Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be53027-efd7-395e-9325-fcfa169da818.roa
File:                     5be53027-efd7-395e-9325-fcfa169da818.roa (raw, json)
Hash identifier:          iuLwOkB4iXHBB8p7mIKscpGL2b54V87dCjTeYNrvsuw=
Subject key identifier:   9B:F6:12:35:AD:BC:06:21:DF:3D:28:E8:EC:BB:67:5E:95:4F:03:DF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF946E4DE60B6648B75A4B4D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be53027-efd7-395e-9325-fcfa169da818.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        70.232.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:46:e4:de:60:b6:64:8b:75:a4:b4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=1187ec8b-af92-45b9-9bfd-cfbf35e2cde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:65:ce:07:08:de:46:a1:e8:00:78:4e:6b:
                    fd:dc:c9:98:7b:46:da:fb:ec:4d:1e:c2:0a:24:04:
                    d9:08:28:dc:13:1e:4d:6f:8e:00:b9:03:e7:c8:c2:
                    b3:73:b3:2d:0d:06:ab:a6:ab:88:42:24:f9:60:b4:
                    32:a4:8c:f2:8c:a9:d2:7f:29:1e:6d:3f:d4:7e:ba:
                    89:9c:99:44:de:aa:f4:ed:bc:57:93:d2:97:34:4f:
                    85:d4:db:f0:43:7e:2b:c9:59:32:da:e3:a8:13:5d:
                    5d:cc:28:4f:d3:df:b7:8b:d1:3a:0b:7a:87:25:80:
                    f0:2b:ca:35:90:64:d8:63:d1:5a:b0:2e:46:e9:69:
                    f7:33:9a:c7:9d:49:67:50:7b:ff:0a:0c:67:b2:59:
                    9d:a1:43:d3:3d:e8:9b:0d:3d:46:88:d5:e3:aa:30:
                    b4:4e:f3:a1:10:53:a1:ff:d0:16:31:2c:80:bf:d9:
                    ae:f0:e1:6e:cb:b9:c5:d0:ac:4a:a3:89:4b:2d:36:
                    2a:ed:9a:ae:0a:8a:9b:eb:cb:6e:b3:a1:c0:26:16:
                    83:9d:46:a4:f5:17:69:89:90:05:45:01:58:56:df:
                    62:bb:17:73:95:99:0f:e9:34:61:6f:62:4e:c3:5b:
                    f9:b1:c1:9f:ac:a4:13:d8:37:a4:d7:7c:da:4f:aa:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:12:35:AD:BC:06:21:DF:3D:28:E8:EC:BB:67:5E:95:4F:03:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5be53027-efd7-395e-9325-fcfa169da818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:2a:58:9f:63:f2:5d:9b:7e:a3:c8:df:e2:95:9e:c0:da:
         3b:42:60:bb:46:1b:b9:4f:85:a2:84:4c:4b:8b:ba:85:a4:0a:
         88:25:0d:65:24:a3:f0:e1:7c:22:45:4c:1c:5d:43:d4:0f:3f:
         39:6c:dc:4a:c3:ff:74:24:9e:98:61:fa:92:a4:1f:29:b2:8a:
         f2:80:32:af:e6:4d:9c:3f:06:99:07:66:fb:68:64:63:32:ed:
         b4:fe:7a:62:db:b7:b9:7e:88:0c:f8:89:4f:72:8c:20:9e:b8:
         e6:d0:57:94:86:8d:67:96:e8:97:bd:7f:37:1b:bf:fa:0a:e5:
         c6:e2:5d:0d:d2:f7:cb:cd:0b:cf:84:7b:91:d5:db:bb:09:c4:
         dc:ac:02:de:13:c8:05:49:99:b3:80:90:f1:74:cf:64:55:ca:
         47:79:b8:2f:79:86:f1:ed:24:fc:1d:9f:35:62:cb:c2:7a:92:
         03:65:9d:03:67:f5:39:85:d3:54:c7:59:83:c5:95:fc:5a:35:
         03:d2:4d:ce:05:22:64:48:45:c1:63:9f:a4:5a:4c:5f:cd:dc:
         21:f0:10:9f:5e:65:2e:d4:7b:52:91:75:44:80:0a:b1:f8:1b:
         32:10:78:33:e7:a9:78:ac:db:2a:85:42:0c:23:a6:98:e4:be:
         3f:3d:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:05 2025 by rpki-client