Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/579c0fd5-9ac2-32cb-beb7-72e875b03aff.roa
File:                     579c0fd5-9ac2-32cb-beb7-72e875b03aff.roa (raw, json)
Hash identifier:          Kj3ywr+TtFCHGt7wThtNMeagEVhvo+B7u8ImTt2Qwk8=
Subject key identifier:   D3:D8:ED:3B:15:C0:39:84:46:9F:51:5C:01:A1:06:BD:50:9B:2C:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2F7ABBFD4E10602495B39B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/579c0fd5-9ac2-32cb-beb7-72e875b03aff.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.197.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:7a:bb:fd:4e:10:60:24:95:b3:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=900baf10-71e4-4928-ba02-8fefd52894f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:06:d1:b6:b4:0d:96:4c:ee:de:7d:b1:fd:
                    0b:ee:3a:e2:92:ad:cd:a0:7d:48:16:aa:62:50:c9:
                    cb:88:a9:a7:c4:47:ef:03:2b:9f:7f:85:27:55:c2:
                    2a:96:21:06:e5:83:75:2b:ce:79:00:d0:9c:30:cf:
                    32:62:7b:e0:2e:b6:6a:c9:61:12:48:8e:b3:8c:d9:
                    6e:0a:3d:8c:00:91:ae:09:71:60:01:35:0f:b1:fd:
                    f5:98:26:ed:c8:37:12:6b:b4:83:61:f2:90:b2:78:
                    c8:62:e7:b8:5a:bb:09:4a:39:63:b8:04:21:df:90:
                    98:c9:02:8f:90:c0:f4:ec:8f:dc:b0:ed:3a:ea:05:
                    9e:d0:42:81:c2:de:a0:44:07:ae:9f:46:57:60:95:
                    2f:5f:46:6d:2a:d9:a2:bc:5c:7f:a2:53:4f:c5:ce:
                    86:a8:28:c2:4e:e5:d5:c0:ff:aa:c6:ba:b2:a2:17:
                    6b:ee:8e:62:e4:0d:dd:ac:ad:1c:1a:c5:90:ae:e6:
                    d3:ce:67:a3:16:c6:76:6a:74:37:77:7c:77:4d:44:
                    78:d2:3d:7a:21:3d:aa:73:8a:f5:d6:f0:cb:b6:d3:
                    35:84:79:45:c0:6f:c5:cd:fa:3d:8c:97:51:4d:8c:
                    28:53:ea:22:b0:e8:7c:f4:39:91:07:a8:5e:07:d8:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D8:ED:3B:15:C0:39:84:46:9F:51:5C:01:A1:06:BD:50:9B:2C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/579c0fd5-9ac2-32cb-beb7-72e875b03aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.197.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:80:60:74:c8:e0:f3:b8:83:4d:d8:08:e5:ca:7d:fb:cf:80:
         09:25:50:3e:af:56:c6:0f:c7:5d:47:91:44:79:17:b6:1d:cd:
         73:93:5d:bf:b4:f7:56:b5:c3:de:5d:73:16:69:e6:35:10:eb:
         8c:89:4b:7d:79:57:03:a6:20:1a:e2:49:a0:80:3e:78:2d:18:
         2d:f2:84:e0:a3:2f:f4:c5:f7:d6:ca:3a:60:0e:6e:01:c4:89:
         63:fb:a7:97:98:6c:f3:94:1c:d8:5e:6d:19:9d:1d:da:83:2f:
         bc:e0:0c:e4:2c:de:a3:fe:63:b2:87:45:83:49:ed:1a:11:ba:
         d9:91:fb:78:9a:fb:f2:66:78:c1:90:36:f9:4d:25:ef:f8:dd:
         3f:61:49:61:7f:ca:21:29:5c:6f:d5:12:62:85:ac:9e:9e:8d:
         3a:f7:04:c2:53:78:bb:94:52:24:94:90:b2:bd:a8:ed:75:5f:
         a7:ec:9f:e5:a8:97:09:ea:e6:59:d5:4a:02:c8:fe:67:6c:72:
         9b:57:c1:b4:16:ef:3b:8f:d7:06:36:9d:e2:85:ec:56:ee:09:
         d3:0b:51:6f:eb:d2:44:06:3d:74:31:93:e5:af:6d:38:84:84:
         92:4d:28:5c:a8:f1:ec:51:31:e0:d0:55:59:5b:12:0b:ef:f3:
         75:69:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:43 2025 by rpki-client