Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e8fabe-a9a4-38a0-8784-c6cfe113a2e5.roa
File:                     32e8fabe-a9a4-38a0-8784-c6cfe113a2e5.roa (raw, json)
Hash identifier:          pVRN66bfeXAHMBnSVKA9bco9iXrcoGSO612gE3GK9bA=
Subject key identifier:   68:65:F2:6D:1E:7D:39:54:14:2C:A5:25:23:EF:C8:47:64:38:CB:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBA6E447F86EF613150B1DA50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e8fabe-a9a4-38a0-8784-c6cfe113a2e5.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:6e:44:7f:86:ef:61:31:50:b1:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=c8e262c8-eb16-4bd2-991a-4fca522a1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:87:2b:94:f4:f4:6c:3f:0b:9e:b0:da:79:
                    25:09:1b:b3:88:3e:23:74:e5:4d:09:db:f6:c1:46:
                    aa:b5:07:fb:d9:e9:65:e5:16:36:65:42:cd:65:ae:
                    06:78:f6:98:23:c0:51:48:92:31:24:06:cc:30:32:
                    01:5f:6d:c3:e1:fa:10:78:11:95:25:ce:37:3e:60:
                    0d:f3:09:b4:8f:64:39:c7:2d:69:34:7f:f3:fd:1f:
                    54:08:89:87:d1:69:43:c0:b9:28:13:b2:c1:02:fc:
                    57:6d:11:42:25:0c:24:95:5d:34:03:dc:26:2b:3d:
                    34:8f:32:ed:b3:77:89:73:8b:33:6e:e9:9a:3d:3e:
                    40:90:1b:39:9b:72:8d:a9:39:e8:bf:b2:af:2e:7e:
                    79:66:d6:5c:5a:7d:fa:d9:c0:8c:d6:04:51:6e:0a:
                    a6:7f:ae:31:2b:fd:4e:cf:d0:9f:ed:3f:c3:6a:46:
                    1c:5e:3c:eb:81:aa:5a:8f:2d:60:3e:d3:79:ad:7a:
                    54:86:b2:c3:64:77:41:26:24:65:0e:08:c5:2d:af:
                    6b:c6:dc:5a:f4:cb:8b:34:ea:ca:dc:df:a6:20:41:
                    83:af:b3:40:2b:c5:32:1f:23:ec:b2:19:e7:1a:cc:
                    b5:e1:53:b7:05:71:ec:8a:9f:cb:d2:4e:58:6b:f2:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:F2:6D:1E:7D:39:54:14:2C:A5:25:23:EF:C8:47:64:38:CB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e8fabe-a9a4-38a0-8784-c6cfe113a2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:25:27:c4:e0:e8:d3:a7:98:5b:6b:09:26:d5:d6:3e:a0:
         a4:77:8f:ba:09:63:b5:02:34:41:6b:af:c5:d2:44:60:0d:c3:
         17:78:d5:5f:c7:a8:4f:0f:3b:d8:a9:61:d9:6e:5b:8b:d8:68:
         6e:f5:36:22:e7:9b:58:6f:76:9e:7d:29:90:32:7a:01:a9:48:
         08:2b:aa:51:1e:4e:8e:f7:79:f0:39:49:d5:3d:43:16:be:b6:
         5e:97:a5:1d:5b:ab:b6:28:0f:80:bb:de:ae:fa:0c:3d:d8:2e:
         f6:35:58:f0:1c:bb:df:2c:f3:22:4e:0c:cd:43:c7:35:52:b8:
         08:99:52:a2:b3:45:b8:e5:85:a5:a9:d4:e1:be:d3:90:e1:20:
         e3:d0:ca:67:d8:d0:b9:d4:98:30:69:cd:64:0a:a5:b1:bd:01:
         de:72:24:e1:fd:56:ea:62:3d:9e:86:2f:4e:db:7c:90:f4:f6:
         78:8b:61:c3:8c:09:5e:94:c9:61:95:05:09:bf:9e:1d:a7:31:
         70:a7:d9:7d:90:cf:f8:f1:95:ec:23:25:ec:ce:62:99:81:c8:
         a4:a1:a6:db:86:a3:01:c9:bd:d2:83:81:25:2e:24:f4:e9:ca:
         53:85:ec:1a:69:f3:97:7a:c2:3a:07:85:97:72:4a:7e:7f:67:
         a6:9d:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:43 2025 by rpki-client