Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2395d646-04fa-361f-8ee7-b192ba8439ec.roa
File:                     2395d646-04fa-361f-8ee7-b192ba8439ec.roa (raw, json)
Hash identifier:          VA9lsrHdkYl1t3WGfRQp13AGhpkMMLgmZTackr3ytjA=
Subject key identifier:   B7:9B:7C:26:AA:EC:87:9D:AC:A4:28:D9:D5:27:AF:E4:A3:41:21:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F7128C26B17A29E80093F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2395d646-04fa-361f-8ee7-b192ba8439ec.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        75.101.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:71:28:c2:6b:17:a2:9e:80:09:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=88ed0895-b7fb-43cc-a0cc-80c8b036bb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:03:29:0f:43:bb:ab:cf:01:1f:bd:b1:34:
                    08:47:fe:ea:93:73:17:30:e0:65:aa:76:94:ff:29:
                    73:f0:a0:62:af:49:5f:a3:ea:1e:73:ea:44:60:92:
                    04:b8:0e:83:ff:f8:87:3e:f8:e6:49:fa:e9:16:57:
                    d1:7d:0e:bd:d0:69:ff:95:77:43:00:8a:4c:3c:92:
                    ed:d6:90:aa:b4:8a:53:13:52:3a:73:b1:13:69:53:
                    ce:31:d9:74:50:f2:1a:fc:4a:89:23:9d:b6:fa:99:
                    40:ba:d8:56:77:ea:6a:53:c1:63:f3:44:28:01:81:
                    9c:31:45:1c:20:9e:24:79:55:83:18:90:ec:d8:7e:
                    63:09:5a:a3:b2:63:a5:94:37:cc:16:eb:84:23:f1:
                    17:66:61:68:dc:7c:58:a3:1d:1b:01:9f:56:ce:7a:
                    39:da:47:68:69:52:20:70:72:85:5a:96:dd:cc:7a:
                    5d:cd:ad:74:1a:fa:ab:31:76:a0:28:7c:3e:b1:42:
                    18:72:7f:a4:3f:3e:36:00:12:b8:1f:2a:f7:1c:a4:
                    52:a7:71:73:68:8c:14:c8:75:0a:74:97:b9:53:77:
                    bc:04:3e:67:e5:a4:5e:54:06:ac:21:4c:97:36:5d:
                    e5:24:fc:59:8b:41:a4:d2:5d:cb:9a:26:78:58:55:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:7C:26:AA:EC:87:9D:AC:A4:28:D9:D5:27:AF:E4:A3:41:21:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2395d646-04fa-361f-8ee7-b192ba8439ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:28:82:a5:8f:9e:66:56:11:24:17:13:9f:c5:85:52:6e:e0:
         95:ad:d4:2e:04:e1:43:f8:ce:4a:01:14:94:c4:f7:3b:64:43:
         86:2b:60:e8:63:92:c5:c5:e2:49:30:93:99:75:4f:f1:ea:85:
         a6:29:65:e1:4f:91:8a:3a:11:ee:e6:a7:f7:5f:38:87:4a:ab:
         94:cc:93:86:b3:ca:08:c4:3b:d9:0e:c1:93:1f:ad:2f:49:99:
         c9:0c:c9:66:1f:ff:ce:f2:11:de:eb:bf:2f:1b:ec:20:ce:37:
         69:d0:38:9e:9f:d5:b7:e8:92:30:40:53:f9:c0:7f:8d:c6:a2:
         ca:89:4b:bc:c6:98:3a:2d:04:0c:63:85:52:f8:43:19:4d:01:
         a9:fd:ba:1b:ea:d3:84:c9:06:b0:48:40:8a:86:cd:04:1e:af:
         d5:7e:01:93:5b:2b:9e:3f:e0:e3:f0:ca:60:4a:74:10:05:20:
         1a:45:97:a2:07:e5:b5:86:30:ee:1b:a3:ee:71:be:fc:13:9f:
         43:8d:82:0f:fe:fd:bc:91:28:76:3f:55:d1:1a:70:58:36:20:
         ae:e3:f7:06:ff:2c:72:2d:9f:bd:b3:9f:09:51:4f:a7:f7:44:
         14:52:bd:01:7b:a6:8f:a2:dc:dd:d3:3a:47:02:56:6a:4e:72:
         af:49:99:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxvcSjCaxeinoAJP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ODhlZDA4OTUtYjdmYi00M2NjLWEwY2MtODBjOGIwMzZiYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEDKQ9Du6vPAR+9sTQIR/7qk3MXMOBlqnaU
/ylz8KBir0lfo+oec+pEYJIEuA6D//iHPvjmSfrpFlfRfQ690Gn/lXdDAIpMPJLt
1pCqtIpTE1I6c7ETaVPOMdl0UPIa/EqJI522+plAuthWd+pqU8Fj80QoAYGcMUUc
IJ4keVWDGJDs2H5jCVqjsmOllDfMFuuEI/EXZmFo3HxYox0bAZ9Wzno52kdoaVIg
cHKFWpbdzHpdza10GvqrMXagKHw+sUIYcn+kPz42ABK4Hyr3HKRSp3FzaIwUyHUK
dJe5U3e8BD5n5aReVAasIUyXNl3lJPxZi0Gk0l3LmiZ4WFX7dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLebfCaq7IedrKQo2dUnr+SjQSHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjM5NWQ2NDYtMDRmYS0z
NjFmLThlZTctYjE5MmJhODQzOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHS2WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIogqWPnmZWESQXE5/FhVJu4JWt1C4E4UP4zkoBFJTE9ztkQ4YrYOhj
ksXF4kkwk5l1T/HqhaYpZeFPkYo6Ee7mp/dfOIdKq5TMk4azygjEO9kOwZMfrS9J
mckMyWYf/87yEd7rvy8b7CDON2nQOJ6f1bfokjBAU/nAf43GosqJS7zGmDotBAxj
hVL4QxlNAan9uhvq04TJBrBIQIqGzQQer9V+AZNbK54/4OPwymBKdBAFIBpFl6IH
5bWGMO4bo+5xvvwTn0ONgg/+/byRKHY/VdEacFg2IK7j9wb/LHItn72znwlRT6f3
RBRSvQF7po+i3N3TOkcCVmpOcq9JmQ8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:45 2025 by rpki-client