Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c852654-527b-359c-9e00-c29cae41b1e7.roa
File:                     4c852654-527b-359c-9e00-c29cae41b1e7.roa (raw, json)
Hash identifier:          +X5xyjL6siuVFD5dHK83GWR4/jf/XnD71BnhmBbILJc=
Subject key identifier:   54:70:BF:5C:8A:CA:69:C3:D2:BD:84:34:8E:C2:44:D5:A7:18:7C:73
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3218E85FC0E1B2B6B23B1E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c852654-527b-359c-9e00-c29cae41b1e7.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.2.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:18:e8:5f:c0:e1:b2:b6:b2:3b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=c5f92475-2f23-40ed-ad3b-b8269eaa2790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:d1:37:f9:a4:14:86:18:3d:71:ca:3d:68:
                    eb:37:35:7c:01:a6:e8:c7:9a:8a:b7:be:6c:1f:a9:
                    fb:72:f6:d1:6c:54:bb:21:e1:7a:5b:4b:a4:df:56:
                    a1:d5:45:87:a9:52:9b:de:84:fc:79:9d:7e:18:9b:
                    e0:53:96:e7:45:54:b6:cc:71:d3:19:59:38:0a:f8:
                    e9:16:b5:9d:81:ec:b4:31:6d:3f:b0:3c:f7:bf:bb:
                    c2:f4:36:c3:03:21:f2:01:97:76:e9:62:65:2e:68:
                    b6:19:33:c2:79:b9:aa:37:fb:86:65:88:8b:24:89:
                    5c:20:3d:f5:7c:f6:0d:38:13:4c:28:ae:8f:db:5f:
                    76:25:33:23:1e:38:2f:f2:23:67:de:67:6f:e3:fa:
                    50:6c:9d:1a:f8:ac:91:fa:5f:e0:84:b2:2f:76:58:
                    a7:34:b6:8d:74:a4:33:34:9c:01:b8:3f:42:07:6e:
                    f9:b3:42:c7:61:05:ba:93:ca:41:fd:a9:b0:d4:55:
                    ff:3b:4a:6e:b5:19:9e:cb:3c:9f:be:8a:23:04:1b:
                    19:7d:8f:68:80:52:35:88:b1:97:fa:8e:c6:01:6b:
                    db:90:77:09:5c:be:40:f4:2d:d7:6a:2f:32:59:36:
                    00:ff:8d:4c:7f:cf:a9:2d:72:87:4e:bc:62:66:e6:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:BF:5C:8A:CA:69:C3:D2:BD:84:34:8E:C2:44:D5:A7:18:7C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c852654-527b-359c-9e00-c29cae41b1e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:be:26:04:70:14:d6:2e:a0:25:05:38:78:f3:a2:08:52:
         9d:42:6e:0d:19:1d:5d:c6:1e:c6:31:cd:f2:de:57:ea:1d:14:
         f5:98:49:7b:da:66:33:d9:ef:75:f0:71:d7:ce:9c:52:b0:c9:
         c0:81:8f:d4:33:5c:c5:7e:17:a5:8b:f5:6c:27:d5:e7:20:1e:
         86:e4:9f:15:ee:21:6f:80:7b:ae:68:61:36:82:64:33:c7:70:
         69:c9:a3:c1:e0:27:e0:d9:dc:58:e4:2d:07:8c:51:77:ca:92:
         83:ee:c7:e3:f4:96:9d:9b:53:50:e9:56:58:30:d6:84:f3:8d:
         88:2c:8b:fb:60:0d:c5:33:55:be:2d:8c:39:cb:df:2a:a3:41:
         82:75:2e:9f:b1:c4:a4:41:4d:a6:1a:0f:07:20:d5:08:6d:02:
         68:a6:62:80:01:38:39:ff:35:e9:57:a0:c9:2f:5c:80:a6:2d:
         9c:ee:05:d5:f1:4a:64:e7:8c:a6:42:d3:40:6f:e8:dd:fe:90:
         09:73:75:43:36:d3:f2:13:cd:98:7e:26:f4:73:98:5b:be:f6:
         91:00:be:a0:28:7e:d4:d9:e9:03:0d:15:90:68:61:cd:46:90:
         27:30:04:f8:60:66:c7:4c:63:bf:61:f1:68:2d:6c:f4:6b:7e:
         04:bb:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:04 2025 by rpki-client