Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0837954e-cfb6-3fc5-9f1e-4ebe0ff24a03.roa
File:                     0837954e-cfb6-3fc5-9f1e-4ebe0ff24a03.roa (raw, json)
Hash identifier:          e3RVkDM77v+bz6zDO4yg7G37pkeJRfptwEGoyhnKrAU=
Subject key identifier:   DE:2F:BE:29:56:B9:B6:46:1A:1E:88:46:21:3C:BE:B6:81:ED:F1:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403DB25B94A222A60AC69C57C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0837954e-cfb6-3fc5-9f1e-4ebe0ff24a03.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        134.38.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:b2:5b:94:a2:22:a6:0a:c6:9c:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=2d674d44-6d98-43b4-84b8-e1ea6eb91c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:57:b8:e6:b0:7f:31:67:5b:ad:28:f7:c7:
                    88:3b:bd:57:d1:2f:3b:f4:e3:7a:5f:67:bc:35:6b:
                    b4:ff:97:60:b5:0c:8b:53:70:fa:7d:48:88:20:03:
                    51:1c:f5:17:d2:3a:28:24:a3:4c:6d:b7:3c:f1:16:
                    9a:c1:02:9d:3c:3e:e9:3d:6a:b4:24:b6:40:07:50:
                    51:cb:2c:0c:af:93:ce:4f:70:13:0e:7f:01:50:ad:
                    0e:51:86:12:17:08:a4:cf:89:69:07:d6:19:08:ea:
                    a1:5e:53:e3:5d:12:8e:63:27:e0:f0:3b:ec:72:60:
                    d8:57:ec:c5:30:d2:eb:6c:60:54:fb:21:17:e7:4b:
                    59:47:5e:a2:c4:08:15:7f:2e:1e:2a:69:10:c0:9d:
                    40:08:9f:f6:9a:d9:7e:1d:ef:e7:16:be:ae:2b:f4:
                    97:63:2e:b6:a3:3c:70:3e:81:d1:80:70:0d:23:ae:
                    1d:0d:a6:73:01:de:49:1b:40:b5:2a:8b:70:1d:47:
                    44:b7:a8:3e:24:c1:4b:a4:36:29:a9:39:8c:cf:85:
                    2b:bd:d3:12:3e:5b:65:54:bc:26:ae:0c:cd:23:52:
                    49:58:06:50:73:37:83:ea:53:16:80:4a:83:d0:63:
                    26:0c:c3:fe:62:b2:b9:89:5c:93:31:42:7a:60:5a:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:BE:29:56:B9:B6:46:1A:1E:88:46:21:3C:BE:B6:81:ED:F1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0837954e-cfb6-3fc5-9f1e-4ebe0ff24a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:a4:5c:2f:58:2a:e7:b3:2c:5b:46:08:d2:6c:15:ab:51:
         dd:81:01:cb:db:c4:05:2b:69:b7:98:04:0a:cf:45:80:41:bb:
         e3:14:c9:83:2f:59:1e:74:7d:1a:4a:17:14:c4:88:8d:7b:98:
         1e:34:83:af:39:b9:39:70:96:a1:a6:03:a2:ce:e1:db:2b:45:
         5e:65:2a:ff:86:14:13:36:33:a2:1e:f1:57:27:57:0b:00:c5:
         dc:76:8e:7d:be:cb:f8:f6:48:83:43:db:42:ac:e8:f7:f7:e4:
         32:99:da:fc:96:6a:95:ec:52:b3:3e:c3:1e:ad:f5:53:de:f6:
         65:79:dc:ff:de:70:d4:6d:75:70:29:46:68:3c:bf:5b:04:65:
         f1:9a:c0:e9:90:59:fb:1e:8f:a2:79:3b:9a:16:93:89:ce:3b:
         e3:24:1e:0a:48:c0:5d:21:77:30:21:74:32:c8:a6:1b:e9:eb:
         24:73:ce:a9:32:f2:4e:c9:4c:e9:c5:fc:9e:1a:e2:d3:94:5b:
         35:d1:ac:c0:2c:04:ad:be:a6:8f:f2:ee:80:e3:2d:b3:01:3f:
         50:5e:a4:3c:80:6a:6a:27:f8:85:d2:8d:3d:84:8c:e7:ec:48:
         3b:94:8f:2c:7e:33:80:77:4a:2a:d7:84:6d:a5:2a:2f:5e:39:
         04:59:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:00:21 2025 by rpki-client