Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b35b155-cf0b-3ad4-acec-139ad3339942.roa
File:                     2b35b155-cf0b-3ad4-acec-139ad3339942.roa (raw, json)
Hash identifier:          qauBAUxIM+s/0pu/OTtGg++OlWwWHxlqdPT/HF2iwCo=
Subject key identifier:   F2:E5:39:76:03:E0:F8:13:AF:66:03:8B:8A:F8:95:A9:9B:6B:1A:DB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406247BD9D2F3C7E4212BA3400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b35b155-cf0b-3ad4-acec-139ad3339942.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        164.145.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:47:bd:9d:2f:3c:7e:42:12:ba:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=02ad02fa-e8c6-40bb-9bb2-725720558aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:b2:65:13:24:ff:39:6c:08:c4:b3:0f:21:
                    7a:be:6c:65:ec:8e:cb:46:4e:ef:fc:e7:82:4e:b3:
                    65:b1:6f:f3:c4:38:ba:b1:fc:e5:95:02:08:d3:31:
                    0c:d4:ba:c1:3c:7a:c6:55:c4:56:2d:bb:68:00:56:
                    a4:3d:e9:d2:2e:3c:c6:80:c0:07:89:53:40:57:f7:
                    c4:7d:58:c5:12:7e:16:dd:6a:f3:eb:77:ab:6f:4b:
                    36:60:81:98:59:14:97:ff:6b:89:63:0f:ba:5d:55:
                    c0:0b:9b:a6:d3:80:2f:93:2e:62:9e:7e:6f:cd:8c:
                    aa:b1:8b:38:23:c5:15:0e:0c:cb:f5:9b:6e:fd:82:
                    18:44:2b:ab:65:5c:c1:d3:c4:d5:d0:a0:1f:81:39:
                    41:40:13:ef:48:20:b2:09:af:2b:da:de:ac:bf:7b:
                    cf:0c:a4:46:6a:28:f4:f8:71:07:96:52:51:98:54:
                    fc:3d:e6:cf:14:15:c1:72:c9:68:ed:94:d0:f5:56:
                    52:b0:85:64:78:3b:2a:cf:25:bf:eb:e5:0a:ea:db:
                    13:9c:4a:11:28:86:6e:2f:9e:8f:80:2d:6e:e0:22:
                    ab:f5:c3:c1:8a:be:37:58:f3:b1:30:7e:df:ab:24:
                    96:e0:da:fd:ad:99:53:42:d4:00:29:c0:e3:01:ee:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E5:39:76:03:E0:F8:13:AF:66:03:8B:8A:F8:95:A9:9B:6B:1A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b35b155-cf0b-3ad4-acec-139ad3339942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:64:c9:a4:d7:77:97:81:34:e3:3d:5f:40:a3:37:d1:96:
         14:ec:83:d2:0c:37:6b:98:e9:2f:f4:d5:d8:0e:5b:27:04:63:
         40:15:4f:11:20:c4:ba:c9:27:33:d4:ff:24:1a:db:b0:a1:53:
         dc:9e:41:59:09:f2:9f:ea:72:d4:0a:f2:a5:af:79:f0:5f:d0:
         3f:3a:ad:9b:17:f7:79:12:f2:5d:85:b6:66:a6:6f:fb:72:d6:
         15:fa:c1:ea:12:e5:00:fb:a1:27:76:9d:1f:ea:25:74:87:e9:
         7d:25:3e:c5:90:3f:ae:b5:3c:a6:f2:33:c9:5e:95:16:20:ab:
         85:0f:93:5d:78:6f:4d:f2:58:db:f7:66:26:79:4c:b9:0c:a0:
         ba:80:5e:f1:41:aa:6f:be:42:9b:61:1d:f5:30:df:51:2c:7d:
         4a:1b:fd:4a:e9:9c:ee:9c:d0:ad:0b:70:2e:94:3b:d4:b9:aa:
         8b:5a:be:ad:22:e5:a4:a8:98:31:40:5d:d4:9f:a2:3d:0f:77:
         6c:54:2f:74:0f:07:f3:db:40:78:38:47:66:e1:94:8e:7a:94:
         23:d8:81:b8:e3:56:e3:88:3d:5f:5d:a7:84:aa:9f:8f:a2:f8:
         7f:8c:a0:bc:bb:51:78:74:84:5c:ec:6e:a3:92:c6:9a:57:a0:
         c1:fc:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:40 2025 by rpki-client