Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6307ca6d-ce2b-359e-82cc-3842e9a2f09b.roa
File:                     6307ca6d-ce2b-359e-82cc-3842e9a2f09b.roa (raw, json)
Hash identifier:          Ai+axuu4+rscjy0/fara8dB/A1pO9Xp/MnauwDa1hns=
Subject key identifier:   4B:12:C2:EB:AF:7A:02:89:6C:99:F2:39:BF:4C:B5:54:54:71:F1:42
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4815D6C84A1C21E1AAF60DE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6307ca6d-ce2b-359e-82cc-3842e9a2f09b.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        44.192.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:48:15:d6:c8:4a:1c:21:e1:aa:f6:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=0c23295c-92aa-48b5-ad44-e6e7146fdf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:f8:79:2b:d4:d1:78:47:b3:ae:a2:cd:2a:
                    04:be:69:93:36:32:e4:72:55:84:38:c1:02:ef:37:
                    cc:d8:f2:32:bb:1c:f0:62:c0:f9:55:a5:2c:9e:b4:
                    dd:c8:02:ad:54:b9:b8:c0:9f:99:5e:bb:fa:39:e8:
                    0e:1f:79:46:b3:bd:af:03:dc:84:ba:c2:69:35:19:
                    62:7c:25:a3:91:19:75:97:2f:5b:2a:1a:0a:09:cf:
                    25:db:9e:a6:40:41:ae:44:b8:b6:a3:e7:7b:db:df:
                    44:2b:43:89:a4:45:a2:3e:1f:43:30:b9:c1:e4:f0:
                    20:33:2d:51:eb:0e:c1:df:6a:c7:e7:c4:f4:60:bc:
                    13:71:f6:96:c3:57:c1:f9:b9:25:b2:14:a1:f4:0d:
                    8f:aa:16:1f:81:e7:03:17:98:cf:17:e5:6c:60:00:
                    90:d3:93:9f:a2:1a:89:e1:16:ba:1c:a0:72:eb:ef:
                    e0:dd:18:d0:33:21:32:fb:66:ff:b6:40:ef:b8:c7:
                    dd:fc:1d:cf:0d:fa:97:d5:09:3b:27:29:65:2d:93:
                    dd:2a:c3:ab:4c:32:74:00:0a:0a:35:3f:6a:87:e5:
                    1a:fc:2a:f8:ab:83:d2:24:9d:c5:ac:db:e8:e3:ff:
                    9e:ab:f9:65:6f:3c:b8:aa:08:83:ce:1c:df:05:5d:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:12:C2:EB:AF:7A:02:89:6C:99:F2:39:BF:4C:B5:54:54:71:F1:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6307ca6d-ce2b-359e-82cc-3842e9a2f09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:83:db:54:44:24:37:42:a9:d0:29:5d:41:df:b7:b3:c8:9c:
         d8:55:d2:cb:01:48:50:39:92:9e:2b:c1:20:18:2e:c2:24:6b:
         7e:dc:a3:9d:4c:8f:44:c8:aa:f7:b2:6d:38:1f:94:06:dd:ef:
         c1:18:4d:83:6f:4f:28:e8:0a:32:09:1c:2b:65:24:41:7e:bb:
         29:4a:66:7e:11:d0:17:a9:41:8e:f0:aa:dc:da:b2:b6:e3:94:
         c4:e8:4c:51:ca:f5:3e:9d:45:b5:77:ea:8c:c5:55:04:41:aa:
         29:25:d8:52:54:0d:01:ef:c2:51:1b:0e:b5:7d:a7:12:68:0c:
         d5:7f:7a:94:ee:78:bf:da:6e:1d:28:be:b5:80:c8:11:bc:82:
         47:f7:e8:85:70:1f:c5:31:92:11:1b:f8:44:cc:b1:01:6f:a9:
         be:8d:15:71:d3:08:45:e0:b4:08:ab:8b:54:44:d5:01:98:2f:
         90:1b:db:96:8a:5d:cf:02:dd:26:bd:45:f5:37:05:fc:25:7f:
         9f:0a:ff:f8:c1:73:aa:24:4a:bf:fd:85:36:08:a8:19:6b:c4:
         32:ba:ca:b2:02:bb:84:90:5f:3d:cd:05:04:6e:2b:07:7f:ce:
         f1:28:7e:c5:ca:f0:26:2e:5d:f8:94:35:c8:64:82:d8:97:b9:
         b6:c9:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:03 2025 by rpki-client