Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a5f6b7-3000-3352-a7fd-cf3a49c4e64c.roa
File:                     29a5f6b7-3000-3352-a7fd-cf3a49c4e64c.roa (raw, json)
Hash identifier:          83DlXDHQ2w/U4A5oOijQ18J4d9fqCYWBsBEFKF72tUY=
Subject key identifier:   EF:7D:37:19:B2:6C:A3:E9:5D:0D:88:57:60:D4:95:49:35:38:3E:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404E36F99A9D21EB62330C0D54
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a5f6b7-3000-3352-a7fd-cf3a49c4e64c.roa
Signing time:             Tue 20 Dec 2022 18:48:09 +0000
ROA not before:           Tue 20 Dec 2022 18:48:09 +0000
ROA not after:            Wed 25 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        198.14.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4e:36:f9:9a:9d:21:eb:62:33:0c:0d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 20 18:48:09 2022 GMT
            Not After : Jan 25 05:00:00 2023 GMT
        Subject: CN=3cc66752-4caf-4286-a8a4-4e4a108a9ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:a6:b2:bf:83:f6:03:b3:3d:dd:9d:85:3c:
                    56:4f:27:57:0a:be:2d:03:7f:ff:58:32:83:66:cf:
                    9a:36:95:e8:27:78:ff:e6:27:aa:52:d8:27:0b:d4:
                    7b:97:86:e5:dd:1f:2f:87:79:8c:4c:16:df:2d:cc:
                    78:31:20:93:d4:4d:f4:a8:53:2b:9a:6b:33:95:02:
                    ea:d4:a7:a1:6a:de:02:c8:45:1f:70:13:0d:31:61:
                    9b:e1:a3:69:0d:e0:9e:9e:e7:cb:32:a1:8f:5c:f8:
                    d7:3a:02:db:cb:09:54:69:22:e1:d3:67:c6:fc:65:
                    38:12:b7:5e:38:f4:a9:51:86:2a:67:96:29:ce:3c:
                    0b:11:d6:f4:2d:3a:d3:08:69:43:ad:ad:32:94:8c:
                    ac:61:74:66:70:93:21:46:91:c7:41:bf:0c:70:b2:
                    fa:e7:82:60:1e:91:57:1f:95:c9:8c:09:c9:2b:ef:
                    ff:05:2e:60:11:5c:21:a5:80:8e:32:29:0f:42:36:
                    5b:7b:f1:a1:11:d7:c5:ec:4b:54:7b:c2:0b:a2:5e:
                    89:70:4e:5d:f8:b9:5f:5c:52:90:3e:bd:33:09:82:
                    2a:b1:cb:6d:f7:dd:55:eb:db:1a:be:0e:84:47:b9:
                    58:7c:b1:9c:e4:06:f9:b2:64:f4:10:a0:30:9f:1b:
                    1d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:37:19:B2:6C:A3:E9:5D:0D:88:57:60:D4:95:49:35:38:3E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a5f6b7-3000-3352-a7fd-cf3a49c4e64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:af:80:53:f0:a2:7d:e5:67:ad:b8:0b:7c:5a:28:ba:c7:30:
         9d:0f:9e:38:86:b5:bd:0f:71:8e:b3:2f:16:49:27:28:3f:80:
         f9:53:07:6c:92:68:6b:43:53:d8:24:a9:fc:db:00:5c:ce:d3:
         e2:b9:fe:ea:d7:05:7c:68:ed:00:15:d0:4d:2f:cd:6b:21:e1:
         d7:03:c0:9f:3b:39:00:3c:cf:59:ff:d4:6b:98:e8:af:db:23:
         9b:9a:8a:66:cd:3b:9d:3b:f3:19:fd:56:b0:46:98:68:10:e2:
         de:e9:0d:60:8b:80:ab:44:a8:5a:21:55:21:53:fc:09:4e:cb:
         68:b9:b4:5e:b7:54:83:93:a7:86:29:fc:5b:70:3a:b5:ef:15:
         ba:c1:c5:99:a4:f8:ec:3a:6a:e8:c9:29:8b:02:7e:b0:3d:64:
         6d:ea:38:20:03:85:0f:13:e6:95:0c:20:c2:2f:bf:1c:e4:b7:
         93:b9:b4:83:d3:ca:78:44:d9:e4:96:c0:b9:13:b3:4a:58:92:
         8f:03:a1:a8:30:c2:2c:7b:c4:0c:fd:28:b7:ca:12:50:7e:23:
         d5:35:3c:e8:95:58:cd:1d:6d:f1:08:ac:bf:33:47:27:8d:0e:
         5b:ad:58:97:94:22:27:9f:bd:fe:1e:7a:3f:bf:df:55:7b:9f:
         d6:2e:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:20:02 2025 by rpki-client