Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7c547d-fae8-30dd-bfac-a1ae1890bda7.roa
File:                     5a7c547d-fae8-30dd-bfac-a1ae1890bda7.roa (raw, json)
Hash identifier:          ijYglSUF5VwOjBjPMW1+wKhVGhJMq+GKUzqoRFLeG5U=
Subject key identifier:   D3:8B:7A:B8:E6:BA:80:6C:6E:FD:62:A3:17:2A:5C:96:2A:BC:C2:04
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA72CF6AA16E58EFD5647370C
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7c547d-fae8-30dd-bfac-a1ae1890bda7.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        99.78.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:2c:f6:aa:16:e5:8e:fd:56:47:37:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=8deb40fc-42e0-4670-90e0-bebfd711f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:ee:1e:2b:d8:b2:ff:02:ff:57:9c:af:61:
                    1a:ce:05:d7:ba:8e:9b:02:cc:3a:4a:11:01:72:ad:
                    82:67:2f:1f:d7:a1:77:bc:8e:ef:63:25:84:58:a8:
                    ee:9c:1b:ea:6d:a9:97:04:e9:86:20:2c:d6:32:14:
                    96:05:f8:bc:ca:8a:c0:78:74:4f:50:78:47:65:d5:
                    00:35:c0:da:c6:ef:c3:54:a5:3d:b4:b4:9c:31:e0:
                    f5:7d:be:df:21:12:ea:e5:e6:e8:a0:f7:c0:2f:ec:
                    5c:e3:1c:82:cf:d9:b6:4c:76:2f:13:90:99:93:d8:
                    49:fc:16:9d:1f:5e:25:67:e3:8e:27:6a:0d:14:cc:
                    d1:51:e9:ed:f2:60:dc:6c:e7:b7:b9:7e:a0:30:69:
                    76:2f:24:a9:48:e6:52:0e:29:3d:93:48:78:65:e1:
                    03:ab:ed:05:bb:45:3e:6b:25:5f:ba:f7:a7:7b:45:
                    65:b7:75:45:35:e9:c6:25:73:1e:93:bb:63:d7:33:
                    96:f1:09:d9:8d:00:76:c7:fc:44:4e:47:94:1e:e7:
                    00:43:10:3e:bb:a8:21:ab:97:ef:0e:a7:96:7c:67:
                    f5:d8:8c:ce:87:3b:73:db:c2:b2:7a:76:6d:2e:af:
                    54:81:39:49:ec:66:e3:a0:c5:14:95:be:a6:af:7f:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8B:7A:B8:E6:BA:80:6C:6E:FD:62:A3:17:2A:5C:96:2A:BC:C2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7c547d-fae8-30dd-bfac-a1ae1890bda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.78.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:5d:08:2f:39:5f:7a:08:60:a0:7a:a0:f7:96:17:4d:97:
         1f:9f:d1:75:03:55:82:05:d4:99:ff:92:f0:06:dc:e2:52:5e:
         c1:9b:57:81:39:f6:2f:d4:3a:6c:9d:5c:5a:56:fd:06:bb:1f:
         b0:54:e4:3b:73:bd:93:1b:07:78:26:fb:39:48:73:a0:0d:f7:
         d1:a6:06:70:b0:e3:d9:e6:04:80:ac:7d:50:4c:72:19:48:e2:
         97:44:b0:0f:0e:0b:65:90:6e:67:b4:52:58:e9:14:17:5a:26:
         60:6c:a3:1e:75:74:a1:17:c1:46:7c:5e:1c:1d:5b:3d:52:e6:
         79:92:e4:f6:e2:ac:65:8c:63:37:4a:33:4b:ce:79:f8:b5:74:
         c1:29:a3:42:92:45:13:77:c6:88:c8:c6:ac:f7:1d:e7:ec:fc:
         d0:4d:ff:e5:ae:af:cd:28:96:5a:33:98:26:b0:11:c9:29:09:
         47:81:51:12:f6:f1:f4:da:06:28:6b:a3:4d:12:a6:31:cc:e6:
         5c:5c:e7:50:27:cd:39:cb:8c:7e:06:b9:c6:ee:6b:d8:f0:f3:
         8a:a7:e3:ca:4e:28:5f:37:7c:03:ad:40:2f:0b:48:7e:94:98:
         36:a3:e4:4a:69:1b:53:77:36:85:7b:79:62:a0:18:82:96:2e:
         43:d0:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:46 2025 by rpki-client