Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2814e3bb-cf5d-3cbe-8a14-1c4c04676a67.roa
File:                     2814e3bb-cf5d-3cbe-8a14-1c4c04676a67.roa (raw, json)
Hash identifier:          6Ahd1YGTDlV1UIngZPnvF5W3Nk3QOxLf0rFsdkEdqeQ=
Subject key identifier:   65:23:53:E5:28:6D:1D:55:1B:C0:FB:0A:2A:AB:50:C7:0E:82:31:38
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC6C3B47C18B5EF955E7763E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2814e3bb-cf5d-3cbe-8a14-1c4c04676a67.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        162.208.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:c3:b4:7c:18:b5:ef:95:5e:77:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=4c93da17-d1af-43de-a65a-72632f1c3520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:73:84:97:ef:bf:74:fc:93:80:19:dd:72:
                    5f:a2:f3:a3:6b:2f:87:ed:dd:b4:bf:d7:55:7f:ef:
                    85:95:2d:19:dc:1f:a1:79:85:d5:bc:83:7c:b6:45:
                    bf:89:45:37:e8:f5:56:41:ae:2b:ed:0f:eb:89:f2:
                    2d:de:e3:34:15:2d:14:16:75:c0:f9:66:da:0a:84:
                    f5:75:5a:6a:01:ca:76:07:fa:f9:17:2b:7f:da:2f:
                    3c:10:dc:92:d0:c2:67:6c:8f:dc:cc:6b:3b:63:2b:
                    04:e9:87:98:71:6c:a5:f5:7d:fe:8e:e1:cf:e2:5d:
                    7a:6f:de:37:1b:36:b1:2e:a8:e9:ec:8a:76:7c:1a:
                    97:1a:a0:f0:68:0b:14:7a:c6:c8:f3:6d:da:3d:e2:
                    bb:d0:ee:6f:27:8a:13:fc:53:02:92:1f:a1:17:ba:
                    3f:5a:57:5b:f9:8f:dc:cb:50:ec:f7:51:3d:90:ae:
                    1c:f5:d9:4f:36:c5:4b:b8:7f:08:ad:d2:dd:83:cd:
                    ad:17:45:2d:6b:73:f6:fc:1d:30:37:b0:cb:bf:a9:
                    fd:bc:ab:9d:de:e1:f0:2e:2d:9c:5b:e7:a1:06:d5:
                    e8:e5:3d:43:a8:ff:79:c5:2c:23:da:95:33:81:08:
                    25:2c:44:b7:43:89:81:d2:d1:09:0c:84:8f:4f:3b:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:53:E5:28:6D:1D:55:1B:C0:FB:0A:2A:AB:50:C7:0E:82:31:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2814e3bb-cf5d-3cbe-8a14-1c4c04676a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:88:d4:b9:fc:df:15:a2:54:ea:04:d6:37:6e:01:07:cd:
         36:fa:f5:ff:64:b8:2b:ff:8a:5d:3d:91:90:44:da:57:24:5f:
         ed:c2:9a:16:63:76:8d:06:5b:cf:d3:b8:d9:c4:c4:90:51:33:
         1b:66:7d:47:d1:28:8f:8a:b5:16:6f:77:c3:d8:54:fa:60:84:
         53:0a:c4:71:79:38:92:2f:c9:a8:c0:90:be:88:d1:2f:2b:a6:
         e1:77:36:9e:77:4a:aa:5e:72:56:d6:11:71:9b:26:05:8f:30:
         cc:87:76:0c:71:78:3a:e8:bf:95:e2:a0:a0:6f:b0:b7:ea:31:
         4a:22:a3:ba:aa:32:e3:07:5f:99:45:09:f8:d5:2f:ab:81:a8:
         17:36:20:60:e3:b0:76:36:6f:ee:67:ca:46:40:04:4a:64:46:
         e6:ce:c7:ea:3f:6e:de:5f:9f:f3:e9:20:4d:67:35:31:a5:54:
         a4:28:5f:15:3b:8d:a3:03:18:70:3e:71:9c:9c:b3:8a:e6:5f:
         4a:58:ea:47:94:d5:40:a1:1b:2c:4f:19:ce:51:9a:88:27:ac:
         b5:aa:e9:d7:cf:a6:bc:88:07:88:64:8c:f7:ed:43:81:ca:f0:
         c5:39:23:88:97:1a:96:e5:c7:e9:a1:a6:85:80:54:c5:50:ef:
         a0:20:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:40 2025 by rpki-client