Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbfbeead-aa01-3202-bef4-ed28e35cc8ba.roa
File:                     dbfbeead-aa01-3202-bef4-ed28e35cc8ba.roa (raw, json)
Hash identifier:          GrBrxRj7IYAlq4wghgeBrlQDBsTcbs0NOJ1hD90E3gU=
Subject key identifier:   7C:4E:B1:B7:70:99:B6:8D:1B:BE:FE:0D:56:11:D4:4A:4C:99:CB:06
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E46FAE525BA24AD2CEC56B960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbfbeead-aa01-3202-bef4-ed28e35cc8ba.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        99.144.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:fa:e5:25:ba:24:ad:2c:ec:56:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=5be8ac17-1947-4ca8-9ca2-8f222384bc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:6d:84:c1:f3:49:ad:1a:e0:12:46:02:f6:
                    c6:dc:e0:b0:06:6d:18:3d:dc:47:f9:b2:72:46:ed:
                    84:09:93:f1:63:3b:00:64:33:71:dd:ce:7f:73:06:
                    e5:ac:c7:c3:91:82:28:9f:d8:28:81:c9:18:c0:8b:
                    c8:c5:f2:13:23:3d:4f:d1:bb:77:4d:31:3b:3a:d7:
                    3f:18:76:db:bd:6d:4a:fd:d1:05:14:04:b9:07:74:
                    67:d3:cd:47:5a:01:b8:98:ee:49:e3:12:b5:af:c8:
                    c0:ae:61:b8:57:5a:24:6b:43:2c:a6:99:33:1d:9b:
                    05:de:c4:71:7e:30:2a:09:0f:50:1a:a0:31:ce:6d:
                    30:07:a8:4f:80:89:64:39:23:0e:56:a4:42:ec:a4:
                    09:6e:8b:2e:e5:98:b7:07:8c:bb:de:68:82:56:95:
                    3a:6a:60:90:d3:ef:9c:ea:29:de:00:35:9d:2f:c0:
                    75:a4:03:a2:ef:9b:ba:c9:33:45:f7:58:5a:7a:13:
                    0c:31:0f:89:3e:a1:68:82:0d:0d:0f:a8:6d:90:53:
                    57:2d:b9:89:0f:6c:58:74:58:41:34:54:16:82:b8:
                    e8:02:47:2f:ec:9c:78:e9:d1:78:46:0f:2a:97:90:
                    71:a1:89:dc:58:2a:db:ae:7f:ae:a9:93:b9:12:3d:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:B1:B7:70:99:B6:8D:1B:BE:FE:0D:56:11:D4:4A:4C:99:CB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbfbeead-aa01-3202-bef4-ed28e35cc8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:7f:55:53:18:11:f6:6d:bb:e3:ac:52:a1:3b:9f:21:65:
         d9:68:f3:8d:0a:e7:83:99:5a:fb:f7:e8:86:b5:d1:fa:1a:d6:
         e0:2d:98:09:92:5b:4a:74:a0:0a:e8:e6:60:84:ed:ef:93:d3:
         47:d3:9b:1a:56:49:39:da:4d:07:26:a6:ff:d8:b9:f6:99:96:
         e6:18:d8:7c:1d:bd:84:56:d9:1f:46:b8:a6:58:2f:ed:2c:43:
         71:99:87:70:52:f2:12:ac:a8:be:44:d3:f0:df:b6:ef:de:d2:
         54:14:6e:37:e7:dc:9c:34:37:40:94:21:9c:5d:32:e3:db:b4:
         a4:19:33:fa:44:02:47:ec:e9:9f:a6:91:ea:e8:ea:37:36:b5:
         b3:94:76:44:60:98:62:14:96:66:c1:9b:90:a5:b7:64:80:12:
         1b:56:25:e2:58:27:18:03:fd:45:3c:fb:ec:8c:0f:b9:7b:8d:
         49:8d:9a:9b:49:0f:cf:1d:64:78:a5:4f:40:2d:8f:f4:3c:b0:
         ef:1e:bb:40:30:eb:fe:6c:c2:35:1f:5c:5c:3e:fd:b5:a9:db:
         db:28:7b:19:f3:7f:d1:05:55:4f:95:b2:f8:7b:99:3c:1e:97:
         c8:4c:70:3a:79:ba:38:df:4b:3d:7d:6c:d8:b4:65:1b:65:a6:
         d5:d5:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:51 2025 by rpki-client