Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244957c6-af22-31b6-9997-a84c733a8aa2.roa
File:                     244957c6-af22-31b6-9997-a84c733a8aa2.roa (raw, json)
Hash identifier:          24P/KN/g8KHgW87JWDKtKM9HnaAQfsaKSntKzpzH5ug=
Subject key identifier:   D3:89:B2:2D:1C:1B:27:4D:AD:DB:AB:47:16:02:76:5D:2F:B5:CF:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE888D91F9396D6DFAE7702C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244957c6-af22-31b6-9997-a84c733a8aa2.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        158.252.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e8:88:d9:1f:93:96:d6:df:ae:77:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=cffdfa9e-fc36-41f5-b977-61c1b84fd1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:83:a5:4e:27:e4:c8:2b:c2:de:44:73:a5:
                    6d:3d:da:51:52:ea:9a:27:c9:13:55:71:26:9d:2c:
                    5d:40:42:5f:a7:eb:9c:3b:74:e1:b5:d4:36:c9:e4:
                    7d:98:22:cb:d8:11:89:ad:91:bb:e3:cb:64:17:be:
                    e7:61:cc:ee:a4:8c:c9:1f:74:6c:97:5a:f9:dc:c0:
                    40:fa:f7:5d:35:74:5e:d3:3d:2c:d2:5a:02:ba:93:
                    fa:9a:b0:c1:3c:7c:3d:dd:34:f3:72:70:2a:9b:66:
                    9f:ce:25:58:72:34:13:eb:ec:92:9a:f9:80:1e:5e:
                    cb:e6:b3:2d:c6:a2:9e:d5:e1:81:bf:8f:e1:e5:41:
                    8c:58:ff:29:23:6e:fe:0e:ed:0e:7a:bd:3a:07:9e:
                    b3:8c:62:34:b5:35:e1:58:76:28:a4:f3:38:1e:35:
                    39:1a:d5:ff:f6:ba:5f:19:ff:bc:03:b9:eb:00:99:
                    03:4d:26:1c:61:60:3a:44:31:64:60:aa:46:9a:85:
                    5f:e5:f0:c4:92:a2:47:10:48:82:75:2c:f2:f2:6f:
                    88:56:f9:c8:ee:01:17:5c:37:59:ec:ed:e7:ce:62:
                    14:b4:b4:85:9e:de:da:4a:fd:e7:ac:c9:bb:23:71:
                    4b:e7:a5:d9:4f:e4:37:7d:71:86:2b:43:e5:84:07:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:B2:2D:1C:1B:27:4D:AD:DB:AB:47:16:02:76:5D:2F:B5:CF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/244957c6-af22-31b6-9997-a84c733a8aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:a0:94:ad:35:13:04:c9:2e:c5:36:16:a3:35:27:88:62:
         12:78:f8:36:53:bf:76:5b:b3:a8:93:fa:0f:19:57:27:4e:7b:
         ba:c8:d9:fa:de:7c:36:d7:8e:7f:e9:0d:09:52:d1:6c:5e:24:
         ac:59:19:15:8b:14:8e:0d:15:62:24:82:17:f2:16:9c:ca:ae:
         a4:47:0d:09:a6:2f:4a:e3:f4:4e:45:20:71:a1:12:9d:1a:ce:
         77:d7:fc:2a:93:94:95:68:f1:d3:dc:4f:a9:e1:dc:a3:74:39:
         63:8a:a9:23:d4:a2:15:c2:37:a5:57:72:20:3b:d4:0d:a0:fb:
         85:bb:53:ad:7d:f3:8a:51:46:60:63:12:73:ee:2e:e4:e4:b8:
         79:06:1e:3b:22:33:c6:30:71:09:d7:bd:8e:5a:41:51:df:58:
         9f:d6:ff:17:79:48:35:4a:e1:3b:49:91:74:5e:1d:9b:0e:49:
         92:74:72:34:32:4e:67:eb:07:b0:a4:75:ca:98:05:23:93:e2:
         82:ec:1d:ce:2e:2e:87:c2:d6:6c:b9:e7:ed:4a:0f:b5:34:24:
         c0:fe:67:b5:64:5c:c8:ba:ae:57:9c:d3:a9:96:b6:c4:5b:a0:
         f7:25:ee:ca:17:74:44:89:84:d9:99:9a:41:29:da:ae:6d:6d:
         6b:2e:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:54 2025 by rpki-client