Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7201ab-a49d-381e-b755-5c7fefc878ec.roa
File:                     0a7201ab-a49d-381e-b755-5c7fefc878ec.roa (raw, json)
Hash identifier:          guum3MMRrnbplNv4q9MqRL+rjsKlBtvDnTO4wQVh7Mw=
Subject key identifier:   CA:99:F4:07:B0:A8:EC:8C:3C:3A:A4:2F:39:35:D1:FD:8C:0E:D4:B0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F596A0E60A10B65E8CD03D980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7201ab-a49d-381e-b755-5c7fefc878ec.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.45.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:6a:0e:60:a1:0b:65:e8:cd:03:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=06421188-97fe-493a-b1dc-21ec1c4a172d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:1d:7e:15:87:1a:b5:de:ae:2f:a5:68:a0:
                    51:89:7e:d8:d2:06:92:31:4f:67:79:cb:27:78:69:
                    7d:b1:34:13:37:02:a3:eb:3b:08:40:65:20:48:dc:
                    a7:e3:d0:0a:12:f8:37:ec:1f:28:fd:ab:19:77:2e:
                    23:1c:32:6a:5a:c5:47:b1:d7:16:18:aa:c4:88:91:
                    2a:9c:cb:b8:22:d0:f4:22:cb:8b:82:8f:20:e4:f6:
                    20:8c:d4:bf:c4:60:79:98:e8:33:0a:91:5d:84:08:
                    d5:4a:fd:5e:4f:fc:f2:d5:08:fd:59:e2:bd:c5:27:
                    fc:af:25:03:55:1b:bc:43:1d:03:83:60:03:3e:ad:
                    15:ad:42:f4:1c:3d:c3:be:41:5c:72:62:f4:6a:30:
                    dd:2e:03:55:85:dc:4e:e6:9b:50:d1:1b:34:42:b3:
                    4b:10:59:74:1d:8d:83:8e:c3:6d:72:6e:de:2d:c3:
                    5a:ef:28:83:36:17:08:da:d3:fd:ef:0f:60:e1:ef:
                    8a:ea:55:de:9f:3f:08:c3:6f:57:4b:3b:dc:63:b2:
                    23:b3:ae:41:71:46:e4:04:5c:e9:71:e1:83:66:15:
                    09:a5:b3:57:f5:7b:41:9f:50:03:d9:50:b1:51:dc:
                    c3:74:60:a2:d3:c6:2e:7b:5b:49:e1:0c:88:af:16:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:F4:07:B0:A8:EC:8C:3C:3A:A4:2F:39:35:D1:FD:8C:0E:D4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a7201ab-a49d-381e-b755-5c7fefc878ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:13:61:4b:ad:6f:de:72:12:b2:c2:d9:d7:7d:50:f7:16:
         db:3d:60:a7:a6:49:fb:6b:60:21:94:85:6d:be:c2:15:f8:69:
         49:70:bb:6a:b2:12:a8:cf:d8:35:e9:fd:06:49:cb:f3:43:ef:
         0d:c8:72:46:2a:ee:ef:bc:ab:7b:51:20:06:be:5d:f5:02:71:
         a2:76:70:f5:96:aa:1d:ef:34:68:2f:c5:01:f7:f7:8b:89:81:
         6a:93:9e:fc:d5:89:ce:f0:ce:cc:59:6f:3b:95:84:9c:2e:ca:
         86:5e:43:37:c2:1e:a3:ff:ad:0c:c5:74:92:0c:77:5b:25:9a:
         15:29:8e:c1:8b:7c:4b:28:a5:bd:62:50:c9:f5:a0:7e:b9:aa:
         b4:cb:71:fc:bb:f2:ff:4c:9a:96:f3:26:c8:d9:ae:99:c3:46:
         46:88:e5:f3:45:2e:69:6a:1f:31:7d:38:06:05:44:4e:82:e5:
         3b:0b:47:1e:54:8d:e4:16:22:cb:d1:ad:07:53:c4:ad:c3:a8:
         99:d1:5a:2c:43:2e:c0:2f:cf:dd:04:bc:16:93:38:b2:aa:08:
         46:96:59:36:cf:e4:48:27:82:c4:ba:b0:86:d1:34:71:cb:92:
         f4:49:82:4e:e5:df:ba:7b:08:dc:b1:aa:09:1e:f4:27:c1:8c:
         a2:c9:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:18 2025 by rpki-client