Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039f933a-0816-3ae1-a74c-e495a48b198d.roa
File:                     039f933a-0816-3ae1-a74c-e495a48b198d.roa (raw, json)
Hash identifier:          yiPcZHt0HPHein9g7tnBGYyOzKIUAcIxh2jBDcpWuS8=
Subject key identifier:   F7:0B:06:5E:4D:E0:9B:33:89:41:7A:9F:00:14:30:9C:81:B8:D0:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB609EB15F50BDCFB2B658000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039f933a-0816-3ae1-a74c-e495a48b198d.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b6:09:eb:15:f5:0b:dc:fb:2b:65:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=ca8bd33d-6ad0-4acf-8bb9-4ad3b09fe417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:71:7a:69:69:2d:2c:67:11:cf:3e:59:4f:
                    41:33:60:50:0d:72:67:23:bb:81:9d:8c:51:f2:5b:
                    48:9b:7b:30:69:f1:22:df:fb:e7:4f:f7:da:f3:cf:
                    ae:af:72:09:43:82:04:b3:43:62:22:eb:1d:60:ab:
                    b6:29:36:e4:bd:97:f1:4c:dc:95:f8:2b:41:b1:b1:
                    ae:db:f0:03:dd:58:4a:cb:2c:ae:9e:a8:1a:09:78:
                    69:20:dd:21:ed:37:7c:6a:14:91:f0:57:95:53:af:
                    06:9d:ed:96:b3:63:9a:37:ea:41:65:28:22:38:ef:
                    8a:00:9e:40:6b:83:d5:43:c3:7d:7f:4f:ca:10:f4:
                    97:6f:16:ad:93:40:ef:cd:f2:f6:83:cc:f4:8d:6e:
                    e1:e4:f4:73:e6:23:d5:c0:f1:12:b1:43:11:4b:df:
                    bc:29:a6:dc:f9:b7:b7:10:03:4a:2f:73:3b:5e:7f:
                    6d:8c:36:c9:d0:3d:17:a0:19:31:c6:a7:ac:d2:40:
                    b7:0b:f8:03:74:9e:3e:d2:84:22:af:a9:62:86:8f:
                    3a:80:17:18:4e:4b:60:97:fa:40:ce:a3:19:94:da:
                    59:6f:97:68:eb:84:48:42:dc:0e:8f:b2:98:bb:3e:
                    d1:44:57:2d:88:82:c4:33:5b:fa:c4:9d:b2:21:bf:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0B:06:5E:4D:E0:9B:33:89:41:7A:9F:00:14:30:9C:81:B8:D0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/039f933a-0816-3ae1-a74c-e495a48b198d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:73:81:6f:45:0c:d7:c8:59:c0:77:22:6d:e2:1c:af:cf:
         fc:36:d6:fb:61:f6:b7:2d:f6:8e:8e:c0:5c:71:19:33:ac:e0:
         2e:54:31:66:65:f7:ff:c9:23:db:50:b1:3c:18:e2:6d:75:54:
         88:e2:2e:34:f9:84:38:ea:0d:92:df:6c:cb:80:02:60:dd:4e:
         52:68:58:5c:17:f7:1c:13:43:b1:84:8b:a6:e6:81:bb:8a:a1:
         a9:b0:62:dd:cf:c5:4c:2d:8c:ff:89:af:43:1a:5a:41:66:72:
         c3:3b:8d:ac:4b:e0:3f:78:83:c1:25:3e:69:9b:ad:3a:ba:ae:
         1f:f6:6a:42:7b:01:69:1a:36:16:f9:4d:0f:b7:1e:b4:d9:54:
         89:c9:8e:21:e7:da:d3:29:6f:a4:02:32:91:de:a6:3a:a7:b8:
         ed:91:44:3a:df:75:9b:46:6b:7f:40:ba:29:2a:a3:0c:67:4b:
         04:5c:71:c6:61:0d:cd:b3:ea:13:15:f2:dc:21:a5:83:05:d8:
         f6:f7:61:1c:2b:44:fb:7c:57:ba:f7:c0:b2:59:ee:73:86:3a:
         e7:08:66:41:3f:f4:8d:fe:22:4d:4b:a4:bb:bb:d4:8e:7a:d7:
         ab:01:62:9d:f2:ea:0c:81:39:7e:32:9b:b0:cd:dd:42:b0:c9:
         a8:ff:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:03:07 2025 by rpki-client