Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511b495d-5606-330e-aaf4-139206d3f997.roa
File:                     511b495d-5606-330e-aaf4-139206d3f997.roa (raw, json)
Hash identifier:          X+UFo+RbSJJLRMxrdL42pGGCrYxkAiahXa8GRkmmuDo=
Subject key identifier:   51:F0:BB:DF:CE:D7:DD:C1:4B:19:0E:88:77:68:B2:EE:26:D6:05:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE53F6EB0E5CD27DA0C1AE700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511b495d-5606-330e-aaf4-139206d3f997.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        162.222.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:3f:6e:b0:e5:cd:27:da:0c:1a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=beb18ea6-eda6-4109-a45b-24e2a3aca93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:ea:65:06:d1:6c:a3:a3:f1:04:05:15:03:
                    89:68:bf:f9:1e:6e:c6:36:ce:a9:46:3d:da:d0:bc:
                    6e:78:36:3f:c3:33:de:d2:14:e0:88:b6:b2:f8:98:
                    9b:41:0c:ed:57:88:10:8e:2c:55:b3:09:cd:44:37:
                    55:e4:5e:b5:fd:44:6b:4d:54:fd:08:90:f7:67:19:
                    76:a4:ca:32:e1:3d:47:73:1c:f5:e1:fa:0e:08:63:
                    45:21:53:cd:cc:d5:c5:18:df:54:bc:a4:93:26:df:
                    be:57:0f:9a:c6:0b:a9:0a:45:c7:36:09:f9:59:6a:
                    57:fe:26:49:22:dc:4c:b5:5c:0b:b4:a1:a4:19:21:
                    d6:2f:a6:ca:9b:cc:70:70:75:fc:b3:f5:fd:42:7e:
                    47:70:ea:cb:30:73:20:90:29:c5:fc:1d:d7:57:0a:
                    65:86:6f:e0:2a:89:4a:76:de:99:07:0e:8e:8e:71:
                    70:6a:54:4d:46:b3:0e:45:ba:0d:d2:48:fa:2a:fa:
                    70:2a:41:81:e1:c2:82:e4:7a:79:97:9d:f8:a6:a6:
                    ae:c5:8d:13:40:58:c9:6d:aa:9a:4c:f9:6d:61:e3:
                    21:eb:0d:ee:44:b5:14:3c:20:c9:6c:84:55:65:78:
                    e0:c2:ac:6c:c7:65:a5:6c:cf:aa:c2:02:5e:81:54:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:BB:DF:CE:D7:DD:C1:4B:19:0E:88:77:68:B2:EE:26:D6:05:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/511b495d-5606-330e-aaf4-139206d3f997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:b4:f8:93:d2:59:2a:0c:51:a2:b8:0b:7d:af:70:90:f3:
         7a:c9:26:aa:e8:98:64:8b:8d:48:0e:45:37:0d:8e:24:37:7a:
         1a:9c:0b:ac:89:d8:fb:aa:a6:3d:b5:14:ee:61:d5:ba:7e:8e:
         9a:b4:88:dc:35:cb:3d:82:a5:de:5a:94:64:8d:80:da:81:8a:
         a8:c5:b4:23:8f:99:4f:6d:5e:0d:84:9c:8e:59:ff:64:b9:12:
         b9:35:b2:c2:38:26:ba:f8:5e:8d:dc:42:51:48:ab:62:92:c3:
         49:65:15:2e:58:03:f4:f2:5c:c3:d5:a2:e5:a2:dc:a3:84:5a:
         b7:7d:be:ff:53:a5:0e:f1:8e:40:a2:c9:29:d6:82:9c:46:14:
         23:4d:94:71:b6:bd:fa:8f:e6:00:92:5c:75:95:b7:de:64:55:
         a6:57:62:68:ff:fd:9f:79:c4:a1:9d:df:39:01:b5:56:1b:5a:
         52:b0:72:ba:5e:24:57:5c:66:c6:63:14:cd:40:14:54:f6:2b:
         01:fa:87:4a:1f:9f:18:f7:70:0d:b3:51:38:85:5e:7c:9a:bc:
         e2:df:6d:59:a3:59:82:6c:63:7a:2b:56:13:3f:38:7f:67:1e:
         09:7e:b4:27:b3:5a:f4:1f:f1:81:b3:cb:9a:59:ec:68:78:9b:
         b5:e1:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:27 2025 by rpki-client