727597D58E703F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e9dd0e-87cf-3389-85bf-bda4602601e5.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:20:03:56:6f:72:75:97:d5:8e:70:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=de77e1db-c8cc-4f2c-bb60-34d4f0146668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:a3:5f:ad:f6:c4:77:62:c1:af:48:67:a0:
                    2b:69:ce:4d:95:94:4a:e1:29:12:a4:c0:e2:44:1b:
                    97:1d:35:42:b1:ed:53:83:e0:14:8e:ab:15:8c:b0:
                    15:da:a8:ba:3b:17:3a:4a:81:3c:6b:ec:7f:4b:93:
                    cf:82:03:2b:e7:47:a8:7c:42:cf:88:ba:85:92:f3:
                    0b:12:31:e3:8e:26:b3:5c:33:da:65:61:64:23:36:
                    48:1f:f5:6a:6b:1b:85:46:11:38:cc:45:dd:8f:95:
                    d4:34:9b:22:50:c3:1f:1c:bd:9c:a6:90:5b:07:63:
                    b4:69:4a:c0:ae:3d:16:40:46:4a:a0:7d:78:f0:59:
                    bc:a2:8f:22:8d:66:d0:ba:82:23:8f:c6:4e:21:91:
                    04:e3:e1:3a:88:32:a2:45:5a:44:b5:ab:83:a7:15:
                    b9:fa:0e:f0:e6:f3:4f:e5:0d:40:8c:0f:07:45:b8:
                    76:57:c6:a5:ea:24:3e:e3:17:06:35:ec:ce:3c:90:
                    5b:c6:02:c1:65:8e:61:c4:bb:a3:d3:38:9c:d4:0b:
                    33:da:0f:79:f8:71:da:e5:79:d5:ca:3b:74:96:05:
                    ad:88:22:f6:52:c5:02:87:d3:d9:85:4c:fc:9a:17:
                    6c:48:3d:81:a8:bd:e1:c9:94:06:b6:fb:04:f4:82:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:50:8C:1D:C2:E8:1D:82:57:91:9C:4A:1A:3D:38:FB:48:75:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8e9dd0e-87cf-3389-85bf-bda4602601e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:15:11:06:e6:89:a9:cb:25:42:38:77:28:50:19:08:5b:61:
         bb:f2:05:ef:e2:e4:02:27:dc:a6:62:5b:a0:98:ed:7a:39:cc:
         53:1b:c8:a8:78:49:7d:d5:2e:3b:62:90:84:14:f1:c8:7e:00:
         72:44:d8:88:fe:ea:0c:97:dd:fb:c8:03:c8:7e:ff:01:dc:cc:
         ae:dc:07:fe:01:69:cc:d0:80:e0:d3:3d:71:34:54:b7:02:b5:
         04:43:d9:e8:ac:c1:fc:4d:e9:51:33:9c:bc:95:a3:66:a0:ce:
         f9:ea:8a:c6:c8:e1:75:93:b1:76:40:1c:2d:a1:94:be:2e:0e:
         18:0f:71:f3:fd:a9:a9:81:fd:99:2d:a0:a8:a5:64:57:d0:08:
         a7:3b:59:dd:00:c7:49:b2:82:f6:90:3b:77:82:e3:71:da:ab:
         be:2f:55:6a:8e:d4:4c:ad:e7:6d:81:f9:48:db:b7:15:e7:98:
         a5:b3:17:f7:43:04:bd:34:85:52:96:11:e8:a5:64:ab:ae:b4:
         40:13:0e:0a:c8:fe:14:74:ab:98:16:51:8d:dc:62:10:35:d5:
         06:fc:7a:11:e3:70:d1:66:74:d3:cc:ca:3b:c0:2a:d3:c4:b0:
         d2:9f:76:d2:b5:8e:10:2f:1b:c1:45:e7:bf:32:49:59:5b:de:
         18:38:65:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4gA1ZvcnWX1Y5wP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMzIwMDMwOFoXDTIyMDcwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGU3N2UxZGItYzhjYy00ZjJjLWJiNjAtMzRkNGYwMTQ2NjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql2jX632xHdiwa9IZ6Arac5NlZRK4SkSpMDi
RBuXHTVCse1Tg+AUjqsVjLAV2qi6Oxc6SoE8a+x/S5PPggMr50eofELPiLqFkvML
EjHjjiazXDPaZWFkIzZIH/VqaxuFRhE4zEXdj5XUNJsiUMMfHL2cppBbB2O0aUrA
rj0WQEZKoH148Fm8oo8ijWbQuoIjj8ZOIZEE4+E6iDKiRVpEtauDpxW5+g7w5vNP
5Q1AjA8HRbh2V8al6iQ+4xcGNezOPJBbxgLBZY5hxLuj0zic1Asz2g95+HHa5XnV
yjt0lgWtiCL2UsUCh9PZhUz8mhdsSD2BqL3hyZQGtvsE9IIEEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFErlUIwdwugdgleRnEoaPTj7SHUdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDhlOWRkMGUtODdjZi0z
Mzg5LTg1YmYtYmRhNDYwMjYwMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAY08wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkBURBuaJqcslQjh3KFAZCFthu/IF7+LkAifcpmJboJjtejnMUxvIqHhJ
fdUuO2KQhBTxyH4AckTYiP7qDJfd+8gDyH7/AdzMrtwH/gFpzNCA4NM9cTRUtwK1
BEPZ6KzB/E3pUTOcvJWjZqDO+eqKxsjhdZOxdkAcLaGUvi4OGA9x8/2pqYH9mS2g
qKVkV9AIpztZ3QDHSbKC9pA7d4Ljcdqrvi9Vao7UTK3nbYH5SNu3FeeYpbMX90ME
vTSFUpYR6KVkq660QBMOCsj+FHSrmBZRjdxiEDXVBvx6EeNw0WZ008zKO8Aq08Sw
0p920rWOEC8bwUXnvzJJWVveGDhlhg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:41 2025 by rpki-client