Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2594d7fe-f141-32fb-9fc1-9bb3d878b0d0.roa
File:                     2594d7fe-f141-32fb-9fc1-9bb3d878b0d0.roa (raw, json)
Hash identifier:          bBz2iQfPkmvLrbpT0wDACdefM0evm7+Clt2am/TF55A=
Subject key identifier:   BB:51:6C:03:F9:E8:0E:1C:48:09:BD:34:53:06:4A:E5:03:C9:AA:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F387EB423A509BA56D9BE6800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2594d7fe-f141-32fb-9fc1-9bb3d878b0d0.roa
Signing time:             Sun 11 Sep 2022 12:00:00 +0000
ROA not before:           Sun 11 Sep 2022 12:00:00 +0000
ROA not after:            Mon 17 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        130.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:38:7e:b4:23:a5:09:ba:56:d9:be:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 11 12:00:00 2022 GMT
            Not After : Oct 17 04:00:00 2022 GMT
        Subject: CN=57d91f37-0ad3-4014-9df5-3e7641013bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:da:d5:a1:ef:22:ce:73:ea:03:af:88:e2:
                    c8:55:b6:e3:8d:c8:cb:9c:7b:f5:13:37:cf:03:83:
                    fb:37:c2:56:b5:50:29:ba:e1:2f:0b:e4:fa:20:06:
                    6b:c6:8b:ce:b0:d2:d7:2c:40:33:66:6e:79:d7:1e:
                    d3:eb:24:6e:6b:04:1f:4a:94:be:8e:ac:d9:d5:3c:
                    79:0a:4e:97:01:31:08:10:c2:96:51:e5:8c:24:78:
                    b0:43:9e:33:a6:d8:09:aa:8f:eb:57:25:03:04:3c:
                    b8:71:27:6c:25:8f:43:51:7e:34:60:dd:89:63:76:
                    c1:96:01:5a:14:1b:b4:e3:ef:bb:cb:e3:7e:0f:29:
                    0f:39:2d:41:b4:c5:c0:2e:6e:36:41:e0:37:11:8f:
                    2b:e2:ca:77:45:51:d2:2d:84:d4:26:04:d0:80:ff:
                    f5:d5:33:af:d7:f2:54:6d:3e:c8:17:d0:19:7c:3a:
                    9d:5d:bd:f8:4c:91:b5:b2:22:e8:f3:79:30:71:be:
                    79:fd:ce:44:ad:8c:7d:59:22:54:b1:c7:93:5d:34:
                    e1:b7:70:2c:3f:86:0b:24:54:26:ca:49:34:c8:dd:
                    5c:ea:19:ca:12:63:3c:c8:90:da:4a:0b:fa:48:71:
                    ec:a7:9c:e9:f0:a7:2f:db:9e:eb:fc:b6:02:98:88:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:6C:03:F9:E8:0E:1C:48:09:BD:34:53:06:4A:E5:03:C9:AA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2594d7fe-f141-32fb-9fc1-9bb3d878b0d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:e2:90:a0:f2:5e:1c:db:63:dd:a2:e7:47:82:ea:a6:a9:
         27:9a:a3:63:01:d1:39:b8:6f:4b:9c:44:3d:2e:1f:d4:be:43:
         8e:17:f7:f1:14:e8:02:10:d5:1c:db:e5:2e:ba:32:17:94:85:
         ab:a2:c1:e2:fb:6f:79:b3:23:88:96:38:7f:bc:09:b4:9e:41:
         2d:84:b3:71:16:65:b7:ca:54:8b:2d:d0:2f:a4:6e:4f:33:06:
         bc:73:55:57:25:cd:cd:e9:25:7a:1d:35:14:5e:96:8a:19:30:
         23:72:85:f2:dc:c1:ba:04:1e:0c:f4:60:41:20:9a:6d:90:65:
         a7:ab:61:38:02:d9:37:4e:c1:a6:16:ad:9d:fa:06:f2:72:ad:
         81:8e:d8:31:9f:74:9e:96:e1:1e:29:33:bc:af:4c:dd:df:93:
         97:46:cb:98:9c:0e:cd:48:0a:ee:79:4a:9c:a7:70:8c:bb:90:
         a8:bd:14:9b:59:0b:d9:90:34:53:a0:df:b5:d0:eb:0e:dc:45:
         a1:51:37:f4:86:40:e0:f6:5b:d3:2f:3a:b9:e4:57:74:18:34:
         d1:32:3d:3c:20:d2:1e:a9:24:8b:5f:4a:c1:46:a7:28:16:45:
         c9:e3:ae:ba:03:d7:51:49:cd:14:3e:8d:83:fe:95:23:35:f1:
         98:67:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:00:18 2025 by rpki-client