Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b13e1b5-7b64-3a07-bec4-aaa4fa33348d.roa
File:                     5b13e1b5-7b64-3a07-bec4-aaa4fa33348d.roa (raw, json)
Hash identifier:          uC17A1mKpj6Lk8V0fYxQqpWWd8yLbXohI8trwMtOOEc=
Subject key identifier:   9F:11:46:CF:B3:92:D3:F7:A2:4A:DE:84:24:F0:23:5E:C3:39:BB:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F8C1C9C9129A1BCE7A72B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b13e1b5-7b64-3a07-bec4-aaa4fa33348d.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        32.184.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:8c:1c:9c:91:29:a1:bc:e7:a7:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=17bb2c48-55af-4a26-997f-adcb89c733fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:78:f1:1e:7b:bd:ea:15:78:c2:46:6f:25:
                    9e:6b:57:c3:03:96:f3:64:31:20:2e:8f:a6:f5:a7:
                    af:c6:d1:c5:c0:7c:ba:f7:47:eb:23:5b:e8:42:6c:
                    4b:7d:8f:9d:ae:44:c4:a5:ab:57:3a:70:4a:79:6a:
                    90:5f:5c:3f:86:44:da:c1:67:8c:2c:dd:0d:93:27:
                    0d:d9:f6:09:12:b5:16:ca:53:87:b8:4f:71:10:f7:
                    4b:90:8c:03:fd:5d:c8:6a:cf:19:ea:ef:bf:0e:3c:
                    eb:78:4d:85:97:d0:5f:0d:2d:74:80:07:88:fa:c1:
                    cf:f8:96:fe:ac:a0:7f:24:f8:26:00:bb:4d:4d:25:
                    69:e3:5e:1c:db:87:38:7b:6b:17:a9:08:9a:e0:25:
                    b0:50:78:69:6a:0b:81:b1:7a:ef:67:47:c4:70:bf:
                    5a:ba:46:cf:c2:02:de:86:af:73:74:fa:9a:08:12:
                    22:c2:0a:21:47:97:83:d4:02:dd:c4:c7:f1:a6:77:
                    7c:e6:f3:7b:2f:5f:a0:29:a5:21:df:80:81:fd:e7:
                    fe:d0:9e:f3:2f:8d:4c:c4:77:9d:ac:6b:73:1a:e5:
                    01:1c:39:96:a6:98:47:4c:87:e1:eb:eb:64:58:f7:
                    bb:53:f3:71:7d:ff:00:26:05:68:6a:60:23:f2:7b:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:11:46:CF:B3:92:D3:F7:A2:4A:DE:84:24:F0:23:5E:C3:39:BB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b13e1b5-7b64-3a07-bec4-aaa4fa33348d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.184.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:47:ee:af:10:61:78:91:8a:fb:d5:78:c2:9f:f0:3d:ea:
         5a:35:0b:2f:db:b2:83:db:bf:22:bb:b1:c2:f2:07:32:8c:34:
         d5:e8:21:09:c9:49:40:bf:fb:6c:ff:e9:a9:5f:2c:3f:b5:5c:
         65:e3:0b:1c:b8:19:a3:00:75:6c:33:1e:58:ea:cb:7e:bc:84:
         d9:dc:38:f6:c6:aa:ce:31:50:ef:23:1f:6b:03:4c:ef:ec:07:
         b6:c8:1a:5a:de:b6:e8:ac:a1:bb:38:ee:f6:18:58:c5:eb:0c:
         ff:d8:ca:ca:d5:a6:88:a4:57:8c:98:e4:0b:8c:ea:82:7b:c2:
         3f:1f:ce:4d:b7:19:e9:33:24:7e:cb:47:c9:a3:7f:e4:51:25:
         ad:bc:47:dd:6e:5f:2b:f9:e5:8b:79:0d:ae:10:9e:6f:6d:cc:
         5f:6d:95:8d:11:90:5b:91:69:21:20:4b:86:9d:26:4e:83:82:
         57:09:65:e7:8a:17:c6:c7:5f:6b:72:35:82:67:1f:54:53:0f:
         6a:66:1e:61:44:05:d6:c5:6e:13:b5:22:57:8d:c1:d8:4b:b6:
         67:41:d6:b4:2d:ed:68:01:ec:a5:cd:04:66:0f:cd:88:09:b0:
         f9:3e:84:84:6a:a4:70:f1:88:61:51:3f:7e:17:5f:14:c3:e6:
         f0:bb:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:54 2025 by rpki-client