Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147d9b8c-a436-33e1-9045-38eec0090f2f.roa
File:                     147d9b8c-a436-33e1-9045-38eec0090f2f.roa (raw, json)
Hash identifier:          SjKKh8LlCM09RSjl/+FyBQFeepVwMEb3X3mcNzwtJ40=
Subject key identifier:   7A:7D:C8:A7:89:1E:FD:EC:CA:C3:56:35:7C:1F:D0:59:66:14:1F:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9351086CC50CEBEE2D0214C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147d9b8c-a436-33e1-9045-38eec0090f2f.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        130.171.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:51:08:6c:c5:0c:eb:ee:2d:02:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=dbc725ae-66b8-4ba9-91b3-fae0748000ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:63:6c:ad:57:8d:7c:d5:e3:70:6a:62:8e:
                    2a:85:00:96:79:44:2f:e5:7f:39:bd:ed:fa:5d:05:
                    a9:52:22:97:25:e3:56:80:03:69:c0:ff:b3:2e:55:
                    65:04:fc:df:da:d8:59:28:89:87:5f:8c:e3:df:31:
                    33:66:26:b8:e7:78:e3:4c:0d:51:ec:72:50:f5:bf:
                    47:5a:53:7a:60:72:90:5f:a0:06:db:66:42:e1:4a:
                    d4:d0:ef:0c:c8:09:84:d7:b5:7d:c7:04:8c:15:e6:
                    ee:d9:08:44:1b:0e:da:8e:28:31:fb:56:5c:12:ad:
                    be:5b:e8:25:79:10:0a:34:ff:d5:bf:36:91:f6:b1:
                    c5:c0:20:bb:24:4e:a4:9d:09:d5:ce:17:93:19:f0:
                    87:f8:9e:3e:b3:04:41:83:96:99:b9:1b:ca:56:e5:
                    86:d9:1c:9b:82:0c:8c:59:00:f8:dc:22:c5:65:de:
                    75:21:8b:f3:02:b2:e8:13:9c:f0:4e:4f:fd:c2:cb:
                    32:84:e0:03:f8:34:91:22:bd:c1:cf:a5:3f:16:54:
                    b7:a5:3b:35:bb:c4:99:d4:7b:92:6d:3c:96:d0:c5:
                    94:7c:8e:ff:fd:d7:eb:11:75:64:1f:87:e7:8a:67:
                    2a:a6:86:3f:d6:34:a2:25:f8:f6:de:2b:5f:34:28:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:C8:A7:89:1E:FD:EC:CA:C3:56:35:7C:1F:D0:59:66:14:1F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147d9b8c-a436-33e1-9045-38eec0090f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:33:d2:b5:f6:32:00:ff:c9:ba:46:2a:23:9a:da:7e:f2:1c:
         18:cb:f8:bd:2e:48:77:57:06:02:ac:9e:32:0b:f7:77:24:a6:
         4d:c2:4e:90:08:68:6d:7f:0e:bb:ab:24:93:73:ac:8d:62:61:
         db:47:bb:29:47:27:e7:65:31:13:73:a3:48:26:f8:71:67:e7:
         e4:62:c0:6c:2b:c7:5f:09:cd:95:27:96:f7:4a:26:da:f1:9e:
         74:02:f7:96:8e:de:a5:87:67:b7:2c:6b:3e:a2:c3:fc:19:9f:
         4f:99:b6:81:14:a0:27:4d:c7:a0:3f:04:e5:67:14:ff:9b:9b:
         b9:f1:d1:35:3b:5b:60:b7:44:f6:42:2a:f6:8f:b2:ac:2b:b1:
         4d:96:11:90:4b:01:4b:0c:63:89:5c:5f:66:81:97:f0:43:79:
         1b:20:a6:23:8a:8f:96:57:9e:84:0b:ce:58:10:31:64:22:88:
         56:f8:96:d9:51:9d:ca:25:99:40:74:18:27:9d:1e:f3:be:97:
         b5:8c:cd:bb:ab:28:6b:53:35:80:02:14:15:ca:a9:f8:7d:1f:
         14:1c:d9:5c:b5:e4:d6:38:b2:57:35:e7:bd:3c:85:1f:7e:e5:
         85:92:7c:3e:c3:19:4b:c3:74:75:3c:55:97:d0:a5:f2:29:57:
         0a:6f:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:15 2025 by rpki-client