Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/319777a4-cc3b-3255-a101-e93dddb9748d.roa
File:                     319777a4-cc3b-3255-a101-e93dddb9748d.roa (raw, json)
Hash identifier:          UuH8yOsx7+4EiAzw/7X5kYqusFrAG+wWvjIUDbb7NDY=
Subject key identifier:   19:66:4C:56:9F:73:C6:51:98:68:7D:32:3A:74:65:B8:D3:DC:D2:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F08AFBFE526CB379D3B0BF340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/319777a4-cc3b-3255-a101-e93dddb9748d.roa
Signing time:             Fri 26 Aug 2022 12:18:07 +0000
ROA not before:           Fri 26 Aug 2022 12:18:07 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.168.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:08:af:bf:e5:26:cb:37:9d:3b:0b:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 12:18:07 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=b6438a44-1b82-4756-be51-4ff2b294450a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:e1:4d:8a:41:9c:dd:d5:91:e5:c2:de:b5:
                    7d:a3:08:e1:bd:a3:71:bf:1b:8f:c0:bd:a5:ba:a3:
                    6d:8b:ef:7a:1c:82:5a:38:e1:57:88:8f:51:07:dc:
                    eb:63:91:76:70:62:60:62:53:4d:82:4d:00:d5:b7:
                    c8:dd:73:a6:c3:55:7c:c6:69:9b:b0:2a:2f:75:97:
                    10:5e:f3:5e:1d:a0:3b:a2:c9:46:29:bf:cc:aa:4d:
                    8b:d8:ca:c1:36:df:33:f8:d7:75:22:8c:7a:1b:1e:
                    bb:df:21:d2:99:17:a3:2e:76:d0:d5:e6:5f:e1:71:
                    0d:54:72:d8:5d:9a:36:39:a8:a3:5e:ce:72:45:27:
                    dd:b4:af:f1:aa:e0:fb:4a:10:03:18:26:16:98:8b:
                    96:c3:86:33:5f:11:32:9f:81:95:57:26:63:cd:c5:
                    de:87:dc:15:a7:a5:8f:99:46:33:16:13:1b:0a:bd:
                    a2:e9:68:06:bc:0f:64:d8:0a:e0:3e:71:00:2d:cb:
                    92:aa:68:20:ec:86:e7:a4:fe:5a:26:27:df:3d:97:
                    bb:f4:73:71:5e:1b:ea:a1:d7:bf:2d:88:ed:21:7c:
                    d4:eb:ea:2b:75:c7:07:9b:8e:b7:18:d4:21:55:66:
                    34:66:03:d4:66:ab:9f:40:40:a9:91:34:e6:34:01:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:66:4C:56:9F:73:C6:51:98:68:7D:32:3A:74:65:B8:D3:DC:D2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/319777a4-cc3b-3255-a101-e93dddb9748d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.168.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:e0:61:db:74:49:8c:83:50:59:c8:3d:7e:bb:4a:12:a5:
         29:71:7d:6c:72:91:2f:58:0a:a4:9e:8c:1a:4f:50:24:13:fa:
         3a:e4:84:4d:bf:7a:be:91:95:0b:8b:d3:98:89:ad:e7:b5:eb:
         b8:85:66:ed:2e:c5:fa:2e:07:bf:bb:43:5a:78:2a:0f:9f:1a:
         c3:8c:b2:03:1d:73:f0:e3:7d:de:50:d3:96:d1:e8:b6:6b:49:
         e6:05:09:b2:f8:6e:d4:39:53:59:64:c1:a6:c6:f4:5a:58:80:
         86:14:1f:53:e3:8b:d0:01:7d:e8:7a:f3:a3:8f:ef:ff:44:dd:
         74:1f:95:6d:b5:86:3d:80:69:57:db:92:cb:8c:08:ea:32:45:
         f4:5b:56:aa:8a:01:e6:4b:4b:27:e8:7f:01:7f:30:02:bd:0c:
         c9:fc:5f:17:c0:24:92:88:42:ae:aa:35:91:f5:82:b4:5c:2a:
         14:05:c1:19:67:e7:b6:d0:99:ec:94:fd:2e:e8:f2:4f:ba:d8:
         d8:9f:de:99:84:1e:60:2c:45:11:89:25:09:7e:82:48:f1:f8:
         c0:53:3e:e4:87:dd:22:4b:67:71:ff:63:52:f8:3a:9f:fa:89:
         3d:e5:b4:35:7c:b6:be:9b:09:c5:8c:e2:52:1b:c1:58:16:0a:
         db:67:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:15 2025 by rpki-client