Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab78b9d-697b-3966-bb11-0ae8fae54222.roa
File:                     4ab78b9d-697b-3966-bb11-0ae8fae54222.roa (raw, json)
Hash identifier:          MJy5oziGADA0ovhuzUY1FEIrgOtU/XRDfwljRmpMuGs=
Subject key identifier:   F5:A4:2B:F6:38:41:E2:44:AA:95:B3:9A:09:54:20:3A:DB:87:19:EC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF268323828F9F2B8A82C9040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab78b9d-697b-3966-bb11-0ae8fae54222.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        157.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:68:32:38:28:f9:f2:b8:a8:2c:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=a4b44b7c-11d2-4d74-820a-723910d115fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:85:5c:dd:fe:a7:c2:cc:da:9c:3e:13:ae:
                    86:da:66:fd:5c:8d:14:23:24:8b:1f:2b:b7:23:89:
                    1e:29:60:38:99:4f:64:f1:ab:ad:c9:ce:bd:20:ca:
                    75:a3:99:51:03:42:02:fd:fb:f9:7e:86:0f:6f:13:
                    e6:c9:8f:8b:c9:26:8f:ae:3b:b5:1c:6e:b0:55:42:
                    69:6d:b8:92:1c:e9:45:c2:7e:29:5e:3f:88:6a:f0:
                    0e:07:19:0d:58:4f:46:18:fb:c9:2a:dd:49:e0:91:
                    ea:bf:5f:5f:29:d8:82:06:29:6f:67:2c:78:8d:69:
                    fc:06:ec:ea:a5:73:75:7a:06:8c:27:5b:30:a8:02:
                    3f:5f:52:aa:6b:9e:a8:07:55:00:c9:5c:e4:18:bb:
                    09:d1:80:ab:6a:b8:b4:6b:b0:4c:e4:33:8e:81:a0:
                    19:ee:f3:f4:99:2c:57:09:65:e0:95:56:a2:fc:c3:
                    f3:4b:22:01:1b:5c:6d:4c:15:7a:da:69:8c:1c:e5:
                    0b:25:28:92:c0:ad:a5:5d:7d:de:74:ff:93:91:38:
                    e0:1c:56:c7:bf:40:8f:f4:47:16:fe:7b:8b:9e:22:
                    b0:f9:41:a1:0d:98:af:fa:30:99:03:66:dc:19:b2:
                    47:45:9e:fc:88:fc:af:6a:83:53:1f:63:e3:b5:2b:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:2B:F6:38:41:E2:44:AA:95:B3:9A:09:54:20:3A:DB:87:19:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab78b9d-697b-3966-bb11-0ae8fae54222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:63:0e:0e:dc:b2:d2:20:71:c0:a2:a6:62:b5:77:a9:65:10:
         67:84:9b:10:75:ab:f4:d0:39:4a:2e:65:fe:05:c8:b9:c5:a8:
         8f:b7:92:a2:2e:3f:68:9b:a0:43:64:5b:89:88:0c:ec:cd:2d:
         a7:b1:fc:fe:a1:b6:f3:65:a4:fd:f1:bb:83:04:44:b1:e2:e4:
         dc:dd:0a:fc:cd:79:3b:28:78:a5:b7:90:c1:d3:21:8a:f1:6d:
         75:8d:e4:56:2e:34:66:89:5c:ea:1f:a9:c8:5d:cd:f0:43:3e:
         89:17:33:41:63:ce:a4:e9:cf:43:3e:90:d5:ef:59:69:85:ff:
         e9:80:18:8a:2f:bb:50:4c:ee:7e:26:70:2b:61:aa:5c:82:3d:
         34:4d:a5:a5:87:0b:22:a7:99:86:8f:4a:4c:3c:7f:a2:2d:d1:
         e3:ee:08:d7:93:2f:8b:14:70:f1:34:ab:46:62:8a:ff:da:71:
         bd:c7:2d:c3:63:e9:bb:04:6f:47:19:a7:28:ad:0c:3d:9c:9c:
         22:90:8d:28:df:eb:d1:b2:ba:be:c4:70:89:46:0f:8c:80:5b:
         31:e1:71:11:70:89:8a:ef:9a:7e:d3:59:0b:62:3e:62:5e:f3:
         67:1e:5f:b7:9a:3e:12:b3:55:1f:11:e6:23:18:5f:8b:71:15:
         5a:2e:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:30 2025 by rpki-client