Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27f4819b-3d3d-3bae-b8d0-d81a8b347a19.roa
File:                     27f4819b-3d3d-3bae-b8d0-d81a8b347a19.roa (raw, json)
Hash identifier:          1qQqFdCiU0tiQafCJ1TCgYjG9j8CxFYRHEuwTTenK40=
Subject key identifier:   38:56:88:1B:57:37:6D:02:75:F2:0C:CC:F9:22:1D:69:7D:4E:21:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCEAAC54A1F6ADB791D5E8010
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27f4819b-3d3d-3bae-b8d0-d81a8b347a19.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        75.45.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:aa:c5:4a:1f:6a:db:79:1d:5e:80:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=b867b792-3f3b-47b7-92f9-5f57a984a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:a8:b8:ea:15:34:b8:d3:eb:fd:c4:4a:98:
                    0d:54:fa:ed:22:33:44:d6:c6:15:0f:6a:2c:39:22:
                    46:d4:c0:85:7c:1e:95:6b:5c:c8:1e:df:ce:7f:2c:
                    60:64:1e:65:47:f7:32:5b:41:65:a9:a6:92:0e:5f:
                    3f:f0:53:b4:b9:ea:24:3a:b9:ad:b9:65:0b:b3:32:
                    96:24:d7:04:4d:fe:e8:7f:07:04:5d:98:25:f1:31:
                    32:5f:4e:3f:89:6e:f8:28:4e:23:d1:0a:8a:0f:7f:
                    c6:7f:d2:e9:f3:10:2f:ba:ec:91:29:02:fa:5f:37:
                    7c:23:9f:d6:f0:91:a0:c0:f0:57:99:3e:fc:8d:85:
                    1b:9c:20:ad:ca:c1:0e:30:88:02:84:b8:ab:61:ec:
                    ea:c2:02:1a:e2:f9:8e:73:b7:73:7f:69:1a:a1:25:
                    41:9a:40:1c:06:27:66:b8:96:3c:b4:12:75:81:ec:
                    b6:b2:3c:09:3d:bd:01:bb:64:58:33:21:e0:50:73:
                    51:2b:f1:ff:f0:55:10:67:04:9d:f1:e1:83:98:33:
                    79:21:33:e2:56:b9:12:95:80:a7:47:3d:d6:ee:e0:
                    8c:af:27:88:00:84:f9:ed:f1:59:af:67:34:d3:ec:
                    bf:f2:8c:72:ef:72:52:57:da:2c:35:f6:4c:68:ff:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:88:1B:57:37:6D:02:75:F2:0C:CC:F9:22:1D:69:7D:4E:21:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27f4819b-3d3d-3bae-b8d0-d81a8b347a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.45.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:05:ad:36:24:5b:15:cd:d8:47:ba:92:58:5f:64:15:cb:
         43:9a:02:6f:0c:c0:d0:ae:97:ca:20:9f:03:52:b7:aa:e9:dc:
         bb:36:09:24:cf:2f:db:c8:bf:9b:7b:f8:44:ec:0b:b1:c3:a8:
         9e:a3:c3:d5:b1:aa:7a:ac:87:03:20:b5:f6:1d:2d:6c:f1:33:
         92:b2:01:4a:97:5b:fa:09:c0:05:69:00:84:b8:51:ff:1b:9d:
         3e:56:93:f9:f8:39:2a:91:53:ad:4a:f0:0d:d0:6d:53:48:00:
         27:80:70:07:97:d1:b0:58:79:8f:51:85:50:24:bc:16:46:cf:
         1a:f1:8d:63:4f:ae:40:1c:d8:f2:fa:73:d9:58:6f:18:8a:30:
         4f:34:b9:4e:31:3f:e9:17:c7:b5:b3:ca:89:5c:e3:2e:3d:8e:
         c0:6e:58:85:a6:34:92:fd:43:20:cc:83:5b:78:af:8c:88:a7:
         f5:64:48:41:5c:30:61:c3:b7:1f:07:3a:c0:d2:9c:14:64:c1:
         4c:51:25:6e:98:ea:29:7d:89:82:ae:91:5c:06:5f:76:70:eb:
         b3:e2:d4:d5:22:8d:ac:97:c0:e1:49:72:99:58:07:49:09:1a:
         a6:1c:49:29:43:6e:c5:99:7f:fd:d3:cd:25:c7:86:f4:de:2e:
         19:36:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:12:07 2025 by rpki-client