Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0105437a-225d-3dfc-91a5-bbc3c99e4c39.roa
File:                     0105437a-225d-3dfc-91a5-bbc3c99e4c39.roa (raw, json)
Hash identifier:          ebZrQppPNuSYrLXe5MmMZbnQ1Gg/qx5x+S91/7t8oIg=
Subject key identifier:   D7:29:ED:AB:31:01:84:5F:24:15:29:16:34:BB:8F:02:4A:05:0D:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404C08701198F067D467A3BC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0105437a-225d-3dfc-91a5-bbc3c99e4c39.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        40.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4c:08:70:11:98:f0:67:d4:67:a3:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=9e15fcca-c38b-4561-a145-836c009c2add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:94:96:2a:22:be:d5:8c:0b:85:29:a1:b8:
                    ad:16:f1:f8:f4:3e:9a:25:84:4b:10:ce:ad:99:1c:
                    e9:fe:2f:93:d9:2c:9f:00:7d:c3:f8:e2:82:6c:ed:
                    14:9d:8f:87:96:ba:7d:71:ce:a7:ed:61:b0:7f:18:
                    24:bb:68:7b:2e:da:ac:82:00:32:d6:78:be:0c:e5:
                    b4:83:c4:c7:e4:96:03:fd:b1:d7:4c:d4:f1:62:c3:
                    b7:45:ce:85:31:fe:0e:75:a8:34:b3:35:56:bf:91:
                    20:64:f0:b5:2e:f5:cb:06:3d:1a:d6:3e:06:b9:25:
                    9a:06:9a:32:a2:81:19:be:25:6f:1f:a7:85:87:d1:
                    0c:c8:93:bb:41:0b:61:92:e5:bf:88:82:8e:38:a0:
                    9f:2b:c5:b5:64:1b:b9:9c:c4:9b:14:bc:e9:39:f7:
                    39:e5:f4:14:14:75:e6:60:94:6b:d7:9e:b8:78:b5:
                    36:b8:bb:75:90:20:78:49:e6:58:c5:a3:25:43:79:
                    00:00:ca:e1:52:5b:b4:3c:40:09:7d:51:1a:7e:38:
                    ba:38:61:93:5f:e5:d3:2b:0f:d6:f3:bc:26:ed:39:
                    a7:11:03:dd:88:18:88:0e:c1:69:3c:b6:21:d7:a4:
                    a2:0d:67:42:f6:d0:0e:78:5e:50:59:db:8e:cd:a0:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:29:ED:AB:31:01:84:5F:24:15:29:16:34:BB:8F:02:4A:05:0D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0105437a-225d-3dfc-91a5-bbc3c99e4c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:89:fa:3d:21:e4:18:45:a1:a4:ad:f7:7f:bb:be:65:b7:c1:
         da:f4:84:d3:64:59:66:a9:96:68:b3:6e:b1:45:99:1e:12:cc:
         79:87:de:bc:26:cd:fc:e1:79:6d:28:c6:c4:51:a7:3b:6c:56:
         ce:1b:09:3d:b4:a5:50:8a:0e:87:ae:cc:a3:43:8d:92:6f:24:
         58:42:40:bb:08:44:a3:8e:e9:f0:3b:cd:c6:ae:2f:81:2e:14:
         cb:1c:b2:a4:6d:c4:76:5a:22:25:59:5d:c5:c3:22:c4:3c:b6:
         cc:c4:29:63:74:36:c0:81:fb:ed:10:24:c1:8b:73:ec:3e:a3:
         04:cc:e5:9f:1f:5e:34:3e:da:e8:67:66:50:1d:32:f1:ab:10:
         66:24:8e:83:d1:9e:a0:ea:97:c4:0f:2c:75:63:53:b3:d7:99:
         42:59:27:67:6b:28:a4:51:7a:63:10:0d:95:17:2d:b5:e8:b1:
         95:ef:ae:1a:87:c9:73:6c:eb:32:b3:35:09:73:5d:37:d8:c8:
         a6:0d:a4:7f:b9:98:9c:47:c5:d7:74:8c:1e:4b:72:e5:9f:f8:
         ac:ea:df:e8:89:15:10:a2:79:d1:34:84:4e:0d:bf:e4:00:68:
         40:2e:17:67:ce:95:ef:16:96:ea:7c:df:b7:79:e3:45:ca:c2:
         70:6a:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:52 2025 by rpki-client