Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62aad72d-513c-324d-b1af-05cbf3dea5d9.roa
File:                     62aad72d-513c-324d-b1af-05cbf3dea5d9.roa (raw, json)
Hash identifier:          EVW9qsQjClTuHP2RIpLN1NkrynWGDrPPhAEzvpYi47Y=
Subject key identifier:   14:8E:BF:9D:F6:32:B1:FC:AF:84:25:53:74:C3:35:4E:CA:95:DE:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584040D65A00D16203B779203C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62aad72d-513c-324d-b1af-05cbf3dea5d9.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:d6:5a:00:d1:62:03:b7:79:20:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=131bceb0-f5a3-4e55-8992-fd5116258791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:4c:71:b0:10:b4:2b:de:d0:a5:95:98:9b:
                    89:1e:b9:54:cf:f1:d6:af:6b:ec:dc:75:84:96:c7:
                    6e:0d:c2:90:c2:1d:31:1a:12:b2:1b:d3:6c:28:c7:
                    65:ab:60:40:aa:61:8f:3b:fc:58:5b:16:a5:d5:2a:
                    c6:4e:b8:f5:58:e3:fe:6a:5f:e9:b4:8b:c7:7e:d7:
                    17:ab:ad:34:42:b4:47:96:ac:08:2c:db:5d:d2:d9:
                    b7:fa:ab:c0:50:09:ff:83:b7:50:3e:53:3d:d2:41:
                    93:54:87:ae:bb:54:69:50:8f:74:0e:8c:5a:b9:94:
                    51:4a:b5:79:8e:c2:6d:a7:b5:d6:bb:33:3d:47:ba:
                    1b:d6:47:96:bf:53:9f:24:fa:95:1e:c5:6b:86:17:
                    c6:9b:af:c4:bd:94:79:20:8f:89:7b:51:d3:76:63:
                    36:f4:37:15:17:39:92:84:02:a8:c0:8b:99:cd:30:
                    bf:c8:77:bb:5d:51:01:01:e2:0e:6e:78:96:53:e0:
                    f0:9d:46:0b:46:66:3a:fb:24:22:9d:5d:7e:3c:ae:
                    b7:71:13:a7:99:df:05:e7:51:f7:63:11:1b:ba:d2:
                    a2:ee:b0:34:53:72:7f:c9:eb:7c:79:cf:bf:6c:41:
                    3f:a1:e7:66:20:44:07:3a:3f:e3:2c:5d:e6:08:57:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8E:BF:9D:F6:32:B1:FC:AF:84:25:53:74:C3:35:4E:CA:95:DE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62aad72d-513c-324d-b1af-05cbf3dea5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:5a:05:e4:a7:c6:b0:89:ba:db:ea:7d:a9:89:ac:c4:7d:
         50:3f:59:75:bd:9f:b5:2d:2f:fa:7c:1e:61:e1:58:a1:8c:df:
         d6:48:29:96:63:f7:06:50:17:cc:7a:99:6d:4c:0c:d8:e1:cb:
         51:9e:69:fc:5a:2b:db:6f:2a:0c:c8:c5:14:6e:19:ae:45:3b:
         c2:d4:11:85:f3:8c:b8:5c:95:ee:ab:2a:be:0b:a1:b7:db:79:
         09:d1:65:37:39:d2:61:61:25:4d:da:aa:e9:a2:66:26:ab:50:
         fd:36:64:bf:f9:26:a6:36:68:ef:a7:8d:3e:fe:cc:82:7a:04:
         c8:7e:c3:1b:4d:fb:5c:35:0e:2e:f4:c3:2b:46:7d:17:1b:31:
         f2:7a:e8:b7:d7:5e:0a:cf:e3:7e:55:8d:fc:a8:c4:33:36:de:
         26:ef:3b:86:25:58:3d:3f:ae:19:b6:6e:74:97:a0:f0:1a:1d:
         ec:dc:0a:cc:07:98:ef:54:59:66:b2:53:06:27:3f:80:f3:0f:
         55:7f:d0:6a:e5:8d:c9:fd:20:2d:df:5e:70:c8:68:4c:ca:b7:
         84:a7:98:0d:59:73:a1:b6:00:5f:98:87:ae:fc:79:3f:ae:a3:
         6c:14:33:c4:a1:fb:53:ff:30:0a:7f:f3:12:76:f6:6b:c7:d5:
         9d:57:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:55 2025 by rpki-client