Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fdcf6ef-435f-3ec7-8d1c-01498aaf06f1.roa
File:                     1fdcf6ef-435f-3ec7-8d1c-01498aaf06f1.roa (raw, json)
Hash identifier:          I7QJmIEuna5fFpgqSnhSjadvRWa1gqB+mlVxFl5XqNo=
Subject key identifier:   87:4E:2E:D2:09:E1:B6:70:ED:33:3C:0D:BD:EC:F3:6E:02:39:F9:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F30267F6B86B9D825F25FA500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fdcf6ef-435f-3ec7-8d1c-01498aaf06f1.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        166.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:26:7f:6b:86:b9:d8:25:f2:5f:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=7da67db2-a6b8-4ccd-91de-385c918ccf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:6b:04:95:3c:c6:41:38:16:03:7b:9d:40:
                    50:43:43:2e:23:25:65:63:0e:6f:56:af:1f:a9:ff:
                    d5:0a:40:c6:4b:12:66:06:2f:e2:95:0a:c6:49:f8:
                    40:bc:ea:0c:da:46:c0:c3:b8:9a:2c:58:2f:21:7e:
                    6b:22:63:27:ad:61:15:5a:f3:f2:29:33:29:94:bd:
                    f9:b0:d4:b3:a1:a9:ce:c7:36:ab:af:d9:7a:4a:18:
                    94:3a:1f:09:69:d3:f4:dd:fa:5a:7d:29:63:0a:9e:
                    59:aa:00:48:f6:ee:47:5e:2d:2b:2f:92:f8:52:18:
                    80:12:95:a3:f9:0d:19:8e:58:77:87:cf:b5:33:69:
                    32:fd:09:9a:d6:ed:78:55:75:4e:00:cb:57:8a:71:
                    f9:c2:d1:e8:ba:b0:df:06:cb:29:6b:d4:9a:8e:a5:
                    bb:b8:94:c2:e6:5b:cd:c3:80:14:73:8e:6c:34:fb:
                    11:e9:ab:bd:4b:84:ea:0e:34:e4:a2:31:1c:34:c2:
                    39:a4:7d:f4:fb:98:f3:e0:88:95:b4:6a:c7:a9:63:
                    57:30:ed:ec:02:0c:67:c2:34:1d:50:8f:9b:10:31:
                    cc:1b:1a:f6:ec:89:a5:e3:56:ea:84:ee:c5:1d:b6:
                    e2:04:ec:44:22:87:83:2e:da:0a:20:7c:85:31:cf:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:2E:D2:09:E1:B6:70:ED:33:3C:0D:BD:EC:F3:6E:02:39:F9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fdcf6ef-435f-3ec7-8d1c-01498aaf06f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:80:d6:fe:5c:1b:67:58:81:ec:ed:46:fe:c7:9e:cd:31:97:
         a6:ba:ed:8f:90:f0:5e:1a:e6:22:ec:62:dd:08:d7:bf:43:79:
         c6:b3:67:be:c9:26:18:fd:5c:0f:f4:6d:23:f1:2b:ec:2f:bd:
         36:ea:4b:1d:a7:60:14:4b:87:a3:d7:55:a1:23:5b:13:a3:96:
         f9:2c:39:45:83:49:77:77:dd:65:91:a1:63:ee:ff:b9:31:45:
         47:59:59:73:4e:68:c1:3a:6e:b2:8f:6a:67:89:9a:a6:31:ec:
         b8:d8:a7:20:2c:98:e1:a7:01:7e:94:1d:68:76:44:75:f4:7c:
         d1:07:ce:cf:53:b4:ee:33:3e:d5:d9:17:8e:62:b4:78:3d:0b:
         85:1c:dc:ac:8a:da:03:2b:6a:c1:68:fd:1a:90:18:7b:db:7f:
         7f:ad:20:13:a8:96:d0:8f:bf:8d:8d:c5:45:ce:1f:53:a9:4e:
         37:5e:1e:fb:9c:51:ec:fb:62:ca:63:96:f4:98:3f:5a:96:ef:
         07:12:9e:f6:72:d2:21:6f:9b:c0:e1:5a:ba:2e:54:0c:cb:ac:
         49:11:d4:2d:16:f4:9c:79:a0:1c:04:9a:0d:01:e7:b8:2a:43:
         02:b2:0c:1f:e6:54:72:7b:7f:b7:5f:7f:de:1e:0b:09:8f:9b:
         b2:3a:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:24 2025 by rpki-client