Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceb36d-a4c6-399e-bb45-19e259a87bd7.roa
File:                     2bceb36d-a4c6-399e-bb45-19e259a87bd7.roa (raw, json)
Hash identifier:          ekF433b+gxKKIcPz3NAw/N9brU3jNq/aKXpysrZ9fTU=
Subject key identifier:   F8:61:45:F7:69:26:1C:AD:E0:C9:C3:8E:84:CE:5B:C4:82:AD:D4:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DABC728D4A11B1BC579AE9090
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceb36d-a4c6-399e-bb45-19e259a87bd7.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:c7:28:d4:a1:1b:1b:c5:79:ae:90:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=1738ac3e-5fd3-4348-bdc2-8b5f47191812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7e:e3:30:66:cf:4e:06:31:e0:f6:dc:4f:a3:
                    a3:15:1a:83:72:f4:57:d4:c8:8d:e9:e9:4c:02:7a:
                    6e:54:a5:2a:14:68:61:20:b2:fe:ee:ac:bb:7e:1f:
                    65:d8:9d:47:18:d8:f4:1a:bd:80:fe:59:e1:f1:ae:
                    a4:3b:bd:fb:09:d4:29:43:84:34:82:fc:8d:1c:ec:
                    bd:10:3f:33:7e:39:fe:75:8d:0e:09:99:2c:75:ec:
                    85:48:7c:24:f8:b1:9c:61:00:6a:65:67:09:9f:6d:
                    fe:06:8e:9a:fc:2c:ef:c7:6e:0f:8b:7d:b3:5b:80:
                    a8:8f:d2:5d:ec:d2:a2:9e:e6:c2:78:c8:3f:94:36:
                    61:28:a0:5f:af:88:cd:a6:a3:5c:66:b9:c3:fb:c2:
                    6f:14:82:98:c2:96:0a:4c:8f:ee:23:ad:d0:7e:96:
                    c8:c2:8f:d4:6f:6b:31:cc:60:8d:ff:a2:c2:e8:31:
                    32:47:c4:93:c5:b9:83:31:3b:df:2d:30:8e:80:c4:
                    60:6d:13:02:64:56:7f:66:44:26:22:9e:5e:f4:22:
                    c3:76:17:16:cb:ba:be:dc:1a:47:66:65:ab:bb:eb:
                    48:b9:20:7a:54:13:b6:11:8e:4f:7e:40:8d:2c:20:
                    75:68:d5:8a:c0:14:63:7c:ad:aa:09:67:55:f6:42:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:61:45:F7:69:26:1C:AD:E0:C9:C3:8E:84:CE:5B:C4:82:AD:D4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceb36d-a4c6-399e-bb45-19e259a87bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:44:39:a9:0c:f9:b0:cb:e1:6d:1e:bb:52:86:c8:fe:a6:
         58:71:31:df:55:b8:33:09:a4:99:cd:fe:5f:43:28:ef:55:98:
         44:d5:7e:87:1a:cf:6f:e7:30:ca:73:b9:20:21:ad:65:a2:d1:
         50:d4:4f:e6:3d:81:83:57:b8:6c:94:82:15:69:79:80:32:24:
         85:a3:74:f6:49:db:c3:ff:35:9c:1b:dc:1a:61:4e:73:87:1b:
         48:9f:b4:df:47:38:b9:90:28:1c:f7:6d:56:33:04:87:f1:c7:
         66:85:c0:04:c9:78:21:ad:f3:33:87:b2:fb:56:c2:a4:13:58:
         c3:df:e8:2c:7e:35:0f:51:a7:e9:bb:37:66:cc:be:93:24:54:
         f8:76:e3:c1:d0:e5:b2:43:70:b0:8f:43:07:e1:e7:a2:e0:11:
         aa:af:91:9f:97:57:48:66:36:31:ee:b5:ce:fd:90:6c:60:2d:
         84:62:30:c5:fa:e7:83:aa:57:24:e7:85:65:49:ac:80:6a:98:
         61:b6:2f:e4:3d:32:d6:fe:a4:59:75:cb:a9:1c:e1:cd:d4:9e:
         d4:5e:8b:8c:86:8c:83:9e:0e:75:26:49:3c:72:ed:86:1c:11:
         cc:6d:1b:d3:f7:5b:6c:8e:3e:09:4a:39:32:e7:16:0e:92:55:
         16:26:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:40 2025 by rpki-client