Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/99917b87-dd57-3cc0-81f6-00b15929fa71.roa
File:                     99917b87-dd57-3cc0-81f6-00b15929fa71.roa (raw, json)
Hash identifier:          4uSeM1SOkF9/lpgQBMycIY7NhTR7YTxVznJ/Vu25n4c=
Subject key identifier:   CD:C6:22:6B:0B:CA:F3:C8:3C:1E:3E:66:34:6C:70:F3:44:E9:B0:4F
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584900215652D8B1927F55D45BC0
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/99917b87-dd57-3cc0-81f6-00b15929fa71.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     21775
IP address blocks:        199.15.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:56:52:d8:b1:92:7f:55:d4:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=93b229e8-e299-4653-8fd7-d65f38beb3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:a9:39:bc:99:d1:62:25:1d:01:1a:3c:03:
                    60:c9:cc:99:bb:f8:44:f3:f0:81:78:c0:75:51:ec:
                    ea:59:db:a7:f3:82:22:a4:20:e6:c2:65:f3:49:7c:
                    56:7f:3c:42:da:99:cb:38:b3:75:e4:ff:91:98:9d:
                    7c:06:bf:21:b9:d3:38:74:2b:7f:50:aa:b7:49:08:
                    ca:72:21:d4:80:79:ca:d3:7e:63:31:16:44:5a:0d:
                    83:1c:2a:3e:b4:f2:3c:c5:0f:72:d1:a5:86:60:ca:
                    8f:b9:7f:ce:c7:a7:c5:d5:18:19:4a:b4:e2:fb:11:
                    c2:f9:8a:52:62:27:4e:ff:91:10:0b:18:b1:3b:74:
                    44:21:df:fb:1e:16:73:4a:bb:48:43:b7:ff:73:c9:
                    55:06:d3:1c:70:31:ae:83:9a:37:7b:88:b7:97:16:
                    68:9f:f5:bf:9c:47:9e:9b:4b:e3:d0:f0:61:63:c7:
                    48:00:ed:0c:8b:7e:38:79:50:8d:96:46:df:a0:c7:
                    d0:64:b7:2f:05:9d:fa:ee:b7:df:cc:77:6b:a1:aa:
                    c1:2c:38:63:59:d2:ce:b1:65:c2:44:00:c3:7e:a0:
                    52:53:42:2e:1f:9b:d8:36:59:b0:1b:70:a8:5a:23:
                    06:84:8b:fa:da:c6:52:3f:9a:21:d5:56:6d:80:ce:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:22:6B:0B:CA:F3:C8:3C:1E:3E:66:34:6C:70:F3:44:E9:B0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/99917b87-dd57-3cc0-81f6-00b15929fa71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:3a:2b:5b:aa:6d:80:e4:24:1d:c6:13:f3:fb:42:c0:21:
         f9:b9:92:af:cd:f7:18:cf:25:2e:ca:9a:3f:83:7d:fa:a3:7c:
         3d:73:8f:18:20:04:b7:b3:1a:53:01:15:41:e2:2c:c9:17:17:
         1c:ad:68:77:0f:41:29:6b:33:56:43:4d:b3:12:4c:66:d9:04:
         31:50:81:19:23:02:56:b1:e3:64:53:7a:49:68:93:30:6a:3e:
         41:c1:39:40:19:df:c8:19:fb:84:83:bf:70:6d:f3:f9:a7:51:
         2d:fd:cd:8c:0f:f8:51:4e:d3:e0:7c:d9:50:a8:ea:33:b2:ac:
         75:0a:42:b0:d3:6c:61:a8:32:0e:1b:41:a3:04:ae:80:bd:e3:
         85:54:86:45:f5:89:a1:08:49:a3:ba:21:88:5f:a8:44:0a:06:
         af:18:99:06:78:57:c0:e4:ae:f2:6a:35:de:6d:be:76:fd:ec:
         72:86:e8:01:ed:6f:91:0b:65:5b:42:11:b4:c7:d4:59:c2:85:
         80:ed:24:67:fa:98:54:8e:62:0e:b9:89:05:a8:7c:51:b9:65:
         d1:ad:c0:13:87:62:d6:17:85:fa:8f:5d:7a:1d:65:8d:1f:51:
         08:02:6a:86:6b:84:d3:18:3f:0c:54:52:a7:cd:63:89:19:51:
         22:94:39:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVZS2LGSf1XUW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiYmYyOTctMDc5ZC00YzkxLTkzNDEtMTI5N2U3ODhj
MzI1MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
OTNiMjI5ZTgtZTI5OS00NjUzLThmZDctZDY1ZjM4YmViM2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldSpObyZ0WIlHQEaPANgycyZu/hE8/CBeMB1
UezqWdun84IipCDmwmXzSXxWfzxC2pnLOLN15P+RmJ18Br8hudM4dCt/UKq3SQjK
ciHUgHnK035jMRZEWg2DHCo+tPI8xQ9y0aWGYMqPuX/Ox6fF1RgZSrTi+xHC+YpS
YidO/5EQCxixO3REId/7HhZzSrtIQ7f/c8lVBtMccDGug5o3e4i3lxZon/W/nEee
m0vj0PBhY8dIAO0Mi344eVCNlkbfoMfQZLcvBZ367rffzHdroarBLDhjWdLOsWXC
RADDfqBSU0IuH5vYNlmwG3CoWiMGhIv62sZSP5oh1VZtgM6FawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3GImsLyvPIPB4+ZjRscPNE6bBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJi
ZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3ZTc4OGMzMjUvOTk5MTdiODctZGQ1Ny0z
Y2MwLTgxZjYtMDBiMTU5MjlmYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDJiYmYyOTctMDc5ZC00YzkxLTkz
NDEtMTI5N2U3ODhjMzI1L2QyYmJmMjk3LTA3OWQtNGM5MS05MzQxLTEyOTdlNzg4
YzMyNS5jcmwwHwYDVR0jBBgwFoAUFYvl0Qfxf8fPbbFdLUnwwCx4NMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMmJiZjI5Ny0wNzlkLTRjOTEtOTM0MS0xMjk3
ZTc4OGMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxw9TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFppOitbqm2A5CQdxhPz+0LAIfm5kq/N9xjPJS7Kmj+DffqjfD1zjxgg
BLezGlMBFUHiLMkXFxytaHcPQSlrM1ZDTbMSTGbZBDFQgRkjAlax42RTeklokzBq
PkHBOUAZ38gZ+4SDv3Bt8/mnUS39zYwP+FFO0+B82VCo6jOyrHUKQrDTbGGoMg4b
QaMEroC944VUhkX1iaEISaO6IYhfqEQKBq8YmQZ4V8DkrvJqNd5tvnb97HKG6AHt
b5ELZVtCEbTH1FnChYDtJGf6mFSOYg65iQWofFG5ZdGtwBOHYtYXhfqPXXodZY0f
UQgCaoZrhNMYPwxUUqfNY4kZUSKUOQQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:23 2025 by rpki-client