Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08d3a35c-5414-3a51-9f5f-c51afba69286.roa
File:                     08d3a35c-5414-3a51-9f5f-c51afba69286.roa (raw, json)
Hash identifier:          6Jdd4wdHwiqy1ebjFaZNljinNDFXL4EM0v4ZU8ofhVI=
Subject key identifier:   A1:A0:F8:71:25:60:28:31:FD:5D:D6:DA:A5:E2:31:46:EA:6D:39:CD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA00DD8E4E5EDF87C0BB36140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08d3a35c-5414-3a51-9f5f-c51afba69286.roa
Signing time:             Tue 19 Jul 2022 12:00:00 +0000
ROA not before:           Tue 19 Jul 2022 12:00:00 +0000
ROA not after:            Wed 24 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        152.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a0:0d:d8:e4:e5:ed:f8:7c:0b:b3:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 19 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2022 GMT
        Subject: CN=1bcf33e6-2dda-43d2-9407-e939fbc32801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:ea:33:35:86:9f:43:b9:47:09:75:52:59:
                    c0:31:76:28:9a:00:06:d5:52:89:3f:55:e4:a6:90:
                    d1:57:4f:4e:0b:89:a0:73:ae:f0:07:d3:68:53:26:
                    65:98:98:e9:c8:f1:34:da:91:12:3b:47:18:9c:11:
                    61:a2:ff:4e:01:dd:eb:71:19:46:82:be:78:14:35:
                    c7:7a:2f:f1:50:96:64:47:a1:34:6b:4e:14:7f:eb:
                    a0:6b:18:13:dd:f2:74:a3:c5:8a:a5:dd:6c:6f:a4:
                    96:78:72:c7:6c:2b:5a:04:dd:a0:12:1d:7c:ea:45:
                    02:8d:ad:a6:f2:09:4a:d4:24:e1:f7:b6:8d:d5:a4:
                    e4:5a:20:98:7a:00:e1:e9:98:17:f0:e5:79:2b:97:
                    92:6d:3a:be:61:90:b1:fc:50:a2:4d:50:e8:c7:00:
                    2f:18:d5:91:f4:d4:ed:eb:c5:e8:d8:03:9d:d2:31:
                    b5:d7:2e:3d:08:40:7e:03:18:90:9c:42:46:dc:87:
                    fe:87:aa:8b:7f:d4:76:38:01:bd:c1:6a:00:55:47:
                    67:c3:a3:13:cf:23:29:0d:24:51:dd:7f:05:18:39:
                    2e:ee:91:12:27:b3:60:4e:92:cd:16:25:8c:43:dc:
                    19:89:07:75:a5:61:f3:34:4a:a5:93:0d:e2:fe:cf:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:F8:71:25:60:28:31:FD:5D:D6:DA:A5:E2:31:46:EA:6D:39:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08d3a35c-5414-3a51-9f5f-c51afba69286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:57:64:f4:45:b5:78:2b:3b:ab:74:47:48:aa:3d:1e:ca:64:
         bc:c5:81:2a:83:25:8d:c1:ff:ca:9c:e2:50:2e:0f:ad:c6:a5:
         40:1c:81:05:c0:da:b5:74:56:b1:60:d0:c3:0a:47:a8:45:01:
         90:c2:a8:e1:c9:84:5c:e9:bb:45:6c:8f:5c:45:06:09:f9:ba:
         e0:00:0f:04:49:3b:2a:14:be:d4:1f:7d:19:de:f9:20:75:d4:
         6d:3a:a8:34:4a:05:a2:57:ce:74:b7:19:b6:9c:79:f7:ac:24:
         04:42:51:fe:96:b1:9a:81:6b:3e:28:88:6b:d4:db:b0:6b:78:
         11:81:1a:85:fe:97:ab:33:7b:21:b8:a6:c3:ec:ac:6d:1c:7b:
         3b:12:6f:58:8a:52:22:68:62:2f:01:00:3c:47:cb:df:6a:fe:
         ea:8c:f8:30:9f:75:30:7b:ab:04:de:24:3d:c0:bd:cf:ba:06:
         a3:36:7a:65:77:04:42:ba:b0:77:a0:30:0a:90:62:d0:2d:7f:
         76:f5:8f:f0:a6:64:d4:37:aa:04:5c:8a:c5:d4:8d:5f:75:5e:
         6e:b5:10:4d:48:4d:8f:7a:23:71:49:dd:50:8b:e5:f0:86:97:
         b6:03:1c:95:e7:2c:d5:77:50:fd:2b:76:6a:40:76:0d:de:49:
         f2:78:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:53:01 2025 by rpki-client