Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c02762a-df58-35c0-a86b-51eb78fa0fa8.roa
File:                     2c02762a-df58-35c0-a86b-51eb78fa0fa8.roa (raw, json)
Hash identifier:          01KwIngXwafILSuvr0y63KXdFtzQZMTngArOW9IiOnY=
Subject key identifier:   8D:B1:A3:F0:EC:B7:A6:0C:FE:F3:2B:E6:B0:C4:D2:C3:68:1E:8B:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDD71A4C61DCD44705B534280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c02762a-df58-35c0-a86b-51eb78fa0fa8.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.164.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:71:a4:c6:1d:cd:44:70:5b:53:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=73c03477-c1f2-4e37-a050-2a16e2458064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:15:88:3f:e4:b4:98:e7:bc:f8:5e:4b:1b:
                    ce:c5:32:e1:e0:b2:da:56:69:f1:f3:00:bb:ac:a5:
                    d3:30:a3:4c:4f:f9:d6:5b:59:d6:ef:67:ca:8d:e9:
                    4a:5e:cd:a8:63:c9:d0:bf:d8:d5:a3:2d:8f:d7:bc:
                    1b:7e:f6:f6:06:2d:56:74:74:3c:66:9e:dd:d5:ea:
                    3a:3d:a7:11:73:98:28:ba:22:fa:fd:75:ee:39:03:
                    37:05:8c:5c:bc:70:3a:a1:0d:17:4f:c6:af:66:72:
                    98:ed:7e:67:1d:d6:f0:51:41:6b:61:fb:76:03:46:
                    5f:1e:ee:5a:03:39:84:e6:f6:5f:df:c1:73:7d:d8:
                    a6:21:13:9f:00:36:9e:e8:29:de:14:76:18:a1:4c:
                    a0:6e:76:ae:41:92:68:54:61:40:fc:1b:a1:b6:36:
                    51:f1:09:ee:61:a2:d6:90:b5:b3:03:74:0d:96:01:
                    68:e9:5f:68:01:19:4e:af:c7:49:ad:5e:7a:33:7c:
                    cc:9c:f6:03:01:08:4b:48:8a:4b:dd:94:59:20:3d:
                    8f:d9:a1:b8:b2:5e:ed:87:db:f8:80:cd:d9:97:89:
                    f4:06:7c:29:8f:29:70:fc:a1:a0:89:71:b3:a8:2d:
                    74:c6:f3:88:db:47:2a:a4:e0:c0:85:a8:bd:93:2b:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B1:A3:F0:EC:B7:A6:0C:FE:F3:2B:E6:B0:C4:D2:C3:68:1E:8B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c02762a-df58-35c0-a86b-51eb78fa0fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:6e:fd:a9:27:1a:c1:4a:42:14:cd:e1:c3:a5:f4:28:eb:
         fb:34:fb:8c:ca:44:a5:7f:b1:d8:69:6c:d1:74:41:8f:06:57:
         a8:71:d4:91:6b:59:d0:0c:86:7e:b5:1c:98:b2:e5:6d:9c:36:
         a7:71:95:d0:c2:c5:18:46:fa:f9:99:4f:8d:39:6b:79:e3:28:
         f9:aa:73:c0:55:16:54:73:55:f8:30:b5:b5:d4:6e:16:81:f0:
         95:52:f9:0f:8e:52:1e:95:b3:ac:05:93:c4:30:f4:15:43:7e:
         e9:ee:ce:9e:80:ae:e8:f0:40:f4:09:d0:84:dd:82:b2:8e:12:
         17:fb:c2:ab:10:a7:39:63:f3:cc:99:71:fa:41:01:b4:8e:82:
         2b:86:b7:94:08:d7:65:79:db:6c:0b:f5:ea:4e:07:56:f0:0d:
         03:5e:45:94:4b:6f:07:cb:ac:e9:b4:00:1b:8e:e9:5e:14:50:
         9d:82:e5:23:6a:e4:b2:f9:00:74:b8:85:b2:5e:00:06:cd:5c:
         5c:04:fe:98:0b:a7:25:10:5e:2c:a0:1a:e0:1e:ed:b0:4c:e5:
         97:3c:40:25:1a:e8:c8:d7:15:8b:02:4d:b5:71:40:a3:28:ce:
         0c:75:06:01:b9:c9:33:1a:24:75:cf:47:ae:75:ac:67:5b:31:
         d4:12:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:02 2025 by rpki-client