Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/477809da-a100-3751-99dd-7b481e24364a.roa
File:                     477809da-a100-3751-99dd-7b481e24364a.roa (raw, json)
Hash identifier:          NlyMwqR6BdlXUyL6PYlGuhgflQe+Hbgx2PaVAWZIh3A=
Subject key identifier:   5E:BA:85:55:C2:16:80:67:6A:B6:AA:FB:AA:50:BD:EF:75:08:18:65
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3380719163A5C9CFB69BDB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/477809da-a100-3751-99dd-7b481e24364a.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:71:91:63:a5:c9:cf:b6:9b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=80d72c7e-70b1-40c4-ae0e-4721dc950f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:ad:53:c2:40:10:ed:79:7f:7c:34:db:5b:
                    04:39:d6:7f:6b:01:cb:44:25:23:56:2c:91:e5:64:
                    36:91:25:32:cc:b8:10:58:27:52:d4:7f:62:44:c9:
                    96:c3:e7:36:76:7c:13:1b:5a:3b:c6:8e:2b:41:8a:
                    a3:bc:9c:07:62:4d:4b:60:99:6f:9e:b8:73:4d:2b:
                    a4:b4:70:05:45:90:22:1f:35:af:a4:db:78:21:23:
                    8d:1c:79:a8:fc:74:69:4f:9a:7d:37:0e:47:52:04:
                    b4:d4:c6:6a:97:16:4b:a2:ac:5c:cf:e3:c7:19:9c:
                    72:ef:bb:ac:3d:77:84:1d:43:95:61:be:68:2b:5a:
                    0b:b0:a1:04:3f:99:3f:18:a8:8f:39:ad:81:f3:e5:
                    58:18:3e:e4:3f:77:ae:e0:75:ec:93:c3:8d:d1:f1:
                    8b:59:ce:59:20:b6:af:b5:44:eb:a4:4a:42:17:42:
                    c4:2d:fc:75:0f:b7:3d:c0:27:f3:ab:9b:10:43:08:
                    19:d1:5b:e0:e4:e3:6e:d6:cd:1b:91:ae:6f:57:09:
                    27:bb:4a:f6:54:b3:28:dd:af:8b:9d:ae:ec:e9:56:
                    62:64:5e:8b:df:fa:c7:12:4a:f8:4a:bf:07:e9:b9:
                    9c:c0:f5:9c:9d:07:12:9c:07:3f:c0:9a:93:b8:a4:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BA:85:55:C2:16:80:67:6A:B6:AA:FB:AA:50:BD:EF:75:08:18:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/477809da-a100-3751-99dd-7b481e24364a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:3b:bf:fc:d0:8e:90:d5:31:33:6c:68:28:de:9b:78:24:
         31:f8:1c:fe:bd:64:bd:02:c4:8b:0a:4f:72:05:d0:e1:9b:ba:
         4b:00:6c:10:2c:d5:ce:43:25:38:36:b7:8c:00:24:fb:88:3e:
         6a:80:7d:4f:a6:c7:a6:3f:2d:e7:8b:12:f2:17:f8:56:9b:28:
         1f:82:db:53:93:e9:c4:86:42:0f:d2:6d:f8:f1:39:37:8d:9b:
         4b:51:7d:72:86:d7:e8:29:e0:a0:23:c4:f7:cb:2d:59:72:d8:
         a8:6b:fb:a4:f8:09:95:99:bc:31:c8:2f:4b:30:22:4e:94:3a:
         4a:0b:61:28:fa:43:7a:78:33:21:58:74:2d:07:d1:d4:a1:b1:
         8a:6a:df:ce:1f:b7:6b:f8:96:1e:15:d2:0f:ac:34:b5:fe:f8:
         1b:45:a7:78:01:f2:0c:7d:b2:0d:54:1a:84:5d:84:76:f8:d1:
         97:ce:a5:a2:66:ca:a2:41:77:f0:8b:4c:55:a0:cb:aa:f6:0b:
         f0:cc:68:42:0e:b3:66:e7:d0:07:8c:71:3e:2e:75:3c:ea:ac:
         3f:a2:a8:90:d5:69:84:6c:fc:b6:44:56:12:4a:05:02:f0:8e:
         b4:2c:fa:e3:74:48:e2:60:6d:97:56:b7:ab:c2:f9:93:7a:c7:
         e0:06:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:31 2025 by rpki-client