Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/612a4aa1-c660-3896-abd2-11ea15654dc3.roa
File:                     612a4aa1-c660-3896-abd2-11ea15654dc3.roa (raw, json)
Hash identifier:          FJjMUjCt7f0w+WcOYG3Od6S8e/iIt+4qUWGCN5JH08c=
Subject key identifier:   73:30:F3:11:06:E9:44:93:59:0F:50:F9:87:11:A2:0F:EA:49:87:66
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF5F44572C939C3A49E23B700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/612a4aa1-c660-3896-abd2-11ea15654dc3.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        208.86.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:f4:45:72:c9:39:c3:a4:9e:23:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=309fdaeb-7212-40c1-9fa4-8f28902e0e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:2c:59:c0:f5:ef:e6:54:52:8d:13:56:e3:
                    b1:a3:45:5b:3e:b8:51:71:8d:93:ad:9b:d4:9a:c6:
                    2f:33:e1:16:2b:d3:2c:6e:9c:f2:b1:ed:7d:57:36:
                    38:7b:bb:a0:e9:dd:02:2d:62:72:27:8b:82:7c:44:
                    a8:5e:d2:0a:00:3e:3b:a4:7f:1b:37:d7:16:a5:94:
                    d5:96:48:c3:36:8e:20:03:de:c0:d5:84:40:8d:54:
                    6a:9b:ed:61:49:8b:6e:13:32:9c:8c:63:f6:d3:5b:
                    47:cb:16:4f:66:b9:88:1a:53:45:f1:09:d3:60:e9:
                    02:17:fb:45:d4:63:1e:65:1a:8c:97:71:5c:0b:82:
                    cc:d2:56:64:ce:2d:a8:fa:c8:07:41:cc:05:60:35:
                    10:32:50:76:7e:bf:79:13:71:d8:ac:e0:20:6b:24:
                    e5:aa:0d:2d:f2:c3:d2:39:c8:b3:52:cf:a9:86:3f:
                    c8:86:78:f7:c5:75:12:3c:50:5f:7c:4f:55:cf:8a:
                    62:58:31:6e:d2:af:fd:3d:d0:78:41:ac:5b:1f:df:
                    62:cb:c5:38:62:20:56:fe:db:e8:60:c5:8e:11:81:
                    06:fe:e8:c0:e8:1e:ab:b8:9a:bd:96:f7:79:1b:f2:
                    5f:02:6b:cf:e4:02:33:91:3b:3a:ab:7f:58:59:48:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:F3:11:06:E9:44:93:59:0F:50:F9:87:11:A2:0F:EA:49:87:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/612a4aa1-c660-3896-abd2-11ea15654dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:ab:61:03:d5:8b:a8:c3:4b:0b:07:b4:ec:55:bf:da:f4:
         9e:cc:2a:4d:52:16:bf:17:81:a6:e4:99:c3:75:7c:af:f1:12:
         15:49:bb:25:2a:58:de:41:83:dd:67:96:bf:71:18:eb:fc:18:
         e7:df:dd:d8:60:e8:65:75:b2:24:04:4c:bb:31:36:79:ce:4f:
         77:da:ce:d0:11:75:1c:c6:bd:b8:28:bd:f1:d3:35:40:e0:2b:
         4e:a8:6c:57:f2:e2:39:cc:5a:41:70:fe:d7:3c:e0:74:75:b3:
         37:76:20:1f:3f:e3:df:17:07:76:5d:af:e1:33:b0:23:70:60:
         5f:b0:29:df:b9:af:24:fe:a0:7f:8d:5f:3d:35:23:ca:cb:d2:
         d3:a1:6d:00:9d:62:33:6a:29:29:da:eb:6a:82:99:5b:04:44:
         aa:6e:47:dd:35:80:ae:78:06:41:b9:8a:79:e6:b0:82:de:73:
         57:12:db:53:a9:56:a7:48:ea:c2:83:88:1d:d3:49:d7:fd:ed:
         e1:32:0c:56:2b:ff:a2:d0:04:47:15:2f:fb:37:df:df:24:37:
         d9:ef:d0:4b:01:41:8e:ac:c2:c5:c1:24:7f:43:20:3e:c2:b8:
         7f:af:d4:4b:52:8a:03:fc:85:77:d8:5f:b4:9f:c8:79:c2:bc:
         a9:89:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:29 2025 by rpki-client