Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04f7cbd7-949d-3ecc-8375-1444f776c621.roa
File:                     04f7cbd7-949d-3ecc-8375-1444f776c621.roa (raw, json)
Hash identifier:          6CbDXI7AD7KBpAbb6E+yqPnHhNx6r58atDNwqooNlm4=
Subject key identifier:   90:36:7D:C1:CF:AC:A5:57:22:0B:87:82:AA:FC:7D:2E:A4:B7:C2:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBBF8E97C21FD3C892218E200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04f7cbd7-949d-3ecc-8375-1444f776c621.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.189.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:f8:e9:7c:21:fd:3c:89:22:18:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=db0c4308-0322-4c65-8866-9949fca30cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:00:ba:15:b1:2c:e8:82:a1:1a:11:95:23:
                    4a:a5:1e:d2:f7:f9:bf:77:b5:27:dd:f8:e2:8a:15:
                    97:81:2d:b4:fc:74:3d:41:d6:d2:96:c0:94:93:11:
                    7c:bb:c0:2f:98:20:7d:24:7d:a0:15:2d:87:ca:7b:
                    f1:da:20:49:39:80:3d:09:e3:6b:c4:69:70:6d:c3:
                    61:66:3f:65:8b:69:ff:41:79:a8:51:d6:38:9e:67:
                    c1:e2:91:0f:45:bc:f5:5c:8c:21:06:92:41:f5:09:
                    f3:a9:36:2f:15:3e:b4:7d:8f:c5:27:b7:0b:06:b6:
                    8e:f1:57:02:39:1f:f3:7d:0a:22:e1:85:53:37:24:
                    74:23:3c:c0:35:d7:42:14:dd:7f:c9:83:53:db:91:
                    10:ac:50:4e:30:f5:8c:0e:58:a9:96:0a:37:42:03:
                    c0:2e:fa:e8:39:ae:9a:98:47:ce:2d:53:3e:f3:da:
                    99:34:d9:fd:63:f7:bc:88:23:b2:85:d0:ae:61:7f:
                    de:cf:2b:71:62:50:14:46:5a:fa:8b:3e:57:ca:4f:
                    9c:9c:2f:8b:81:aa:e7:38:51:5f:03:ff:c5:bc:be:
                    e0:af:4e:90:40:6e:1c:40:0f:11:5f:cf:ba:f0:75:
                    37:65:41:ba:8e:1f:a6:46:a2:bf:6b:7a:5d:09:d6:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:36:7D:C1:CF:AC:A5:57:22:0B:87:82:AA:FC:7D:2E:A4:B7:C2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04f7cbd7-949d-3ecc-8375-1444f776c621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:95:5d:b7:b6:a2:94:f3:20:a5:df:c7:86:bc:e2:8b:8d:9a:
         42:c5:41:b1:1b:93:46:ae:71:c2:2e:1e:9f:fa:12:f7:dd:03:
         06:16:43:10:74:20:6d:79:f1:be:86:3b:26:c2:ed:db:3e:02:
         a2:0a:a1:72:61:da:9e:f0:1b:19:d0:25:3f:4a:50:df:72:c1:
         1f:6a:56:0f:48:f6:a4:e5:a1:ce:17:bd:bd:01:2c:fb:da:62:
         3f:61:cc:e8:62:a4:50:9a:7f:d9:3c:85:d0:40:a2:d1:e3:19:
         41:9a:6a:77:1d:ed:89:5c:32:83:ab:3b:27:8b:c3:bb:4e:ba:
         5e:65:f1:49:52:6c:f6:60:23:40:f6:62:07:03:76:18:22:85:
         89:f4:e9:17:58:be:4b:9a:3c:ea:00:65:65:66:15:f9:14:19:
         ca:a0:33:c8:d5:83:26:1c:0a:7a:1f:f2:8b:eb:1b:ba:94:51:
         0f:c7:a0:c4:64:35:eb:62:6b:82:20:c1:c2:a9:4e:ee:b4:32:
         46:67:54:07:3e:67:89:48:de:51:ed:04:d7:9e:8c:b7:f5:08:
         5f:1b:33:16:1f:cf:e6:9b:4d:a2:fc:84:53:63:bf:98:e8:3d:
         87:da:61:43:04:22:69:40:60:84:3a:4f:10:48:c1:1a:a4:2d:
         e7:60:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:22 2025 by rpki-client