Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6416503d-2df9-3d8b-8c72-5690b4853f50.roa
File:                     6416503d-2df9-3d8b-8c72-5690b4853f50.roa (raw, json)
Hash identifier:          MtpYHcZYIojNwm5+9S1oAmOcBAGrCCGzIbqo3mg6nsY=
Subject key identifier:   51:21:1B:6E:F8:53:72:6C:A5:AC:2C:CA:BF:A3:8F:92:AC:46:C9:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCE071634A0D9DBCC7CC02B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6416503d-2df9-3d8b-8c72-5690b4853f50.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        161.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:07:16:34:a0:d9:db:cc:7c:c0:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=eacbbc39-246b-476a-8ded-b1f386f96e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:52:1e:50:eb:6a:1d:14:ec:43:23:f4:4f:
                    a6:3e:e5:1c:e2:c5:e0:d9:37:c7:cc:56:69:b7:8a:
                    af:a8:59:75:3d:5c:cb:ae:e4:b9:5d:e4:b0:cd:90:
                    f7:8f:fe:a5:41:e7:44:5d:30:f4:75:69:51:73:10:
                    7a:8b:77:1b:f8:63:f5:3a:b9:83:b1:ee:22:40:6b:
                    df:6f:ac:17:60:76:4d:d2:2f:23:e2:09:a6:7c:42:
                    38:ca:7d:de:3a:4a:15:9f:da:9b:c4:8d:82:1c:7c:
                    ee:7c:fc:f0:ff:e3:bf:85:91:95:6d:37:86:78:d2:
                    f7:80:75:d0:61:4f:a0:f0:08:db:c3:65:e6:3a:33:
                    ab:96:94:58:13:c4:36:d2:e0:df:db:21:6e:d3:f1:
                    e7:be:0d:9b:21:fc:db:95:30:63:38:b1:d2:3a:15:
                    94:8e:fa:c8:b6:da:50:e4:e6:53:ae:55:c6:f0:eb:
                    c5:b5:c0:99:6d:9a:1b:9b:47:5a:d9:48:30:c5:e2:
                    66:b8:dc:93:b0:bc:3a:41:46:27:40:ac:30:f4:51:
                    0e:6c:0e:5b:f4:2c:00:f5:54:4b:c2:0d:9a:f4:f0:
                    b1:9e:e9:a5:f7:74:d8:15:a3:7a:56:02:27:5c:48:
                    a1:ad:e7:e1:29:66:6d:6f:90:be:2b:28:c9:53:75:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:1B:6E:F8:53:72:6C:A5:AC:2C:CA:BF:A3:8F:92:AC:46:C9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6416503d-2df9-3d8b-8c72-5690b4853f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:d8:b2:80:7c:7a:f2:17:7f:c6:27:92:0e:f9:85:8a:77:
         f2:90:e8:b7:9e:fe:ca:c0:39:13:9e:d0:cb:d7:77:e4:31:99:
         0a:1c:42:8c:f1:a5:85:53:97:1a:77:ed:68:8e:b4:9a:8d:65:
         01:10:83:75:88:54:f0:1a:a8:99:78:03:f3:1a:29:0c:bb:34:
         7b:1e:2a:68:c5:b4:d8:ec:ac:48:53:14:45:bc:73:cb:91:d3:
         87:7b:2a:70:84:fa:14:5d:ea:8f:5d:c9:5b:19:33:71:f7:3b:
         49:34:01:95:13:d0:e3:76:c7:76:f1:f7:5e:be:b4:08:8a:58:
         66:53:2e:32:92:32:41:90:84:1d:7b:63:85:ca:08:05:af:1c:
         de:43:4e:22:72:89:ca:f8:84:a5:8e:cf:5b:cd:f2:e6:14:3b:
         4b:92:1f:bf:c2:f3:85:f6:66:92:0c:3e:59:5e:80:ab:de:8c:
         4c:a4:d4:54:ea:fb:e6:63:9f:e7:e0:0f:e8:6c:c0:1f:33:89:
         bc:ac:08:8f:f2:2f:eb:95:3b:c1:10:ce:63:a7:3c:38:21:8f:
         5f:af:ea:3c:88:5c:5e:4c:3f:b5:87:86:3f:12:6c:12:9a:dc:
         93:10:c7:71:92:51:c5:e1:a3:47:7e:41:d7:8d:e8:a5:b7:30:
         6d:66:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:33 2025 by rpki-client