Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b0a5d43-4da9-3cfb-a0d5-0f9f7a920d33.roa
File:                     1b0a5d43-4da9-3cfb-a0d5-0f9f7a920d33.roa (raw, json)
Hash identifier:          9E7PcD1ubrktXZVcfjEJ5yRiwTsx6UXkbRq7y8PgLjk=
Subject key identifier:   BC:55:E6:80:B6:0A:8D:DF:E9:C7:49:FB:4D:3E:C1:6D:02:07:56:D6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9B5E4AC45D9DA2382A59F380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b0a5d43-4da9-3cfb-a0d5-0f9f7a920d33.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        151.148.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:5e:4a:c4:5d:9d:a2:38:2a:59:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=3e0ef9b5-a0e2-4f54-9a54-c82d5dcdbba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:f2:04:6c:c0:75:80:3c:f6:e0:7f:2d:3d:
                    8f:ef:16:1d:e8:07:7e:c1:51:e8:25:80:43:ff:61:
                    d5:1c:59:76:91:cb:d6:79:be:b2:bf:53:23:96:2d:
                    bc:8f:0b:24:e9:0d:93:33:6f:f0:f9:66:ea:a5:8f:
                    a4:6b:bc:99:a7:c7:a1:af:fb:c7:c0:f2:50:5c:a2:
                    bb:57:54:4a:bd:97:18:4c:b1:0a:42:96:a9:95:d3:
                    95:bf:0f:c9:59:0a:0d:ba:7b:83:8c:9f:9a:29:5d:
                    76:c7:83:49:c4:bf:52:c1:3c:13:2d:1a:3e:76:19:
                    35:ff:5f:b4:99:bc:0c:3d:98:9d:c8:a3:af:d8:29:
                    0f:58:0b:13:ea:c2:0a:76:33:07:07:95:24:12:7b:
                    6c:6d:d2:ba:71:7c:75:e4:dc:48:75:81:03:3b:33:
                    dc:62:c2:2b:b5:3f:06:cd:84:75:1e:e6:1e:ff:45:
                    31:fb:c5:21:47:79:8c:f4:f9:f5:d8:d5:aa:26:82:
                    ee:ad:a5:43:e1:f6:43:2a:9a:71:df:4e:f0:ae:6d:
                    e6:b5:62:61:8f:3a:c8:19:7f:80:f7:83:b9:17:f5:
                    eb:0d:b2:90:94:6c:54:a5:48:87:19:24:ce:71:8d:
                    80:9d:d5:3d:c4:fb:3a:d9:3e:08:90:7e:03:df:0e:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:E6:80:B6:0A:8D:DF:E9:C7:49:FB:4D:3E:C1:6D:02:07:56:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b0a5d43-4da9-3cfb-a0d5-0f9f7a920d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:46:2b:a2:fd:fb:ee:f8:cc:e6:3e:82:89:a6:2b:b0:08:8c:
         3b:89:63:5a:4b:00:f1:57:27:df:84:10:06:6e:28:9b:89:6e:
         84:06:be:25:85:b2:b8:6f:30:0a:ea:e8:eb:2e:5c:ed:05:7c:
         8b:cf:b0:1c:ba:1c:58:a2:86:85:6b:7c:2d:bf:d5:ec:b1:f7:
         ec:68:9e:a5:f3:1d:7d:fd:1c:69:2c:ad:c6:db:41:e8:36:d4:
         8a:4c:4e:e8:6f:2c:e2:22:1b:d3:e1:08:3a:ea:ff:c4:03:3e:
         80:50:52:15:c7:ca:12:8b:f1:96:8b:25:4b:d2:25:22:88:25:
         2e:cf:91:49:fe:37:cf:f2:13:ae:c6:ed:49:4c:fd:4e:ed:59:
         e8:69:c4:ff:87:a9:75:ea:31:73:c7:13:f0:09:17:c0:3d:2f:
         05:ab:1d:96:0e:e0:9b:72:b7:2d:f7:54:4e:57:55:00:ec:d4:
         bb:84:b1:54:a2:f3:8f:67:3f:36:c2:ed:d3:de:95:2b:34:8d:
         b8:19:14:27:00:8f:54:a3:ff:75:13:ea:69:32:ab:ed:73:6e:
         07:ae:5f:f5:5d:4f:1b:76:ad:0d:47:5f:93:f0:b2:00:ce:5c:
         81:12:1e:bd:23:5b:38:48:b7:3f:d0:ae:2a:41:cd:48:08:6a:
         e2:64:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:21 2025 by rpki-client