Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6074f439-d582-35cd-94d2-24c67c94ee2b.roa
File:                     6074f439-d582-35cd-94d2-24c67c94ee2b.roa (raw, json)
Hash identifier:          HDWC3ZBN6+ELWMHAl2wjx5LEhDFa4+qkuy4gTLFjddM=
Subject key identifier:   81:33:37:48:62:C3:D3:9A:00:BA:AE:BB:B9:10:43:00:A0:8E:32:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E65320BAEAB7DADF9EA7BCC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6074f439-d582-35cd-94d2-24c67c94ee2b.roa
Signing time:             Tue 28 Jun 2022 12:00:00 +0000
ROA not before:           Tue 28 Jun 2022 12:00:00 +0000
ROA not after:            Wed 03 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2600:1f01:4800::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:65:32:0b:ae:ab:7d:ad:f9:ea:7b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 28 12:00:00 2022 GMT
            Not After : Aug  3 04:00:00 2022 GMT
        Subject: CN=78238c1f-5a98-4548-9348-9bc096fe8cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:f5:29:68:5c:52:25:53:d6:34:4b:69:40:
                    42:2d:4c:5e:39:93:f2:2f:2d:8b:6c:36:87:b2:32:
                    64:33:e0:02:a9:0e:f9:64:d6:0c:3d:ff:64:b1:74:
                    03:10:21:34:97:64:b8:5f:ed:67:c8:bf:f8:ce:db:
                    c6:58:18:8f:f7:5c:ad:e2:57:67:aa:06:4d:1f:66:
                    04:05:00:13:8b:12:24:b4:c0:81:a2:2b:ed:0f:7f:
                    3b:f9:c1:d8:04:d3:17:92:98:32:32:d5:db:5e:ec:
                    58:39:04:40:b1:13:d1:27:d1:16:4e:c1:40:60:0b:
                    5b:31:53:d8:c6:56:65:32:98:47:da:26:de:5d:22:
                    e5:43:92:a3:2b:45:7a:9a:63:ab:6c:7e:20:3b:6d:
                    77:50:4c:9a:aa:79:6c:42:9d:9b:67:f4:7e:16:10:
                    4f:f3:bc:86:e9:bf:ca:44:7a:c6:ae:72:5f:43:96:
                    62:c0:e4:53:f6:4d:c3:2b:8f:b5:71:44:f8:e1:ed:
                    d2:2a:e1:4c:a0:08:f7:ab:5b:d3:2e:ce:39:b3:96:
                    9d:50:25:4f:06:46:27:cf:6b:ba:4f:a8:45:be:e9:
                    13:d7:6b:41:43:2e:8f:23:9f:83:90:87:d1:ea:62:
                    84:55:f3:d2:b0:9f:3e:c6:54:76:b4:72:26:35:f7:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:33:37:48:62:C3:D3:9A:00:BA:AE:BB:B9:10:43:00:A0:8E:32:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6074f439-d582-35cd-94d2-24c67c94ee2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:c0:51:cb:fb:05:ba:92:ab:04:83:c8:01:fd:d9:d9:45:
         cd:f5:c4:d9:42:f6:67:a3:98:1f:f7:52:e8:9c:ac:0e:d5:08:
         09:5d:f8:c6:7b:26:74:fc:f4:c5:2d:45:e3:41:7c:00:99:55:
         2e:89:b9:87:b8:45:02:de:7b:df:bd:16:a2:bb:12:da:f7:fe:
         2a:99:f3:2b:2a:f6:d1:ee:5e:1f:83:21:27:17:5d:5e:d0:a9:
         45:3b:a1:e6:a6:8e:73:48:47:96:83:ad:78:7d:52:b5:58:c5:
         91:3e:1b:10:57:d4:1c:57:7f:b6:45:18:1f:77:58:7c:66:d7:
         74:c6:96:e5:de:b5:22:2c:ff:04:21:7e:af:10:e0:fd:28:9b:
         24:85:d1:d8:f7:e8:7b:a7:8d:b5:06:74:2d:ca:7d:9c:ce:dd:
         a2:36:4e:c3:a2:b9:96:e4:39:d5:d1:ed:ed:bc:e0:a4:3c:ce:
         90:9a:4d:aa:6a:69:72:d0:d6:9a:4b:a8:91:3c:e6:57:60:d8:
         da:cc:90:78:56:59:a0:79:be:ed:c8:5c:c7:dd:3c:5d:9f:28:
         11:02:bd:b6:27:2d:11:fd:9a:ac:bd:b3:ef:86:4f:7a:86:f1:
         f0:b8:2d:15:a8:28:e9:df:97:3f:e6:ba:95:d7:bb:0f:21:2d:
         f7:a9:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:14 2025 by rpki-client