Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e3163a8-872c-36d4-8f37-fc74bae58898.roa
File:                     3e3163a8-872c-36d4-8f37-fc74bae58898.roa (raw, json)
Hash identifier:          Sx92BEPRANMx9tSuL2PtK6uJmrYnxPU6rT9qgLr35R0=
Subject key identifier:   F8:9C:8E:A7:3D:BB:2C:CF:64:28:91:9A:79:AF:35:A8:50:37:E3:D1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E030C6FE28876B5A4D4708A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e3163a8-872c-36d4-8f37-fc74bae58898.roa
Signing time:             Tue 24 May 2022 15:27:07 +0000
ROA not before:           Tue 24 May 2022 15:27:07 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        198.14.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:03:0c:6f:e2:88:76:b5:a4:d4:70:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 24 15:27:07 2022 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=a28e8ed5-8525-46e8-ab1a-3728544aeb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:db:4d:d8:56:21:86:a4:15:02:f6:a0:2e:
                    86:7a:0d:4f:dd:86:93:2b:eb:28:c0:42:6b:c7:c0:
                    c9:9f:5e:cc:7d:ab:93:02:e3:72:4e:27:87:25:85:
                    2f:a0:0b:26:f9:00:dc:45:c3:a9:dd:f8:4b:0e:c6:
                    31:9f:83:17:e9:dd:df:f7:0b:8b:f3:33:80:7a:2a:
                    48:42:24:d4:f3:5e:c7:bd:2d:2e:4a:cd:34:5c:9b:
                    9d:5e:c2:75:a4:fa:8a:13:39:ae:d6:2a:6a:84:a9:
                    8a:f4:61:28:e8:e7:35:f3:71:e8:d6:e9:ed:2c:8d:
                    06:ad:f8:dc:50:11:aa:b0:6a:dd:8f:23:b0:08:6f:
                    50:e5:c6:a2:e2:b9:7b:be:93:83:b8:09:47:df:9d:
                    32:82:14:45:e0:a0:28:1b:ba:47:f2:cd:2c:0f:b6:
                    d7:32:f5:43:6d:4d:9b:ec:3a:7e:3f:a7:1f:48:d2:
                    eb:b8:00:09:32:60:80:07:e2:94:08:90:22:f4:38:
                    e6:0f:d5:93:1f:1b:b1:f0:73:51:06:db:4b:10:d7:
                    dc:04:b0:c8:e1:92:08:11:52:46:0c:45:f0:5e:10:
                    1f:15:2d:46:21:39:64:7e:76:27:f0:f0:77:55:b0:
                    e9:29:f1:9a:61:72:47:f2:87:33:9c:ac:91:a7:17:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:8E:A7:3D:BB:2C:CF:64:28:91:9A:79:AF:35:A8:50:37:E3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e3163a8-872c-36d4-8f37-fc74bae58898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d2:74:4f:05:f3:11:9e:59:80:4f:51:82:de:ce:82:cc:11:
         61:fd:0a:a9:53:52:9c:e3:11:04:a2:8c:5f:d4:8b:ff:25:ab:
         0d:cd:e5:27:f0:26:25:5d:9c:15:ee:f4:82:a4:d1:f7:4c:b2:
         6f:05:7a:54:01:8b:46:3d:fe:25:74:b6:72:68:cc:c7:77:53:
         6c:58:13:7d:dd:1b:c5:f3:3a:52:20:02:f9:6c:45:dc:ab:26:
         ab:ff:5b:6b:49:7c:d1:e5:71:1c:a2:c0:4f:71:41:36:1a:60:
         14:62:61:c7:0e:5a:4c:7e:a6:b5:3e:30:b8:28:48:34:9a:5b:
         e4:cc:62:d5:3c:56:ec:02:1d:e7:0b:75:97:21:f0:46:47:bb:
         55:04:95:1f:10:a1:da:e8:5a:6f:7c:de:b6:41:a6:d3:0b:82:
         8d:44:de:9d:bd:3f:0f:f4:d5:e2:48:cd:32:4d:9e:ad:8d:79:
         30:42:22:10:df:4e:1a:33:66:24:2a:ea:5d:44:22:01:56:51:
         28:b4:0c:e4:7b:1a:1e:1a:ad:7c:eb:92:47:7c:79:be:22:9d:
         06:b1:28:6d:3b:c4:f0:c0:0d:a0:62:9a:8b:4d:80:7a:80:11:
         94:2e:64:04:fb:2d:3f:75:4d:c0:74:a3:1c:ec:cf:cd:d2:0e:
         bf:b2:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:09 2025 by rpki-client