Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e8ecdec-1232-3fd3-94d4-4756cf9099cf.roa
File:                     1e8ecdec-1232-3fd3-94d4-4756cf9099cf.roa (raw, json)
Hash identifier:          deqdhx36p/viFHLmB43zfjCBSeiMeiM0qalz5VDmd00=
Subject key identifier:   75:B1:5F:E0:52:F4:44:58:47:D1:37:A9:43:F1:D3:F8:B4:0B:F3:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCC1BBA45ADA71AE1974A8400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e8ecdec-1232-3fd3-94d4-4756cf9099cf.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:1b:ba:45:ad:a7:1a:e1:97:4a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=142ff3b7-7be4-47db-86a8-8ea1798d9d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:cc:c6:12:70:c5:2d:85:1a:a9:42:0d:b0:
                    59:fd:3c:27:5f:98:e6:0a:38:67:18:a2:21:f3:b6:
                    3d:e1:a6:5f:d4:a0:54:a6:1e:50:e1:6a:31:de:17:
                    17:7e:e7:bd:e1:0b:5c:9f:d2:a7:8c:97:b0:d3:0a:
                    10:40:62:cd:52:83:77:49:4f:0c:9c:4a:70:96:01:
                    dc:d5:c6:c1:5a:25:70:fb:56:fb:bc:45:0e:e2:68:
                    3c:99:20:b3:60:34:53:93:58:33:8d:4e:1c:5f:9e:
                    1a:46:92:f0:6a:e6:62:e1:b9:14:23:b5:4d:76:24:
                    d5:2a:6c:16:d4:68:c2:b0:ad:b3:08:8d:9c:4d:fc:
                    f9:ae:22:d1:fe:f2:16:d3:2f:2f:14:2f:41:30:09:
                    cc:e5:1a:bd:50:ee:ea:8a:ab:cd:60:b1:99:84:a4:
                    56:04:06:a6:0b:64:14:3e:a1:5c:3a:06:c1:3b:e5:
                    1f:2e:0c:98:0b:0f:94:b2:ac:ac:3d:43:9e:6b:7b:
                    4f:1f:ad:7c:52:6f:69:4c:09:74:5f:ff:cc:98:3d:
                    d2:e8:5f:b2:28:4c:0e:4f:d1:3a:72:11:16:0d:2a:
                    c4:18:73:d9:2f:56:98:0a:81:7e:e2:14:78:ca:47:
                    8d:ae:e5:1d:f9:c2:0d:f9:ab:89:41:81:20:51:e8:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:5F:E0:52:F4:44:58:47:D1:37:A9:43:F1:D3:F8:B4:0B:F3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e8ecdec-1232-3fd3-94d4-4756cf9099cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:6b:2e:49:61:b7:9f:30:4b:1f:82:21:69:1c:05:c7:2c:
         37:2a:54:ca:18:17:1d:3f:b4:24:06:4b:d2:ea:31:43:3f:f9:
         ba:dc:e9:ab:5d:ee:9a:ef:66:5c:39:3e:5a:3b:6b:30:3a:18:
         44:dc:f8:52:d5:3a:05:1e:4f:9a:36:b9:7a:74:2c:11:ae:75:
         4d:da:1c:a9:f2:dd:7d:97:b2:9d:86:12:8b:07:3c:b9:e1:c7:
         35:f0:43:80:48:d1:b1:13:83:bb:98:dd:7b:99:dd:90:3b:02:
         a9:f0:bf:98:70:20:bd:93:37:a6:44:c1:f0:a4:35:64:43:1d:
         33:16:f7:17:44:75:e6:72:8e:a9:24:7a:82:9a:ee:44:60:64:
         d1:41:f3:39:8a:a2:ea:4c:9f:fb:d0:81:2f:46:d8:26:52:23:
         e9:6c:a9:2a:15:58:a8:29:49:89:95:7c:59:6c:f8:6b:6f:4f:
         54:9c:91:f6:c4:2f:6d:ba:3a:4b:b9:18:2e:05:94:7c:7f:db:
         09:e2:98:5d:2a:27:87:c4:77:85:b6:bd:08:4d:ee:d9:a7:52:
         27:94:b0:96:e4:dc:3b:5b:17:e3:32:d0:97:fd:8e:b1:bf:b9:
         49:ce:21:c8:82:c9:d1:a5:29:72:07:87:33:79:6a:7b:ea:b8:
         8f:4c:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:22 2025 by rpki-client