Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11432476-290c-3a55-8202-7a70c310b1a3.roa
File:                     11432476-290c-3a55-8202-7a70c310b1a3.roa (raw, json)
Hash identifier:          4gln7zyh4TibbNdmRGfHqEclXNTSEEsyyBFpf9L6pYc=
Subject key identifier:   B4:52:12:D2:F5:37:99:11:76:61:DF:94:A3:60:45:B9:E3:A8:D2:AA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8A54EE0DBED61AA4AAA62B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11432476-290c-3a55-8202-7a70c310b1a3.roa
Signing time:             Mon 11 Jul 2022 19:12:08 +0000
ROA not before:           Mon 11 Jul 2022 19:12:08 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     7224
IP address blocks:        162.221.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8a:54:ee:0d:be:d6:1a:a4:aa:a6:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 11 19:12:08 2022 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=82e80fe3-9486-4d6e-af04-2a628357aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:36:34:75:3d:da:ae:16:c2:81:5c:c7:24:
                    91:37:5d:2f:30:29:31:b5:9a:a8:a9:70:69:15:07:
                    16:d0:ec:82:f0:40:b4:72:12:11:a2:b1:c8:6f:c1:
                    cf:9e:f9:cf:f5:e9:72:17:dd:90:f2:6e:7d:f2:cc:
                    95:ef:48:c9:74:2d:7d:17:f0:49:4d:52:b1:27:af:
                    10:14:9d:38:cd:52:cb:84:0f:b6:28:9f:e7:22:76:
                    bb:97:02:64:64:d9:4a:aa:bd:2d:1b:62:71:75:3a:
                    24:ca:19:2f:4b:a9:3d:55:74:87:d4:79:b9:78:36:
                    85:e9:81:95:ae:d3:24:12:8c:ff:75:eb:03:a3:64:
                    65:f3:95:5e:00:69:e0:32:9b:7a:80:02:9f:22:8d:
                    91:4d:31:b6:6d:1f:1b:b2:26:9a:94:bc:13:69:73:
                    90:ea:3c:95:49:9a:a7:4e:ac:16:27:af:a0:83:58:
                    8e:52:47:af:1a:e4:c1:75:e5:09:3a:b2:94:e4:0d:
                    8d:db:dd:cd:85:c6:6b:27:e7:4f:07:ac:03:f0:9d:
                    e2:bf:fe:ad:55:6c:dc:38:f4:4b:8d:1b:90:f3:d3:
                    4a:04:6a:18:f0:06:9c:33:35:fd:0d:2d:85:8e:cd:
                    05:00:82:d8:43:c3:9b:61:44:17:05:97:13:61:88:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:12:D2:F5:37:99:11:76:61:DF:94:A3:60:45:B9:E3:A8:D2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11432476-290c-3a55-8202-7a70c310b1a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:11:eb:56:20:70:c7:bb:65:eb:be:68:fc:ca:24:9e:fb:f4:
         c1:c7:22:61:4f:4d:55:11:1c:62:49:72:4c:55:37:aa:46:d8:
         5d:07:b7:af:c1:37:3e:c9:6f:03:de:7b:cd:f1:ef:44:b1:81:
         6b:3e:18:50:92:36:3d:ac:55:ed:39:fb:76:33:07:2a:49:63:
         32:43:5b:7a:b3:52:84:93:bf:2f:38:e6:71:b5:d7:8c:97:d9:
         40:44:25:41:2e:de:6e:9e:b0:ed:59:45:21:d3:47:6f:f5:7c:
         33:3a:cc:05:5b:c5:8f:8f:0c:21:7a:39:ab:d1:e7:e6:46:3e:
         21:50:be:74:77:60:09:23:df:8e:6e:08:40:01:5e:4d:51:85:
         2d:54:15:84:6f:24:91:24:f9:53:b0:1a:5e:e1:1a:96:e3:2e:
         ca:e2:5f:eb:16:e9:e7:ff:e5:d4:f9:7a:fa:8e:e5:03:91:8f:
         cb:74:b4:a3:a9:01:eb:80:73:7e:76:f4:11:e7:b4:02:56:d9:
         5b:91:50:34:7c:8d:2c:41:af:59:8a:79:7f:f3:dc:db:ee:83:
         af:43:61:41:f5:0c:45:e4:68:0e:ac:be:55:5f:d2:49:bf:92:
         bc:b1:0f:91:7f:ce:c2:20:f5:8a:dc:ab:51:06:aa:d2:d3:fb:
         ec:ac:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:32 2025 by rpki-client