Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cdb41a2-a7a3-355d-8f16-2aabbce5d45a.roa
File:                     3cdb41a2-a7a3-355d-8f16-2aabbce5d45a.roa (raw, json)
Hash identifier:          EnpYx4WuhwAj2tjYB48bI4lgvOYRgEl0uj5Xk2MV8rM=
Subject key identifier:   B9:A3:97:11:D9:A3:E1:E3:82:D0:D3:96:7D:89:2A:57:3D:A6:1C:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6E87DF02891EE2ED1BF33080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cdb41a2-a7a3-355d-8f16-2aabbce5d45a.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        75.2.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:87:df:02:89:1e:e2:ed:1b:f3:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=4f76dc1f-1ba4-48dc-b444-9f500fe13050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:9f:8e:72:b4:de:38:ad:1a:b1:82:e6:da:
                    d2:0f:00:e7:6f:51:c3:d6:94:9f:24:fe:5f:ee:0d:
                    af:e5:41:53:51:27:11:46:6f:97:21:70:58:37:fd:
                    30:68:b0:80:15:a5:bf:9f:71:2a:38:d9:c5:43:51:
                    d7:29:93:74:cb:24:01:9b:11:c9:b9:66:7a:9f:3c:
                    06:a0:10:99:fc:7d:57:80:62:59:ae:2e:89:69:c4:
                    c5:d6:5b:24:f0:ba:2d:33:ed:9e:03:3e:0b:42:0e:
                    cc:cb:ff:ed:28:5b:7f:13:73:5e:cb:2c:b6:2e:11:
                    0f:9f:f8:a7:f8:8a:c1:3f:78:3b:e0:eb:93:76:8f:
                    2c:45:36:cd:66:b3:dd:94:a0:bf:92:74:2a:bb:78:
                    ed:0c:5b:c5:24:2c:f6:5d:92:33:1e:6d:7e:61:36:
                    f8:6c:4c:b8:ca:82:04:25:b9:82:50:6a:59:ee:5b:
                    6b:4d:df:e3:7d:50:62:20:19:49:30:21:43:23:e6:
                    20:31:9f:8c:3d:f4:0f:64:b3:e1:4d:e1:d9:66:1b:
                    ce:11:ca:68:81:8c:90:a1:e7:81:e7:1f:90:31:14:
                    3f:0d:78:7b:95:c8:dd:2d:13:6a:4a:76:c4:8f:f2:
                    6c:dc:f4:ca:1e:74:51:90:7a:23:eb:04:4c:36:c8:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A3:97:11:D9:A3:E1:E3:82:D0:D3:96:7D:89:2A:57:3D:A6:1C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cdb41a2-a7a3-355d-8f16-2aabbce5d45a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:90:1a:86:9f:cd:19:56:fb:4b:cf:6b:d2:41:22:2c:0c:
         19:7f:b8:6d:8f:b5:b1:67:d0:f2:d6:5c:8d:fb:87:2e:f3:7b:
         ba:fe:96:b8:87:c1:35:cd:c6:08:ca:06:ec:22:da:7e:3a:65:
         04:c6:d8:02:42:5d:48:a8:c0:54:90:d4:51:8e:69:31:43:c8:
         af:56:11:68:05:12:5e:e9:eb:52:e8:d4:cc:a0:ee:8a:f7:f3:
         6c:f1:9e:9d:5c:6a:03:00:77:b4:0f:b0:5e:af:23:b8:e7:ce:
         c0:15:ef:ff:50:f9:66:dc:44:81:d0:b1:7f:31:d7:d7:0f:7d:
         dd:dc:97:12:17:5c:64:5b:ad:c2:13:c3:9d:28:1e:17:37:58:
         17:ee:5f:83:46:06:43:eb:b2:86:96:d0:1e:8a:9b:21:a6:a6:
         b1:40:66:08:2d:60:30:1f:40:ca:63:59:0d:1e:62:b8:66:08:
         49:d3:3e:6a:3e:35:a9:41:95:3c:4d:73:45:18:a8:58:ad:9c:
         b7:62:15:51:ae:7c:c2:56:fb:02:fe:47:d6:30:dc:ce:91:da:
         0d:32:3b:dc:d6:0f:9f:bb:51:43:0d:1d:6b:de:44:12:9e:ff:
         ed:dc:bc:ce:b2:22:bc:8b:92:3d:d3:2b:9b:7f:d5:5e:ad:60:
         29:7e:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:15 2025 by rpki-client