Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2955ca6e-e6ff-3163-a4fc-c2111b40a041.roa
File:                     2955ca6e-e6ff-3163-a4fc-c2111b40a041.roa (raw, json)
Hash identifier:          h1Q95RxKFcQREVnr03aZ2RqSg833Pqbm65cc9wGAu1o=
Subject key identifier:   22:0B:BF:08:B4:E4:A3:C5:B1:82:C3:AD:97:CE:87:9C:2F:CB:F4:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F77566A8526315A6CD38055C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2955ca6e-e6ff-3163-a4fc-c2111b40a041.roa
Signing time:             Tue 04 Oct 2022 12:00:00 +0000
ROA not before:           Tue 04 Oct 2022 12:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        129.235.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:77:56:6a:85:26:31:5a:6c:d3:80:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  4 12:00:00 2022 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=4ba63529-180d-48bd-902a-1596827c564b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:a0:ca:81:96:44:7c:9f:93:a8:4d:d7:82:
                    9a:b8:34:a0:7d:6d:6f:96:f0:5f:9d:74:66:2a:5f:
                    f2:96:2c:25:3a:ee:b0:64:ea:d4:42:f5:a3:f0:31:
                    4a:99:08:48:56:3c:5b:db:eb:e7:f9:cb:cf:0a:ea:
                    a1:6a:86:30:e7:da:e9:95:ad:c0:b8:f9:a4:a0:44:
                    8c:aa:aa:20:85:db:6b:cb:a0:34:0e:b7:74:11:f5:
                    b0:f2:6b:2d:80:ed:31:06:1d:17:21:0d:7e:18:a6:
                    1e:cd:0b:86:f3:1b:45:92:6d:40:87:0a:da:af:28:
                    22:c7:2b:a8:b6:5e:82:a3:38:ce:7a:81:af:8d:59:
                    1c:af:a9:4d:1c:f6:5d:23:47:3d:04:56:7d:be:f3:
                    ed:89:12:0a:89:e2:c9:26:cf:b0:3f:77:11:55:fb:
                    67:af:ea:ab:b3:d5:d5:9f:a7:7d:79:6e:7e:6b:e3:
                    85:90:a4:1c:2a:5f:5a:29:0f:4f:62:83:5f:6d:5e:
                    8f:82:f9:2a:bb:e3:2e:37:c1:38:9e:ec:fa:de:c8:
                    20:0f:f5:f0:9a:37:e7:3e:31:95:a9:ab:e0:53:df:
                    59:70:15:ec:63:a2:6f:7a:67:a8:17:d2:eb:a3:ce:
                    4c:fe:bc:d5:3a:cb:83:fe:dc:97:cf:77:fa:af:fe:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0B:BF:08:B4:E4:A3:C5:B1:82:C3:AD:97:CE:87:9C:2F:CB:F4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2955ca6e-e6ff-3163-a4fc-c2111b40a041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.235.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:51:0c:96:bb:67:f0:72:5b:3f:63:85:d7:88:8c:ed:ce:
         1b:d2:79:ef:8a:b2:eb:a6:d7:0f:67:ec:99:f0:32:51:ef:c1:
         af:c9:7f:35:d0:3b:d4:77:15:9e:3a:76:af:64:bb:e6:b1:47:
         6d:29:fc:f1:d0:cf:21:97:70:2c:f8:07:4f:69:60:72:4a:dd:
         61:ca:8e:b2:1c:e4:87:47:5e:fb:1f:15:67:06:87:39:6d:16:
         86:25:d3:8a:ea:98:ea:30:1f:3a:4e:bb:f4:85:d5:22:1c:e4:
         53:0a:20:9e:93:ef:87:c1:de:5b:c0:e2:2d:f0:58:fd:98:d8:
         f9:34:58:11:e2:24:c0:33:eb:54:1e:ec:aa:6b:c2:02:08:cc:
         7f:ab:c8:7b:1e:61:95:f5:40:96:37:45:e4:40:d5:35:8c:e0:
         85:8e:0a:14:33:da:df:65:27:19:b9:31:eb:41:9e:39:1e:ce:
         b7:46:84:1a:90:a7:5b:b2:bd:bb:c6:8b:4f:81:61:a4:62:81:
         70:7a:64:64:54:60:58:e2:d4:5c:47:f0:cf:4d:5e:60:d5:f1:
         f8:b5:ea:2d:b9:5f:99:8c:05:37:1f:75:08:ad:6d:d6:27:cd:
         54:58:97:68:87:04:ba:71:dd:74:17:23:e9:f1:00:10:0f:4d:
         66:a6:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:33 2025 by rpki-client