Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25300071-2b8a-39cc-83c4-ff02d0bae57c.roa
File:                     25300071-2b8a-39cc-83c4-ff02d0bae57c.roa (raw, json)
Hash identifier:          oDD+tLDP8PmUTUaKgUjxKwP6fe2YJP8Wheaum1kn8C0=
Subject key identifier:   5D:1B:F1:48:0A:8D:11:8A:C3:E2:31:C8:57:48:BD:3F:7A:22:96:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7E06C86A4496A696545BA910
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25300071-2b8a-39cc-83c4-ff02d0bae57c.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:06:c8:6a:44:96:a6:96:54:5b:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=96af9f82-227f-45f3-a071-4f964b08e3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:d4:f6:ba:8d:ce:98:de:b5:6c:eb:0e:cd:
                    9c:14:1b:c5:7a:30:f4:88:a4:e3:9f:b8:10:a6:c8:
                    00:b4:25:2b:83:90:a8:ef:93:59:d7:1d:76:b8:88:
                    00:e5:a1:13:46:3c:c9:8e:65:1a:bd:d4:fe:03:8f:
                    97:4f:0a:b5:26:81:fa:c5:74:a8:38:e0:e1:aa:b5:
                    8e:e8:be:28:5b:75:1e:e1:33:26:20:75:5e:38:32:
                    83:36:29:73:44:29:17:5d:b2:62:9a:b5:ae:52:fe:
                    20:62:07:64:d3:40:a3:17:2f:4d:96:17:d2:80:6e:
                    06:5b:0c:e0:16:41:97:27:64:70:a2:14:c5:0e:2b:
                    44:33:68:50:34:7a:bd:9e:60:71:cf:de:ef:2c:3a:
                    6d:e8:41:83:38:cd:54:8d:69:87:e1:56:95:88:d3:
                    ba:61:29:44:30:92:c7:e3:48:39:8a:79:cb:c2:9f:
                    3e:2d:69:4a:1c:88:59:95:ec:ea:e1:22:eb:bb:35:
                    95:d5:e7:27:a1:97:8c:95:ab:96:a7:ae:75:73:39:
                    7d:41:48:38:2e:04:4b:73:53:89:3c:78:f2:29:3e:
                    27:6f:9f:99:1d:0b:8b:3a:29:ab:7b:da:b9:17:33:
                    1d:8c:e4:e9:4c:b1:b5:fb:68:df:56:50:aa:e4:e8:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:F1:48:0A:8D:11:8A:C3:E2:31:C8:57:48:BD:3F:7A:22:96:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25300071-2b8a-39cc-83c4-ff02d0bae57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:57:16:99:16:e7:e6:44:17:98:84:3a:0f:40:58:ec:6e:
         cc:c8:f0:25:cb:29:6a:9f:55:25:e2:99:8d:e1:ab:fa:4b:69:
         3c:cc:50:ff:14:0d:99:d7:c6:ec:0e:84:b1:87:ef:53:18:1b:
         05:32:28:99:e1:74:ac:4a:01:8f:d0:42:35:e2:7f:bc:1d:fb:
         b2:36:39:cc:c4:31:1e:20:0d:8f:4c:a4:fe:40:b5:00:a0:00:
         7d:f4:67:75:57:8c:8c:3a:5d:aa:7e:86:ce:83:30:42:09:99:
         8b:41:6c:26:b4:b6:79:db:37:ec:75:1c:21:9e:18:f5:ed:22:
         95:db:58:9f:8a:9f:fc:84:33:ce:15:3e:26:54:b1:7c:5f:39:
         f4:4d:de:9b:e1:49:93:64:31:75:2c:5e:03:84:42:4a:13:81:
         ff:4b:90:e3:50:ca:aa:e1:d9:51:40:4e:a3:f3:9f:4e:69:34:
         c0:40:8e:6b:28:07:d9:62:97:92:49:98:92:79:15:a4:96:da:
         83:8e:09:6b:ff:0f:e3:33:ba:01:d0:02:72:b3:79:7c:01:7a:
         5b:0d:f4:b5:f1:11:98:ff:1f:cf:12:a5:ef:01:cb:b1:b9:f7:
         3c:cf:b2:8e:47:35:e0:ce:fc:c7:93:fb:0a:c8:fd:f8:9c:9f:
         8f:a3:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:31 2025 by rpki-client