Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa20bcef-5c64-3a6a-a600-7e0326ee0668.roa
File:                     fa20bcef-5c64-3a6a-a600-7e0326ee0668.roa (raw, json)
Hash identifier:          5VHkRX0cGfQ4NSvqFDTE0JGpt3FSsEVHOQntPS9xSaY=
Subject key identifier:   B2:77:7E:37:8B:56:E5:31:72:92:0F:4F:23:69:F2:13:6E:2D:42:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6C25256B30A7559CB216A180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa20bcef-5c64-3a6a-a600-7e0326ee0668.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        99.82.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:25:25:6b:30:a7:55:9c:b2:16:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=5dd9a0c2-f330-48eb-b383-690a71b0939c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:84:ec:ee:4a:5f:14:78:c1:cb:80:79:42:
                    52:35:d8:ad:50:10:c2:3a:4c:33:4d:98:2e:48:2a:
                    54:31:20:88:5c:07:24:fc:19:38:d3:26:9c:ce:f7:
                    a3:e0:cd:76:26:a8:74:87:d6:da:7e:9c:08:26:4b:
                    9a:02:10:71:e2:d1:0f:85:ce:19:9b:15:b7:a3:6a:
                    07:f9:11:6c:84:72:21:b8:63:95:96:73:c3:9a:49:
                    2f:9c:07:1c:92:97:47:59:f5:55:dd:aa:5e:f8:90:
                    d0:85:ea:15:55:b9:47:3f:74:96:44:59:c9:8e:3d:
                    27:5b:32:9c:b1:a9:0c:d1:f3:26:8d:b9:89:e9:c9:
                    1a:d8:e1:02:12:3b:d0:2d:87:f9:c7:74:e3:88:48:
                    1d:42:72:fd:9c:4d:24:d9:c6:fe:cf:46:3e:75:08:
                    ea:d7:d2:03:d5:7e:3c:ec:ce:5b:7e:6c:a7:04:d6:
                    44:39:3f:4b:21:76:7f:1c:c3:35:9c:ba:79:8c:8b:
                    a2:87:56:de:73:fc:5a:00:15:ed:ca:c9:59:f9:ea:
                    bf:9c:2b:02:8c:f9:b5:41:fe:47:50:0a:5d:33:46:
                    d5:03:52:2f:92:ac:10:7f:16:eb:b1:41:0c:5f:fe:
                    d4:c6:ac:eb:23:79:95:01:fe:b5:10:41:8a:bf:9f:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:7E:37:8B:56:E5:31:72:92:0F:4F:23:69:F2:13:6E:2D:42:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa20bcef-5c64-3a6a-a600-7e0326ee0668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:28:c3:8e:fa:a5:9e:40:52:ca:9e:71:ed:9f:e0:f0:62:
         08:26:f1:91:63:c2:06:7c:c9:ec:ab:0e:69:dd:c6:ee:bf:06:
         85:ab:13:4f:99:68:59:04:14:75:e7:f4:15:21:fb:93:59:40:
         d2:c3:9e:be:ad:b2:68:37:83:28:da:d0:f0:6e:45:80:05:59:
         b8:9a:2d:5a:64:db:67:7d:47:d8:e5:59:58:07:06:0c:87:4e:
         44:aa:c0:e4:c0:ff:54:46:50:cc:85:f2:52:32:82:18:a5:d1:
         97:36:42:cd:3f:bd:98:ee:8c:ac:88:a0:c6:8c:6d:1c:79:33:
         f0:51:1e:e3:1b:52:6a:21:7e:a3:1a:44:60:02:84:e4:26:f6:
         c2:dd:d5:7d:d4:e1:a6:ce:6d:6e:3a:fe:8d:6a:c6:7d:e6:04:
         0c:4a:f1:7d:66:ba:b3:75:6a:d7:19:57:f5:b7:c5:9b:26:1b:
         5a:10:2d:c4:14:58:86:3d:5b:e0:05:8f:a0:78:62:42:e8:80:
         c2:1e:47:89:c6:8c:f0:93:f1:05:d3:bb:e0:1b:9b:28:5e:1d:
         61:eb:d7:60:c3:4c:be:f6:c9:98:64:35:6c:1c:98:4a:ff:ce:
         7f:96:84:59:e4:35:a8:45:72:bb:dd:9f:e1:40:7a:2f:9a:c2:
         69:b4:09:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5sJSVrMKdVnLIWoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NWRkOWEwYzItZjMzMC00OGViLWIzODMtNjkwYTcxYjA5MzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFOE7O5KXxR4wcuAeUJSNditUBDCOkwzTZgu
SCpUMSCIXAck/Bk40yaczvej4M12Jqh0h9bafpwIJkuaAhBx4tEPhc4ZmxW3o2oH
+RFshHIhuGOVlnPDmkkvnAcckpdHWfVV3ape+JDQheoVVblHP3SWRFnJjj0nWzKc
sakM0fMmjbmJ6cka2OECEjvQLYf5x3TjiEgdQnL9nE0k2cb+z0Y+dQjq19ID1X48
7M5bfmynBNZEOT9LIXZ/HMM1nLp5jIuih1bec/xaABXtyslZ+eq/nCsCjPm1Qf5H
UApdM0bVA1IvkqwQfxbrsUEMX/7UxqzrI3mVAf61EEGKv59EEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJ3fjeLVuUxcpIPTyNp8hNuLUIAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmEyMGJjZWYtNWM2NC0z
YTZhLWE2MDAtN2UwMzI2ZWUwNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0RKMOO+qWeQFLKnnHtn+DwYggm8ZFjwgZ8yeyrDmndxu6/BoWrE0+Z
aFkEFHXn9BUh+5NZQNLDnr6tsmg3gyja0PBuRYAFWbiaLVpk22d9R9jlWVgHBgyH
TkSqwOTA/1RGUMyF8lIyghil0Zc2Qs0/vZjujKyIoMaMbRx5M/BRHuMbUmohfqMa
RGAChOQm9sLd1X3U4abObW46/o1qxn3mBAxK8X1murN1atcZV/W3xZsmG1oQLcQU
WIY9W+AFj6B4YkLogMIeR4nGjPCT8QXTu+AbmyheHWHr12DDTL72yZhkNWwcmEr/
zn+WhFnkNahFcrvdn+FAei+awmm0CR8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:22:29 2025 by rpki-client