Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60272e05-7ff1-3d2d-9d2d-a9e0da532c00.roa
File:                     60272e05-7ff1-3d2d-9d2d-a9e0da532c00.roa (raw, json)
Hash identifier:          dU19Oz/aDbM2uHcktsrT4YhlImgxqPjNQeeLeHUyG7c=
Subject key identifier:   C3:94:86:6E:3A:31:B0:A7:1A:64:E9:3E:4F:99:3B:E0:2C:BF:9E:06
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6C342DAB5C3095C54FFDDB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60272e05-7ff1-3d2d-9d2d-a9e0da532c00.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:34:2d:ab:5c:30:95:c5:4f:fd:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=48eb88da-2202-4080-9339-ecdc80738092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:b5:21:de:db:a5:27:35:26:69:2f:f7:2d:
                    79:aa:96:22:f6:09:72:61:ee:d2:96:64:1f:58:3c:
                    a5:3e:d0:50:60:26:73:67:93:35:77:88:af:6b:11:
                    f4:27:24:57:04:93:2e:8f:10:45:e4:4b:2a:5c:32:
                    3b:22:c5:10:1d:df:2e:e4:12:b5:33:fc:1a:8a:a2:
                    b7:e9:18:7c:ce:27:d6:a7:7b:45:cb:a5:b8:e3:08:
                    2b:2e:8f:60:06:ee:3d:c9:b4:22:85:fb:df:dd:ec:
                    26:ef:ce:3b:a4:f7:e3:fd:75:d7:f7:fd:f1:dd:5d:
                    23:3d:a6:bc:ae:0b:b8:c8:1f:1d:bf:15:b0:34:10:
                    c0:4a:55:15:7d:5a:78:aa:2a:bc:17:68:29:b1:a7:
                    e9:77:76:18:1e:9e:f9:d3:15:80:62:e7:ec:ae:89:
                    ed:72:e1:a9:df:21:67:e1:92:92:82:f4:ac:34:d5:
                    76:b9:11:31:3c:00:2b:a7:65:c6:9b:f1:9c:52:ab:
                    90:1b:f2:23:48:3f:48:35:bb:fa:fd:7c:23:2d:b6:
                    f0:4a:29:49:d2:a4:9a:85:2a:48:ef:30:d7:b7:1e:
                    da:d8:18:d8:8e:19:21:f5:bc:c6:00:79:c8:51:bc:
                    90:5d:59:fa:46:a9:53:d2:fc:30:36:91:f4:52:85:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:86:6E:3A:31:B0:A7:1A:64:E9:3E:4F:99:3B:E0:2C:BF:9E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60272e05-7ff1-3d2d-9d2d-a9e0da532c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:da:7d:8d:04:a7:58:bc:f6:b4:cd:8d:42:0b:9a:9a:09:
         65:6e:a8:27:b9:5d:70:51:83:1c:7b:15:9c:a6:f3:be:31:ec:
         ac:78:3b:2f:ec:63:ec:98:1b:65:58:9b:56:50:5a:ed:41:f7:
         a5:9b:8d:25:47:d0:05:aa:90:e6:07:35:e6:5c:66:65:d1:3d:
         30:57:ee:92:a5:86:6f:ba:ba:ea:2f:1e:8e:bc:a6:be:49:d5:
         45:ac:1e:92:d8:c0:04:c6:ca:4a:d5:9c:8a:8b:2f:9f:cc:ab:
         44:ab:1b:4b:46:a2:06:7b:dd:0e:ed:c8:d4:5b:07:fa:97:fa:
         9b:2b:df:a7:99:b7:f9:a1:f5:04:7f:3d:fe:57:b7:b4:dd:87:
         33:0e:42:c6:fe:56:09:63:55:73:f2:b5:d1:a9:d1:e6:0d:71:
         e1:be:14:11:35:fd:08:4e:90:46:36:fe:b3:f4:a3:82:91:79:
         af:04:11:dc:41:13:6c:67:55:2f:cb:c3:f4:fc:d5:f5:c5:f3:
         f2:20:37:52:a7:3c:9e:eb:70:b2:be:e6:cd:8d:02:e8:73:5a:
         9b:b5:c6:1a:07:6b:4d:d2:10:de:2b:17:1b:f6:b1:f0:9b:f1:
         e2:5a:af:31:6f:31:05:e6:82:67:27:13:57:7c:3b:63:ce:3f:
         fb:b0:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:28 2025 by rpki-client