Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d78c8c-8895-33f2-851d-82b48ed4ca32.roa
File:                     20d78c8c-8895-33f2-851d-82b48ed4ca32.roa (raw, json)
Hash identifier:          AkrcVLUsV19Nv0S897IqC73weDK5JIg9XkR8TpXCwSs=
Subject key identifier:   8C:2B:71:C9:07:A9:6D:90:72:AB:74:10:F9:C3:4C:80:7D:FC:68:91
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96FDC7F6D14CA31B17F33980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d78c8c-8895-33f2-851d-82b48ed4ca32.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        192.189.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:fd:c7:f6:d1:4c:a3:1b:17:f3:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=a8a9488c-f5e4-4fba-a658-50aae483400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:c0:6d:98:40:55:c6:84:67:a6:a1:35:77:
                    48:20:7c:22:15:c7:31:a9:3c:3d:31:ff:72:fb:35:
                    7c:e1:a8:00:0e:e4:85:c0:af:f6:77:88:58:ab:10:
                    7c:39:d5:a4:97:e1:cd:90:22:22:f2:b8:6c:10:81:
                    db:c3:27:c6:f4:bd:fc:65:f5:09:09:38:e9:1f:e3:
                    12:3a:77:1f:81:03:d8:0b:be:0b:ec:9e:b5:de:95:
                    05:80:69:c2:a5:3d:6d:e1:0c:81:93:21:83:fb:2b:
                    0a:6e:3f:77:48:cb:17:f6:d2:31:ea:8b:bb:07:df:
                    fe:79:33:7a:20:79:fd:10:c3:02:8a:91:df:db:e0:
                    df:a5:d1:b8:b3:78:18:d3:e6:6e:92:24:a9:9c:50:
                    d9:33:74:e0:18:52:af:b2:fe:b2:fd:da:ec:96:ef:
                    66:64:92:64:7d:c3:f7:f3:4d:69:b1:1e:e0:af:d7:
                    37:7d:1a:a9:6b:cc:9f:4e:3b:ef:88:36:29:57:89:
                    65:bb:f3:0c:56:f3:1a:c4:b2:b9:f2:ab:71:c9:1f:
                    a5:9d:52:6c:2b:1d:2c:ef:d4:ad:5b:55:87:c4:f9:
                    a9:4c:44:bd:64:a4:e2:66:f3:23:ef:cb:fc:c9:73:
                    31:d3:b2:37:d1:a5:33:2e:18:f1:2c:a9:2b:f8:ea:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:71:C9:07:A9:6D:90:72:AB:74:10:F9:C3:4C:80:7D:FC:68:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d78c8c-8895-33f2-851d-82b48ed4ca32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:42:c1:03:6c:c9:43:de:35:b3:d8:1b:dc:ed:26:05:e7:
         84:bb:fc:20:5b:34:a6:6c:27:22:e4:ee:9e:b0:3c:95:27:37:
         a0:3e:c0:74:e4:2d:91:dc:c4:ee:f8:f7:4f:e1:4a:79:de:1c:
         04:e0:06:75:1d:b7:5f:23:a2:7d:66:2a:64:bb:16:4c:5c:b2:
         95:a4:69:51:09:a7:cf:5c:9f:3c:1b:57:2e:17:fb:e7:4e:5a:
         dd:b0:6e:1b:e2:d2:b2:8f:ae:e2:e6:60:b9:9c:e2:d4:87:9b:
         ff:0d:99:28:8a:ce:0a:18:b1:47:82:0e:47:8e:bc:90:dd:4d:
         f5:00:48:86:f6:59:a9:da:b1:30:38:58:19:eb:a9:9c:6b:a4:
         cb:fe:c8:d3:aa:11:84:78:16:48:ed:5c:a8:70:92:70:1e:8f:
         3c:6b:b4:98:58:51:f9:23:76:a5:ef:75:d0:35:b5:74:30:36:
         41:4a:6f:36:7d:6a:31:aa:49:b1:a0:97:a9:d5:9b:d5:c4:ee:
         1a:41:29:88:e4:78:9e:e7:94:04:b3:78:3d:19:ef:94:6d:60:
         50:39:9e:09:4a:6f:f2:e8:6a:dc:33:a6:be:b0:fa:4b:b7:f9:
         6d:8a:4a:75:c5:c1:20:90:0d:f7:e4:d6:42:ce:08:b9:ed:e1:
         a6:9d:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:43 2025 by rpki-client