Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bb7de97-4593-30a6-8b1f-d7e4bee72554.roa
File:                     3bb7de97-4593-30a6-8b1f-d7e4bee72554.roa (raw, json)
Hash identifier:          ytQX8F85y7yuwHeR3FZApbM1tQUZGlPAvFP3juuxrQI=
Subject key identifier:   9C:98:40:A1:3E:31:51:AC:91:E5:07:31:99:AD:FF:B9:77:9B:C0:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F80690EE7C7DCF598C98A5B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bb7de97-4593-30a6-8b1f-d7e4bee72554.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        108.175.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:69:0e:e7:c7:dc:f5:98:c9:8a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=5f31e237-348d-452e-b5ba-7dae5c77a65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:35:ee:13:bf:fa:52:e7:74:09:fd:32:38:
                    c3:99:d2:a8:f7:36:83:74:71:25:07:d0:29:e3:84:
                    cc:47:db:07:5f:a4:35:84:e5:15:08:cc:aa:b0:14:
                    cf:33:82:8a:5e:35:37:e4:12:d5:31:e4:02:a7:d5:
                    96:5e:9d:41:d7:3c:28:d9:47:2f:16:30:ee:24:fc:
                    b5:c8:04:2e:e5:5f:4d:06:7b:4e:09:c2:9a:1c:81:
                    c3:c4:a8:f7:92:89:0e:67:9e:b6:ee:c4:7c:ed:78:
                    44:66:85:22:33:4a:ea:f4:cd:02:c9:8b:53:d2:bf:
                    da:16:9f:a8:c5:f6:53:79:18:03:6c:0e:14:9d:7b:
                    a8:02:52:e5:06:51:fd:f7:8c:56:01:3b:d2:33:50:
                    6a:25:4e:70:a2:27:d3:a0:cd:70:b7:c3:00:30:9b:
                    fb:78:8e:ad:ea:99:1f:bc:81:14:24:55:7b:c4:22:
                    f3:9a:59:7d:01:ac:7d:64:cb:70:3c:55:a3:9b:46:
                    3e:2c:b5:03:b9:bb:b8:9b:b1:fd:94:31:00:3f:e3:
                    8b:b8:3c:4a:01:89:c7:56:c6:af:a6:d0:56:28:2d:
                    7e:10:e2:8a:59:1a:6b:14:6c:39:94:be:84:f0:cf:
                    d2:d7:a1:f6:65:66:c9:3d:09:d5:d8:3a:55:0e:4f:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:40:A1:3E:31:51:AC:91:E5:07:31:99:AD:FF:B9:77:9B:C0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bb7de97-4593-30a6-8b1f-d7e4bee72554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:9e:99:31:f2:f6:f7:90:1a:52:e3:89:86:34:1d:23:d5:
         21:ad:cb:73:27:e2:e9:10:e8:68:8d:51:a3:b6:57:3e:8b:19:
         a5:b5:dc:b9:91:13:2f:b7:4b:5d:33:36:2e:f6:62:98:59:d1:
         f3:b5:36:80:c0:61:6a:d3:f3:f9:b4:fe:a0:9c:cb:9e:ba:17:
         64:ac:6a:cd:0d:f0:df:e7:bb:d0:38:de:46:29:d0:b7:ef:38:
         50:15:07:15:07:a5:55:97:97:fb:d2:61:3d:59:62:79:b4:3d:
         6b:f5:37:d1:c2:37:c9:91:4a:e4:05:b1:db:12:38:0d:fc:ee:
         af:03:cf:66:fd:30:f3:3d:2c:98:bb:b2:49:ff:f8:6a:39:91:
         7d:fb:92:62:a3:44:15:34:7a:a2:ad:84:31:55:3f:a3:64:e3:
         ff:6e:22:6d:b4:82:ab:48:3c:13:35:90:88:18:8c:fa:6e:3d:
         e6:84:0f:29:aa:bd:b2:04:3f:26:14:a7:8f:e4:fb:24:a5:fe:
         89:d5:00:b3:b2:aa:a0:3c:9b:10:7f:09:17:9c:72:57:6e:ef:
         a2:dc:97:39:a5:53:66:9f:59:c6:39:06:d8:e5:21:27:f4:4b:
         3a:33:4b:ea:cc:0b:83:49:eb:c0:0d:49:4d:e4:26:ee:cc:0a:
         07:af:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:02 2025 by rpki-client