Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c70b6a4-6256-3c24-9d72-28f597b8d667.roa
File:                     0c70b6a4-6256-3c24-9d72-28f597b8d667.roa (raw, json)
Hash identifier:          7MLJFoN6NOER43NADhd1qgx8P7DErUk9yO9yq2AofUc=
Subject key identifier:   A2:2D:2F:94:13:09:56:ED:D3:D4:87:11:75:18:A8:21:BE:AE:0F:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF6E4A82C298D72A65EE9BF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c70b6a4-6256-3c24-9d72-28f597b8d667.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.168.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:e4:a8:2c:29:8d:72:a6:5e:e9:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=fbf35f95-92d8-4396-a3d0-069bf6ac46e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:8b:a0:0d:d1:46:ec:54:ec:fe:c2:18:6c:
                    46:cc:59:ba:99:71:4a:9e:60:75:b9:1d:f1:fb:e2:
                    08:f1:93:15:7f:b9:d1:06:11:0b:aa:5e:a0:a3:de:
                    68:bb:0d:31:7d:5a:c2:63:94:1e:72:f3:d9:29:73:
                    ce:5d:47:af:f7:6f:8a:2d:e3:ab:7e:3f:b5:88:c7:
                    e1:59:1d:f2:a3:b4:49:8f:5a:70:ae:d1:94:73:36:
                    29:33:44:7d:5e:34:6d:2f:9e:ac:eb:21:aa:50:2e:
                    fd:15:c5:a2:b8:1a:c2:ed:3a:c7:c4:89:45:48:cb:
                    40:72:cf:33:24:69:6a:38:73:cd:2e:9f:36:6e:f7:
                    72:4c:dd:6e:98:b2:b2:64:05:74:c0:99:be:ca:a9:
                    a0:f9:db:31:a9:27:45:62:44:8c:e0:87:3d:bb:73:
                    e4:7a:36:e0:fe:bf:b1:9c:2a:eb:87:b9:90:ee:94:
                    15:30:fb:0f:2d:f3:69:fa:da:92:ed:90:77:a5:60:
                    31:fa:6a:d0:42:69:66:eb:1d:35:ba:ea:5e:11:27:
                    d5:d8:34:7d:81:fe:a7:e8:97:6a:f6:05:9c:7a:55:
                    31:27:55:35:d2:71:85:8c:b0:54:d4:dd:cc:98:9e:
                    05:c4:ac:65:3b:16:3e:89:11:5c:9b:15:61:c0:fd:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2D:2F:94:13:09:56:ED:D3:D4:87:11:75:18:A8:21:BE:AE:0F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c70b6a4-6256-3c24-9d72-28f597b8d667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.168.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:f7:7b:e0:d2:79:10:9a:cd:e2:04:a2:e9:63:5d:76:10:
         64:9b:8e:a6:e6:38:2f:8d:d0:e9:0f:ec:5c:a9:a7:a3:3f:08:
         fb:e2:ac:6c:03:9e:c0:7a:cc:0d:aa:fd:6e:dc:af:89:95:ad:
         00:1d:57:99:3d:c2:21:34:ad:56:a0:15:27:15:31:27:e9:aa:
         84:f6:e9:d4:cb:3d:4d:f4:9b:10:99:d9:1b:3c:75:dc:19:f8:
         5e:42:cb:b9:3b:32:f2:cd:dd:b6:c8:84:91:5f:21:ec:c9:8d:
         88:43:92:79:3d:7d:5e:3a:57:43:cd:dd:c6:5c:13:ae:a6:df:
         30:1f:3a:e1:10:89:3b:f5:fc:46:6c:2d:34:e5:ed:69:6f:4f:
         4f:7c:02:cc:65:e6:84:60:9b:07:48:71:07:f5:3a:52:41:89:
         49:b9:ea:86:99:83:d5:0f:80:a3:0b:f6:a8:a6:7e:cc:b9:21:
         63:0a:cb:ff:cb:8e:63:e8:c9:e0:a9:75:9f:6e:9c:c1:94:b8:
         09:10:80:2b:8a:de:1f:32:6b:75:10:0b:34:b7:62:32:63:7c:
         01:56:68:81:5e:85:3c:65:19:4d:ca:2b:92:e3:f0:bb:d7:18:
         77:5e:32:c1:4b:17:86:e7:01:60:b1:2d:a2:17:7a:8e:e8:46:
         20:4c:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:21 2025 by rpki-client