Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c95dcd-3c60-335a-ac40-fa57abcdd463.roa
File:                     24c95dcd-3c60-335a-ac40-fa57abcdd463.roa (raw, json)
Hash identifier:          rbqbzPKwUsk6boiShLLTY6H44Jp78Tt+4gg+fUkF6qM=
Subject key identifier:   A5:70:CB:61:2C:80:76:97:AF:BF:F1:6F:43:B8:B4:9B:54:D8:DE:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD17EE22DBD13092BB4E5014B
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c95dcd-3c60-335a-ac40-fa57abcdd463.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        184.32.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d1:7e:e2:2d:bd:13:09:2b:b4:e5:01:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=2899e5db-5c70-46a6-820a-59d77e94fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:3e:01:6d:48:86:eb:27:5b:03:28:c5:f2:
                    44:fb:94:c4:54:bc:15:36:37:e5:49:7e:71:6f:a9:
                    3d:59:7f:08:0e:c1:fe:af:c3:72:47:09:cc:15:8b:
                    5c:c8:e6:00:ba:2c:18:60:09:18:48:5c:4e:bc:4c:
                    c6:42:62:46:3e:80:73:c6:b0:3a:0b:e6:4a:cb:d0:
                    5d:e5:aa:cd:c1:ac:61:3a:bd:85:6c:26:bc:f1:80:
                    0f:25:79:e6:ac:13:b1:1e:d9:df:7a:90:74:d0:15:
                    0a:ab:6a:9d:a9:8e:85:db:db:31:81:66:77:7b:f8:
                    6f:19:d0:23:69:ba:14:ea:f0:0f:e4:08:78:74:71:
                    86:d5:82:a7:b1:e3:24:33:a4:74:fd:0e:eb:45:71:
                    fd:05:ef:1b:9e:00:9d:0e:07:28:7f:6c:2f:8e:19:
                    f0:86:e2:98:f3:7d:17:f1:48:eb:61:78:0d:ca:1a:
                    c7:f1:05:bb:56:94:33:6f:20:2a:f7:0b:5b:e8:ef:
                    83:99:10:32:5b:00:69:d8:a7:f3:62:74:8e:cc:4c:
                    66:bb:90:5e:1a:07:dc:22:57:05:ac:60:dc:02:ec:
                    6b:26:6c:c9:cd:e8:06:6d:e3:f1:07:e1:32:7f:a8:
                    0d:65:33:77:28:98:51:71:81:33:8f:d1:f1:ac:d0:
                    ec:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:CB:61:2C:80:76:97:AF:BF:F1:6F:43:B8:B4:9B:54:D8:DE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c95dcd-3c60-335a-ac40-fa57abcdd463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:3f:58:ea:12:6f:e7:f3:73:13:e5:21:f3:19:2d:03:2a:cb:
         0f:17:c8:68:9c:42:57:d0:50:cb:4f:7c:d4:6d:7e:9f:43:10:
         b1:b0:99:c0:42:18:4a:50:3a:bb:b9:36:5e:18:3d:b0:93:d2:
         95:56:e0:85:06:99:21:cc:7a:46:58:7e:f5:d5:68:72:4f:25:
         20:96:32:9d:98:d1:2c:3d:ce:52:2b:2c:9c:bf:59:67:a4:52:
         cf:62:d8:c8:bb:7e:73:a1:32:d0:b4:d3:83:25:90:a5:b8:3c:
         c5:a7:5c:ce:38:36:85:3f:cc:44:92:31:08:d9:5b:79:5d:cd:
         87:78:1e:90:25:97:36:18:12:3b:1f:03:bd:85:9c:7e:54:6b:
         89:1a:1c:15:1a:92:cb:2b:3d:8b:2d:0f:17:7f:44:52:ef:9c:
         c0:87:16:db:da:66:31:6e:7e:8b:db:19:3e:63:03:79:7d:c1:
         73:9e:c5:90:b3:a1:e1:2c:4e:d6:c4:d9:aa:e4:e4:8d:a8:ad:
         dc:33:c4:51:e8:a3:56:83:ae:b2:dc:3b:6d:3d:c2:d3:c7:c9:
         b7:0a:95:16:c8:fe:89:41:d1:da:e7:60:67:49:60:f6:a8:d2:
         83:93:62:68:25:3a:1c:d2:94:6f:cc:f2:c6:bc:e1:3a:68:3b:
         78:91:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:33 2025 by rpki-client