Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4949b0d8-16f6-3de5-82d1-c8d1938398e1.roa
File:                     4949b0d8-16f6-3de5-82d1-c8d1938398e1.roa (raw, json)
Hash identifier:          okLBEgBd9QniktkaPVCpDU5vbJWYTL5/t23CJU0sjZE=
Subject key identifier:   C6:E9:B2:1D:BD:31:56:CC:A1:5E:0E:AE:48:91:CF:98:C9:A3:D5:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1E2E2393392F59758440F500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4949b0d8-16f6-3de5-82d1-c8d1938398e1.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        207.207.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:2e:23:93:39:2f:59:75:84:40:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=940d5b4f-efb3-4361-b804-b532003a4a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:7f:77:c5:02:b3:b8:a9:ed:7e:2d:21:f1:
                    11:8d:94:fe:25:0c:d5:46:d6:63:42:96:4d:4c:05:
                    87:71:7a:bc:7e:9f:fb:c5:08:79:d9:fe:74:c4:2b:
                    96:d9:52:13:fa:f7:a9:53:cc:d2:09:79:f5:4b:23:
                    f0:94:bb:27:ab:84:fc:b5:02:de:d1:0f:84:62:4a:
                    ed:7f:d1:4b:92:5d:b1:96:fa:27:4f:e1:ce:ae:4c:
                    a0:cc:67:4d:6e:5e:7b:95:2d:72:88:b2:ea:9c:e6:
                    85:74:ad:be:b6:81:f7:9a:d3:05:1f:31:d5:74:54:
                    3e:70:9e:9b:54:85:5e:41:63:81:45:b7:dd:ce:61:
                    0f:5b:61:6e:b8:e8:7c:7a:cd:ea:7e:62:80:55:ba:
                    3e:6f:10:ea:0b:fa:56:72:b6:30:08:4e:94:fd:2e:
                    59:cf:74:08:b7:c8:17:d8:86:1c:ee:f2:1a:0d:b2:
                    f4:7b:80:b0:7f:c7:23:c0:c6:2e:27:f7:e2:7c:87:
                    13:49:70:08:19:e4:ea:ec:a1:8a:6d:4e:1a:47:2c:
                    53:70:ef:13:dd:ed:91:fb:e9:e0:2c:30:21:a6:9f:
                    02:9b:1c:1a:5d:be:7f:10:cb:4b:52:3d:ed:91:a5:
                    dc:a6:7d:af:86:d0:37:8a:3c:42:aa:8b:9b:9a:16:
                    7d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E9:B2:1D:BD:31:56:CC:A1:5E:0E:AE:48:91:CF:98:C9:A3:D5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4949b0d8-16f6-3de5-82d1-c8d1938398e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:b6:ca:0e:bb:f6:57:b6:cb:0d:bd:96:9d:03:37:19:ed:
         20:1a:be:fd:08:5d:6f:94:92:24:04:ef:20:4c:5f:3c:d5:18:
         2e:49:0c:56:f7:f0:44:73:fa:95:fd:67:1d:89:32:9d:84:ef:
         56:78:3f:5b:94:47:d7:25:cc:74:be:d7:df:2b:6e:ac:2d:fb:
         48:04:2e:67:dd:27:c4:24:4e:81:1e:56:e2:55:4f:af:9f:00:
         c4:66:8f:2f:d6:91:98:61:f1:ac:81:19:0a:d6:4b:87:62:52:
         7c:27:50:91:c5:c7:fe:59:4d:b3:a7:57:c0:0f:3a:13:1b:4c:
         2c:16:6d:87:7e:d2:47:b7:e2:b1:16:f5:bc:bb:6d:ef:c4:78:
         a6:fa:da:40:eb:28:11:8c:c3:c2:3c:f6:fa:6f:e5:a4:36:c1:
         2e:d2:5d:26:d1:83:df:75:64:b1:c8:85:7a:bb:50:c6:67:46:
         da:15:e2:14:89:5e:c4:84:61:d4:71:9e:0f:c1:b7:00:70:7f:
         67:da:26:18:ee:84:ca:be:1a:7e:3a:ff:ef:1a:4d:76:5b:e3:
         28:b8:8a:56:97:96:56:d2:cc:3b:44:59:5f:8f:ac:0e:c2:cc:
         8d:d9:0e:39:92:82:78:e8:75:42:08:39:df:06:31:43:e5:36:
         02:de:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:32 2025 by rpki-client