Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dcd22c5-a85c-381e-aa7c-dbaf03f9d014.roa
File:                     2dcd22c5-a85c-381e-aa7c-dbaf03f9d014.roa (raw, json)
Hash identifier:          fdPgJ3UCCo+iVctcnkg5BTbsLKHE7+IqFJuedcE18Z4=
Subject key identifier:   80:A1:92:31:1F:31:E2:4B:74:4D:1B:1A:D9:67:B2:5B:A4:1D:D2:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D33799A45B1BE1B236DFFC480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dcd22c5-a85c-381e-aa7c-dbaf03f9d014.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        162.222.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:79:9a:45:b1:be:1b:23:6d:ff:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=c2fc18f1-4743-4a94-b0ec-3064d45487fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:53:9e:9f:16:48:0d:85:4a:cd:5a:73:ca:
                    19:ab:62:8d:ad:e0:ca:60:e3:78:71:74:3c:5e:db:
                    26:35:b8:c2:20:e2:9c:08:1f:3b:a5:05:a6:e8:99:
                    a2:a5:e1:29:04:1a:e8:0b:02:2a:0c:b3:12:2d:22:
                    58:5a:db:9c:25:5e:a7:9e:85:5d:3d:38:3d:3b:b5:
                    a3:df:83:47:09:39:f2:a9:d4:40:bb:df:d5:3a:91:
                    a7:86:88:71:83:50:f6:16:ad:44:13:2d:58:fa:3b:
                    78:30:f6:24:01:85:50:db:8b:4c:94:fe:62:20:29:
                    88:23:68:ca:e5:bd:90:34:ca:0b:63:a8:96:a3:e6:
                    52:8d:7f:85:85:36:e3:b0:c7:b9:07:0a:f9:c6:79:
                    9e:b6:3d:35:69:61:31:93:40:8d:3f:c2:2c:85:03:
                    cd:3c:ae:06:72:65:4e:f3:2a:10:cd:b0:06:16:ae:
                    48:c5:7a:37:0c:82:b3:77:4a:97:cd:85:ff:51:ba:
                    1d:8a:e8:f5:bb:42:5e:17:fa:05:d6:b7:f7:87:4f:
                    30:7f:ef:5e:88:8f:18:22:1f:c8:1e:b4:3a:31:a2:
                    01:f0:70:75:39:1b:b0:1d:6e:9c:fb:39:37:6f:de:
                    a3:af:96:68:56:69:80:2d:12:5a:be:fa:0f:ee:e5:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A1:92:31:1F:31:E2:4B:74:4D:1B:1A:D9:67:B2:5B:A4:1D:D2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dcd22c5-a85c-381e-aa7c-dbaf03f9d014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:86:60:d6:6a:f3:6b:65:a9:ce:b1:45:f6:ac:66:83:19:41:
         8a:5d:87:ac:5f:34:09:57:08:29:47:b4:25:fd:6b:db:f8:c7:
         8b:30:b2:ac:b9:47:b1:af:06:3a:08:88:96:f1:8e:ea:99:ab:
         84:bf:5b:f9:98:7d:7a:7a:a3:01:f1:b8:9d:d1:c3:0f:2f:22:
         86:27:28:e3:87:4c:e4:ee:95:d2:dc:d7:a2:22:aa:e0:ad:6f:
         4c:7d:14:ad:2c:06:2e:7b:2a:36:dc:aa:85:4e:98:fa:df:2a:
         e5:1b:c9:bd:f1:06:0f:bc:e8:d6:b1:ab:71:5f:46:ff:76:d1:
         8e:49:b2:df:5f:4f:61:fb:a6:6b:42:60:02:f0:a1:d9:10:79:
         02:f1:e1:38:e3:e3:8f:8a:8b:06:c0:dd:9b:7f:b4:32:d6:ca:
         76:8f:8b:21:02:62:86:f9:e8:44:14:70:63:6b:6b:ff:0f:5f:
         30:9b:d3:9e:c9:d7:44:2e:00:fc:36:fc:f9:d7:24:a3:57:b5:
         ed:a7:c3:d1:39:d9:cc:64:6e:d1:7a:ef:31:1c:5b:e3:a0:25:
         1a:82:dc:48:28:fb:5b:41:cf:f2:d1:64:50:5a:28:46:92:ae:
         02:31:32:75:68:fb:35:a3:43:84:c3:b3:31:8e:c7:e2:02:64:
         88:e6:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:30 2025 by rpki-client