Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/608c9699-8025-3190-890a-1073c6f0a5b2.roa
File:                     608c9699-8025-3190-890a-1073c6f0a5b2.roa (raw, json)
Hash identifier:          RGKy1lhpyDsu9axWXArK+C3SqyCHQF39JYyZfrTyT9A=
Subject key identifier:   68:D2:62:9B:91:DB:75:8D:15:91:7A:6B:7B:44:E9:BF:FC:E7:C6:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB8053F64CEB5DC50EF7ECEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/608c9699-8025-3190-890a-1073c6f0a5b2.roa
Signing time:             Wed 27 Apr 2022 12:00:00 +0000
ROA not before:           Wed 27 Apr 2022 12:00:00 +0000
ROA not after:            Thu 02 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.184.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b8:05:3f:64:ce:b5:dc:50:ef:7e:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 27 12:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2022 GMT
        Subject: CN=20cf8e0b-6615-459f-8f3e-06fc15a404a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:b7:02:b6:0a:80:67:e2:0d:15:00:e3:33:
                    3d:66:ac:09:82:21:b6:31:85:ca:c5:51:93:a4:e7:
                    80:2b:b6:c3:51:64:5c:1a:fc:58:7c:b0:3c:5f:73:
                    37:20:e3:37:af:01:41:69:8d:58:a0:f2:3f:97:ff:
                    40:23:92:3d:0a:d7:29:ea:cc:90:8e:f6:bc:1e:00:
                    a1:1c:4b:82:f2:98:54:50:e9:89:da:f8:3f:5b:77:
                    af:98:f6:2e:6e:a3:97:65:97:81:ed:83:80:06:dd:
                    34:47:8a:58:d0:65:b8:10:c2:3a:52:6d:42:ad:30:
                    7e:0c:65:8e:86:18:57:89:1c:c1:f5:d8:99:0f:c8:
                    02:0b:86:9d:08:de:2c:8c:8e:7f:e3:c7:4b:52:fd:
                    43:2b:d0:85:48:90:ed:c1:c3:7c:35:04:ef:e4:ed:
                    62:94:16:88:3f:ab:ca:a9:3e:11:51:d1:73:68:d5:
                    c4:2f:de:ab:53:31:02:5c:09:67:8e:0f:93:e3:8d:
                    c5:98:94:4e:b6:ef:69:b9:4e:50:01:9d:63:f0:97:
                    53:ab:41:37:c7:25:89:aa:77:51:c1:4a:f3:d4:f8:
                    42:c4:a0:ea:08:3d:d6:c1:e0:7f:d9:6c:e6:30:01:
                    e3:9a:2e:33:2d:cc:61:c8:05:af:c7:ac:f7:c9:fd:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D2:62:9B:91:DB:75:8D:15:91:7A:6B:7B:44:E9:BF:FC:E7:C6:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/608c9699-8025-3190-890a-1073c6f0a5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.184.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:0f:24:84:06:a4:0a:68:88:b6:2e:27:9e:35:db:2c:7e:
         61:c8:a0:52:0e:ea:74:c8:c3:8a:7f:df:36:3c:2f:a7:98:43:
         13:bd:57:94:dd:3c:82:f4:b2:57:59:73:2f:20:10:e3:f0:60:
         99:b6:3b:c2:6c:eb:70:d0:1b:c0:ce:90:f9:8d:35:6c:29:8a:
         c5:cf:c2:80:82:c1:53:37:a5:19:a1:c0:aa:88:4b:03:3e:c7:
         b6:a6:58:84:d2:7b:5c:75:3c:be:79:8d:44:a4:3b:98:e6:1a:
         93:9a:ec:4a:22:4f:94:27:42:47:35:9f:c3:64:21:99:9a:ed:
         f2:29:20:0a:a8:26:6d:fd:32:78:50:5a:29:41:8d:98:3a:22:
         09:b3:02:4e:96:58:63:b0:4c:4d:d0:94:ce:59:97:d1:a6:b3:
         12:46:1a:5a:04:a9:b7:f1:9e:a6:53:07:f9:68:ac:d6:73:dd:
         47:39:bd:5c:4c:ba:2f:c0:3a:54:5b:fa:52:b4:f8:f5:6e:5d:
         bf:cb:cf:b1:c9:29:20:6b:30:38:b7:c0:e8:9e:3f:94:bf:94:
         4d:c4:30:92:1f:47:00:ad:8c:90:b4:bf:0d:dd:a1:31:45:77:
         e6:9c:2e:da:5e:a8:7f:04:e9:2f:06:ac:da:61:ce:f0:7f:46:
         5d:a1:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:26 2025 by rpki-client