Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/659026fb-a71d-3079-bbc1-6e48656c45b5.roa
File:                     659026fb-a71d-3079-bbc1-6e48656c45b5.roa (raw, json)
Hash identifier:          TJQhv/1bBGFwGidFV9g0ublluxwK5p5+r3AujImfu/Q=
Subject key identifier:   CA:E4:A4:A2:A4:F5:40:D3:A6:CF:75:6E:41:92:4C:92:AC:D7:B7:AD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E67CFF26A590E7EC39F852C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/659026fb-a71d-3079-bbc1-6e48656c45b5.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:67:cf:f2:6a:59:0e:7e:c3:9f:85:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=68140ff9-8e48-4dca-933b-8df3d01e3be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:ae:0b:e8:b1:74:ab:df:17:e2:15:ee:96:
                    8a:57:c8:f8:86:cc:69:b2:5b:25:e3:5f:73:eb:f1:
                    d3:32:0c:70:28:90:b3:d4:e2:26:c9:2c:80:2a:cd:
                    45:6d:92:c9:96:a3:66:44:5d:1c:42:62:15:18:70:
                    26:c6:95:c7:a5:53:fa:32:51:86:96:2c:8e:83:c4:
                    52:e3:b6:ac:22:4f:75:7c:1c:fb:d0:57:fd:2c:b0:
                    ad:dd:6e:eb:55:23:36:c8:5f:6e:fa:6e:4f:f1:f7:
                    d1:db:fa:51:e8:83:e1:1c:07:ba:7e:68:93:4f:d0:
                    ef:d5:30:31:1c:bc:eb:10:4a:42:e9:17:3e:c0:f0:
                    51:88:e8:db:87:8d:e5:36:1d:d9:9e:8e:eb:f9:8d:
                    2a:ef:df:5a:d4:3a:71:63:7a:f2:d0:e0:20:b6:ea:
                    92:dd:6c:38:c8:f9:b7:92:a4:44:f8:33:5e:b5:6b:
                    a4:ea:e4:67:aa:b1:6d:a4:86:ed:1b:31:4d:ef:9d:
                    66:36:9f:22:9d:d5:11:a1:ed:68:78:b8:83:86:85:
                    72:95:12:20:e0:36:d7:43:48:19:6a:31:67:ec:aa:
                    10:34:0b:6b:b9:9e:25:43:64:e2:97:f4:e2:0f:a5:
                    5d:01:f6:2b:de:d3:d1:7c:8b:c5:3c:87:d5:dd:7b:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E4:A4:A2:A4:F5:40:D3:A6:CF:75:6E:41:92:4C:92:AC:D7:B7:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/659026fb-a71d-3079-bbc1-6e48656c45b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:81:7c:02:21:2a:6c:d5:dd:41:1e:31:7f:a8:54:3d:c0:
         5e:d0:6e:aa:44:94:dd:21:97:fe:c1:7c:c1:f8:9c:16:fc:00:
         f3:5f:48:95:df:2c:9f:13:f0:03:6e:2a:f2:76:9b:b0:f5:13:
         45:31:43:8b:96:85:da:f3:d9:6e:60:b0:1b:7a:60:b3:86:5a:
         fe:96:cc:eb:78:84:5a:5c:63:18:d9:1a:c8:30:6f:79:7a:9d:
         da:34:59:68:dc:9f:85:08:a8:de:28:4e:02:96:8f:f1:b2:5c:
         23:b0:1f:51:0c:60:64:b6:a3:66:7d:32:17:66:70:6f:e5:3f:
         3f:9a:cc:b1:5d:18:df:75:f8:fe:90:20:5c:ca:df:9c:e1:ad:
         8f:db:20:e2:e5:16:d1:9f:b0:d2:fb:e3:62:e8:9f:de:5a:f5:
         a4:29:a3:ce:98:0a:bf:c4:06:2a:20:ea:b0:e6:25:22:70:57:
         9e:d9:c1:ed:0f:92:66:46:6b:48:ef:1f:29:d0:14:2e:81:a5:
         52:22:9e:ab:aa:89:da:5b:12:6b:0b:bf:8b:b8:15:cd:8a:ab:
         6a:64:25:99:c7:5b:a6:b6:87:15:3e:3f:7b:17:e3:9a:6b:eb:
         19:f6:75:88:37:b1:82:3c:44:5e:af:a3:e3:db:cf:71:14:7f:
         cb:42:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:19 2025 by rpki-client