Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465aa3ca-4fb6-3751-8dbd-869b975653b5.roa
File:                     465aa3ca-4fb6-3751-8dbd-869b975653b5.roa (raw, json)
Hash identifier:          Mm4D1vHnNlaKIz9zijkhSsvTlWNY/2KWYWz2q1JTjfs=
Subject key identifier:   E4:40:BA:ED:C7:CD:57:80:73:33:69:95:D2:CF:AB:06:A0:78:3B:F0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD3592587F9F5A1DEE0B4E8A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465aa3ca-4fb6-3751-8dbd-869b975653b5.roa
Signing time:             Sun 06 Nov 2022 12:00:00 +0000
ROA not before:           Sun 06 Nov 2022 12:00:00 +0000
ROA not after:            Mon 12 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        207.127.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d3:59:25:87:f9:f5:a1:de:e0:b4:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  6 12:00:00 2022 GMT
            Not After : Dec 12 05:00:00 2022 GMT
        Subject: CN=fb3e3e4b-e99b-4e0a-987f-fbf6071e0b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:86:d6:af:1d:13:d7:41:aa:d2:08:09:06:
                    2c:3e:72:2c:d4:da:52:58:ff:1d:a5:a6:f5:b9:4b:
                    38:50:07:a8:dc:1d:18:8c:06:a2:d5:69:b3:b6:04:
                    f8:07:d6:86:e8:d8:64:ff:a6:65:7c:0b:a0:e7:71:
                    37:1f:90:83:fd:dd:75:d3:91:5d:99:44:f0:0d:54:
                    aa:85:4f:08:f4:9d:cd:16:e0:8f:86:b3:f2:2a:87:
                    2b:48:ff:79:98:2b:0b:99:de:dd:45:95:0f:e0:a3:
                    6b:ee:0a:c2:d9:4e:60:6b:c0:fe:31:de:16:35:5e:
                    96:29:52:61:5d:9a:56:86:ef:f8:08:2a:46:aa:8c:
                    93:b9:1b:95:1e:cf:65:9f:54:28:66:0d:b2:43:9a:
                    2c:c2:e9:8d:9c:2a:90:2c:5a:d6:8c:01:be:ab:91:
                    3b:98:60:bf:e4:a4:f8:5f:bf:17:09:fa:cd:e0:1b:
                    60:81:3b:fd:cd:f0:53:9a:22:59:a7:c5:d0:ec:cb:
                    ae:ff:ec:65:2f:79:1b:27:48:1d:73:e4:c8:40:d1:
                    00:d4:75:2d:a0:6f:96:95:25:f7:8e:72:ee:7c:0d:
                    48:4b:8a:9c:e4:f5:ea:e0:63:ec:26:75:b8:b0:44:
                    fa:3f:3f:35:7c:ad:c8:c9:93:ce:c6:7b:87:de:49:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:40:BA:ED:C7:CD:57:80:73:33:69:95:D2:CF:AB:06:A0:78:3B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/465aa3ca-4fb6-3751-8dbd-869b975653b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.127.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:92:2d:e7:f3:bd:3a:68:65:82:b0:3c:23:ea:11:31:c2:2f:
         5c:56:bf:e6:8f:47:cf:ae:c4:87:69:9e:b9:38:e5:b1:bb:be:
         a6:96:03:2f:4b:c8:69:59:a1:51:52:91:0d:08:70:e9:20:44:
         af:d6:59:cc:7f:d8:95:87:b1:9c:3c:0d:1f:ba:5b:f0:4c:42:
         63:cd:68:e7:21:0b:cb:2f:92:aa:e8:c5:ea:c7:c4:e4:bf:bc:
         9c:7b:3f:fa:40:f9:13:47:5a:98:b3:6d:f3:72:3b:95:e6:ed:
         b3:24:d3:e7:06:50:18:07:74:7a:f8:3d:4d:08:e0:56:ff:b8:
         9c:72:a7:18:e5:ad:f3:a3:82:3a:88:8b:fa:7c:62:56:3b:68:
         f0:d7:86:32:bb:a0:00:7b:9f:93:a5:37:21:2a:e9:82:04:ce:
         3b:43:a4:66:5f:b8:99:41:e4:13:9d:de:8b:b0:0c:a7:12:4a:
         30:a6:3a:e1:e6:21:0d:db:b1:4a:1d:3c:01:d2:46:e5:b8:aa:
         e5:53:08:3d:9b:e3:18:ad:ce:79:6b:0c:22:88:37:99:ce:85:
         80:1d:ee:b2:8e:47:8f:ab:cd:1f:36:1b:6a:55:ac:d4:ce:2f:
         aa:b1:a1:8a:ca:79:a9:6b:fe:ac:08:d7:a6:8b:35:5c:4f:27:
         93:8c:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:14 2025 by rpki-client