Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f52ecc-70de-3930-afd8-7834063a2b48.roa
File:                     32f52ecc-70de-3930-afd8-7834063a2b48.roa (raw, json)
Hash identifier:          JExCxfvXylNaUJC6dtnw3kHE16tAcbYOp6X3NBpQOGA=
Subject key identifier:   2D:74:3D:E5:74:11:AF:9F:02:9A:82:03:76:A2:DE:14:6A:A8:2B:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB2EEC190FD9CF7E47BAA45A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f52ecc-70de-3930-afd8-7834063a2b48.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 31 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.185.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:ee:c1:90:fd:9c:f7:e4:7b:aa:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : May 31 04:00:00 2022 GMT
        Subject: CN=743a5c91-62b9-4c5e-beff-a499532a3ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:1b:d8:65:63:76:9d:2a:cc:a1:3e:c7:42:
                    fc:ca:19:26:be:31:73:83:ef:d2:26:7f:71:c3:7f:
                    72:43:b5:49:12:ee:fb:92:1d:bd:2d:fb:35:a1:d5:
                    f1:89:05:b2:4d:cb:ff:6b:17:f5:b1:cb:02:3e:8e:
                    58:41:0e:09:67:28:f2:05:c7:0a:1e:33:ec:40:b9:
                    e3:e8:71:9f:bd:75:51:55:e2:2b:e6:b7:1e:e4:40:
                    a4:e6:bf:2a:21:32:19:2c:5e:24:5c:23:db:40:e5:
                    d5:23:fd:00:b7:08:86:4e:b6:5f:6b:22:fe:62:bf:
                    aa:f2:46:02:90:cc:3b:4f:fe:2c:33:5d:fc:c8:82:
                    2f:f8:ee:64:51:0e:29:79:03:64:17:e3:f5:ae:46:
                    c7:5d:a8:e5:c3:7d:85:e1:1a:f8:7d:3e:95:64:6e:
                    8c:74:2a:6a:8f:a8:d5:63:14:34:7b:c2:ff:f3:2f:
                    82:77:d6:a5:7c:66:2d:2a:a7:28:0b:c3:68:3a:05:
                    f8:8b:f6:f7:9e:6a:62:8b:64:fb:8f:f0:17:24:17:
                    ca:9d:27:dd:c0:38:12:79:e7:de:d8:a6:a9:da:7a:
                    54:04:0c:23:f5:6b:44:7b:2e:de:05:9b:69:bc:36:
                    07:55:74:4e:51:71:d7:32:22:15:49:12:73:62:08:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:74:3D:E5:74:11:AF:9F:02:9A:82:03:76:A2:DE:14:6A:A8:2B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f52ecc-70de-3930-afd8-7834063a2b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:bf:20:d3:33:ed:35:39:f4:c3:4d:a7:f5:40:1d:f1:33:
         6d:3b:2f:9f:fb:35:b0:c3:a6:6a:51:2c:6d:8f:ee:3a:5e:bc:
         90:fa:2f:58:3a:ca:90:c5:02:8b:d5:61:58:a7:fd:94:3d:63:
         76:2f:74:9a:df:8c:fe:da:c1:5c:8b:35:ce:99:7a:2c:93:8d:
         66:c0:b1:1e:96:ed:05:bd:b7:bf:af:7f:de:4e:26:cb:83:71:
         6a:7b:c1:c0:2d:d1:6d:b3:fa:c1:71:79:ec:6f:8e:17:ea:fb:
         f9:05:46:34:5e:c2:5a:cc:54:5f:3f:ee:bf:c3:25:7c:61:2f:
         dd:37:42:8c:01:df:b5:f1:87:52:ba:ba:bd:85:f0:d0:b8:fd:
         6b:0a:76:e5:55:b5:07:98:b1:f9:68:62:67:dd:6f:e8:4d:7a:
         ca:1f:5f:8d:53:08:4c:17:f2:6f:69:e8:cd:d1:f2:00:3e:a3:
         1f:1c:e3:46:bc:25:2a:f5:09:16:5e:61:b8:a2:e4:e2:36:46:
         47:5d:12:b1:b3:76:54:97:89:2e:d6:13:43:10:05:4e:cf:15:
         4b:f1:e9:fc:24:24:c6:0c:14:80:f6:49:c1:ee:8f:77:a0:43:
         84:55:b9:8b:b1:3a:3a:58:5f:22:54:94:97:99:b6:62:8f:55:
         56:4e:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:46 2025 by rpki-client