Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b2e613-201b-3b6b-bf81-13925991ae43.roa
File:                     40b2e613-201b-3b6b-bf81-13925991ae43.roa (raw, json)
Hash identifier:          PpEVWYfDTigxO6IspLZszC6tRBU/K5p+XV3VdlasCJk=
Subject key identifier:   A8:ED:A9:82:D3:45:45:A8:8C:62:64:10:05:32:32:5A:D1:7C:7D:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D4008C4E14CB35969B5EDE740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b2e613-201b-3b6b-bf81-13925991ae43.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Wed 20 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        152.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:40:08:c4:e1:4c:b3:59:69:b5:ed:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Apr 20 04:00:00 2022 GMT
        Subject: CN=32de5ce6-6c22-4214-974c-a495716cd009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:71:2f:3e:00:d6:f6:2c:89:d7:fb:b1:4f:
                    43:f2:a6:aa:73:2c:ad:81:69:8f:45:3a:90:75:d2:
                    85:dd:85:7a:f1:f9:08:5f:cc:e5:c8:a8:b3:fe:37:
                    d1:e4:6d:41:6c:46:c3:9c:fb:4e:27:16:fc:c8:09:
                    67:1f:24:37:57:99:c7:2b:bb:75:b3:e9:5c:e3:fd:
                    ac:4e:86:42:e6:19:1f:a0:e3:04:14:38:d6:25:d8:
                    7f:b7:00:27:1f:59:b0:f3:94:be:5b:c4:51:79:35:
                    8e:58:ca:fb:a1:00:cb:75:a9:1d:6e:d7:31:34:87:
                    20:83:dd:c2:2f:5a:2d:a0:76:23:84:ff:d2:2b:ef:
                    a9:75:d0:76:94:74:0d:c1:5f:7b:f5:87:a7:d4:d0:
                    be:76:c5:b7:09:57:8f:a8:00:38:41:76:2a:0b:a2:
                    80:c4:d5:85:5f:91:88:65:93:d3:d9:46:e0:03:8f:
                    69:1d:82:17:32:4a:a7:52:39:82:e8:64:51:38:d6:
                    99:b5:c3:da:5e:85:ec:ef:c4:aa:b5:95:2f:2c:ea:
                    4b:34:16:7f:ac:63:4b:55:f6:8c:61:2c:58:41:18:
                    a9:bf:42:e7:2f:d3:3f:56:58:81:6c:2e:f6:45:b7:
                    e2:b6:ea:64:72:54:6d:11:7d:c7:ff:c2:d3:2c:c0:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:A9:82:D3:45:45:A8:8C:62:64:10:05:32:32:5A:D1:7C:7D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b2e613-201b-3b6b-bf81-13925991ae43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:47:c1:43:b7:38:51:36:d4:2d:c0:dc:c8:f6:bf:1c:17:3e:
         e3:87:76:de:3a:e5:48:b1:d9:c8:ac:25:07:3f:13:92:c6:3e:
         5b:54:bc:e1:61:99:c7:83:13:9d:ad:05:70:c0:73:9e:ea:33:
         7d:32:6f:d8:d8:b5:4d:2e:82:38:82:63:e3:5c:2f:47:87:9d:
         28:90:52:74:11:be:7a:93:9c:67:16:a0:ec:6c:43:a2:a1:1b:
         00:19:a6:9c:4b:0b:88:96:29:50:91:84:ff:69:c3:58:37:e2:
         02:89:64:cf:07:58:be:cb:b4:92:38:28:20:7b:3c:8d:fb:fb:
         c6:3b:42:da:9e:07:c5:b3:64:ce:6b:7a:61:7f:fa:7e:84:68:
         ac:a2:d0:f4:ca:53:2f:53:46:e9:c6:68:6d:24:42:07:9a:8f:
         6b:7a:96:84:05:f7:c4:88:98:d4:f9:45:65:43:2b:85:75:fe:
         fa:e7:22:a0:19:0a:6f:4b:31:32:15:d5:0c:7a:21:e6:8d:bf:
         dd:13:0c:d4:9e:8c:0f:ce:16:34:35:0c:91:05:89:a9:4a:fb:
         f8:04:bd:b4:4b:ce:48:bf:cf:da:6d:70:41:45:53:cf:d9:8b:
         ad:bf:80:e3:7e:6a:9b:08:f7:ff:e0:4c:e3:f6:a1:5b:69:b9:
         38:a4:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:28 2025 by rpki-client