Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6bb347-705f-392d-ba83-387a029a971b.roa
File:                     4d6bb347-705f-392d-ba83-387a029a971b.roa (raw, json)
Hash identifier:          dAlM0Wq8FJmU550SiPv3GKOgFsJjq6km6fqU9xTQZTs=
Subject key identifier:   58:F5:15:A7:80:88:30:EF:10:44:18:C6:41:E0:14:CE:70:E9:42:91
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840391E94254136CB1FAFDC6CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6bb347-705f-392d-ba83-387a029a971b.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        65.4.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:39:1e:94:25:41:36:cb:1f:af:dc:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=039ad04f-0bb9-4313-b668-817a3e06c810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:af:31:dd:c3:12:fb:f4:25:91:42:0d:20:
                    79:1d:a4:a9:d5:22:9e:e2:a8:d7:24:e4:74:24:ec:
                    52:08:6d:19:77:48:b5:f6:b2:20:82:1e:e2:db:bf:
                    21:8b:05:ce:be:e1:95:3c:e9:32:8d:a7:67:9a:23:
                    ea:a6:31:50:06:48:31:0c:1e:0e:41:ca:0f:0e:a0:
                    8c:16:a8:27:35:c4:d6:2e:93:63:f8:1c:fc:0a:91:
                    bb:f1:11:67:8e:17:86:c1:03:6f:23:ac:d4:29:24:
                    ff:52:cb:f5:c0:e6:0d:39:99:4e:80:b6:49:30:53:
                    b3:eb:65:41:97:a7:88:ef:aa:5e:aa:82:5a:d6:ea:
                    d9:e0:b4:27:4b:67:54:55:90:d7:18:5e:c3:10:23:
                    39:7f:a3:8b:d8:3a:0d:92:8d:45:d1:3a:aa:52:7c:
                    22:c4:9a:c4:42:f6:1a:7f:f0:42:31:50:b0:12:c6:
                    b4:84:49:a6:5a:cc:96:86:40:43:50:3a:55:21:18:
                    b2:f0:35:0a:df:c5:2b:7d:96:5d:01:e3:b8:95:f3:
                    c3:cf:bd:6d:41:93:26:ab:a1:02:48:0a:21:3e:70:
                    9b:97:52:f4:d0:5b:7a:a3:91:19:e4:98:83:77:61:
                    82:94:47:17:ca:7d:49:d7:9c:22:65:4c:07:7b:40:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:15:A7:80:88:30:EF:10:44:18:C6:41:E0:14:CE:70:E9:42:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d6bb347-705f-392d-ba83-387a029a971b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:a3:a2:19:7f:e4:c7:b9:46:bb:36:86:a6:fd:d1:55:3a:
         c9:1e:b1:a4:c4:57:69:66:84:fc:5b:57:2d:a3:8f:2b:9b:58:
         e6:4f:e2:c1:46:50:8b:77:25:31:7d:87:70:ab:6d:e0:83:39:
         ea:27:53:fa:7b:52:2a:e8:5f:20:00:30:a2:2c:80:39:d0:5c:
         2e:8e:49:87:97:b1:4d:b6:b0:98:10:2c:81:60:cb:1c:88:46:
         00:7d:0e:10:26:0e:12:0b:48:49:64:33:bb:24:a5:93:d2:f6:
         8a:a5:13:75:d7:f6:74:20:f2:f3:36:d4:8e:05:21:a0:7c:b0:
         6e:2f:fc:ad:eb:4c:07:d4:3a:2b:5c:98:6f:2e:59:fb:1a:ae:
         aa:30:b5:28:32:ab:0e:2f:67:92:e4:fd:29:dd:5e:18:70:9d:
         b1:fe:97:50:cc:51:f0:78:93:23:95:ea:64:0d:be:4c:14:70:
         df:15:ab:0f:28:8e:a9:13:98:60:5c:e9:68:2b:13:73:e3:7b:
         e3:eb:90:5e:bd:27:d0:88:00:79:7a:ce:0d:47:9f:73:64:01:
         c4:b7:86:da:a9:49:d6:2e:7b:ed:44:ab:ec:9d:4b:76:a7:a5:
         27:af:0f:76:d1:db:d1:98:df:83:40:ee:38:8b:aa:66:60:f9:
         df:71:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:59 2025 by rpki-client