Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b869557-ced7-3178-bdeb-3b0235ec59e0.roa
File:                     5b869557-ced7-3178-bdeb-3b0235ec59e0.roa (raw, json)
Hash identifier:          ggLzGyHlQWJzPOPhK3J9SvkUQdDYOjLz3Gdxl7WoCLw=
Subject key identifier:   F8:5C:38:A5:A5:88:72:2D:A8:B6:8C:BF:5A:31:89:B2:0C:BD:46:BB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95D8B86B9EF8AB6354A89480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b869557-ced7-3178-bdeb-3b0235ec59e0.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.143.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:d8:b8:6b:9e:f8:ab:63:54:a8:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=380a93ea-abb0-4ca7-ac9a-69ffc8df5df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:a5:a6:90:42:05:1a:db:54:b4:90:f5:81:
                    3b:dc:10:fa:86:18:99:9f:b5:4f:6d:ec:c2:9b:6c:
                    59:30:63:dd:37:57:b2:21:38:1c:96:43:ff:82:87:
                    8f:4f:9a:2b:65:75:33:c3:a4:f0:af:ab:3a:1a:9b:
                    32:db:a2:97:10:2b:d8:c9:a5:a6:99:9d:df:59:d8:
                    81:74:07:4d:9f:af:d3:72:b7:3b:36:5b:2c:89:9f:
                    5a:a6:f2:f5:2a:96:96:6d:c7:11:ed:26:f4:62:e6:
                    22:7c:0d:0e:80:62:40:0e:7e:c6:9e:3f:20:32:ec:
                    48:dd:c5:10:d8:1b:c0:5d:4b:8e:0a:ff:ce:3f:e7:
                    c6:c9:66:ac:de:87:80:15:96:c5:22:1b:e1:90:d4:
                    65:b7:ae:0d:57:13:e4:b2:25:e7:c2:f9:0e:68:a9:
                    d6:61:21:14:db:12:4e:40:2e:9f:9a:ae:e3:03:ae:
                    76:d3:23:d7:da:d8:b1:f3:7b:e4:73:0d:15:50:71:
                    4d:c7:0c:b7:ce:d0:cc:a1:71:b1:8f:d8:41:7c:28:
                    1a:30:43:c8:cf:7c:3a:38:c0:82:ae:f2:86:3c:97:
                    a8:d0:28:e0:2e:42:0c:15:db:92:93:d9:49:f4:d2:
                    34:6c:fa:d1:10:84:58:ec:4f:eb:d1:88:60:33:7a:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:38:A5:A5:88:72:2D:A8:B6:8C:BF:5A:31:89:B2:0C:BD:46:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b869557-ced7-3178-bdeb-3b0235ec59e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.143.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:62:d2:cd:20:41:13:bf:27:8d:23:89:e1:de:13:28:c4:
         76:81:ae:0a:a7:69:85:7f:8a:c8:a8:eb:a2:8b:14:5c:7b:2d:
         d3:8b:45:3f:6a:9c:6c:21:68:26:3e:f2:94:1c:cb:af:3a:49:
         63:28:a5:79:a4:a6:e6:11:67:af:b6:dd:35:f5:1f:e1:3a:f9:
         71:8c:a1:ac:b2:9b:24:8e:f4:45:f8:99:e7:7e:59:83:74:ea:
         1f:1b:e6:63:86:94:63:43:85:5a:f8:07:12:e5:5b:98:69:4d:
         58:94:a1:b5:55:be:74:cd:cf:e4:78:df:00:2f:d1:31:8e:7c:
         17:ed:20:1e:7d:f2:e9:14:d5:99:a3:0a:68:0e:b1:51:3e:ca:
         7d:02:87:31:2e:4e:6c:08:a2:fe:8e:37:d7:af:f7:b4:7a:46:
         61:66:3e:04:33:d7:57:17:46:eb:13:86:21:69:bd:d6:db:47:
         59:e4:8c:a3:db:9a:e7:84:7d:b6:a2:59:d3:b2:85:47:d5:94:
         79:dc:a9:79:cd:23:cf:3e:ea:88:45:eb:d8:a5:fb:12:af:b0:
         fe:d7:2b:6b:f2:63:fe:d9:a1:50:b3:f9:35:2b:9b:59:9c:cd:
         91:c7:e2:87:15:1b:be:60:7e:1a:25:62:e8:6c:fd:28:78:52:
         b9:af:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:27 2025 by rpki-client