Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ddcc26-82c6-3956-af02-28ed1adc3913.roa
File:                     66ddcc26-82c6-3956-af02-28ed1adc3913.roa (raw, json)
Hash identifier:          8dZSs7RUfEO/7MWBPMkDZjDuR2eHGlVuixVGblu+hT8=
Subject key identifier:   47:14:75:4F:86:EF:94:E4:FE:AD:50:87:1D:97:BC:C1:CA:39:DD:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F852E180BB0CAA7D5CDB1B000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ddcc26-82c6-3956-af02-28ed1adc3913.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        153.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:85:2e:18:0b:b0:ca:a7:d5:cd:b1:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=eac0a881-57a9-4b47-a8ba-1e394b3ed9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:dc:30:cc:a2:b9:96:46:78:94:f8:9a:fe:
                    98:77:20:92:9d:56:df:ff:00:c0:e1:b8:af:6f:5a:
                    f1:db:6b:23:41:30:b8:20:f0:bf:ab:e9:29:cb:62:
                    41:b7:20:a9:86:cd:04:24:9c:e6:20:8b:21:98:bb:
                    9a:2d:da:e6:95:22:3f:92:97:66:47:05:6d:8f:c5:
                    a1:c8:2d:23:54:d1:d1:11:d5:8a:25:84:65:70:ee:
                    5d:ed:1b:1d:12:d6:44:c1:bc:d2:81:82:ab:9d:b2:
                    08:00:66:57:1f:e0:0e:7c:26:f4:4a:73:d0:a6:3c:
                    db:d3:21:b5:a1:ab:0a:f5:08:4d:c4:84:1a:d2:2c:
                    17:1a:3a:0f:41:94:b4:42:e1:1a:b6:34:fb:b8:50:
                    fb:a8:c6:e2:7f:9b:d3:73:f5:d3:49:58:0f:3e:20:
                    63:fd:63:b3:39:34:b9:71:da:aa:d7:ab:fb:36:1c:
                    ba:d5:2d:86:3a:61:91:56:dc:1c:58:57:ae:f5:47:
                    14:cd:62:73:e1:96:33:a1:6f:ef:56:8d:fe:fc:cf:
                    86:a4:cf:76:bb:15:df:d4:05:3d:ae:84:a4:4b:30:
                    fd:5d:16:90:f2:0e:82:e2:fb:4b:0c:60:8b:26:51:
                    e1:8c:f9:bb:ee:cf:fd:e2:61:b3:86:e2:d5:54:a0:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:75:4F:86:EF:94:E4:FE:AD:50:87:1D:97:BC:C1:CA:39:DD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ddcc26-82c6-3956-af02-28ed1adc3913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e1:dd:87:74:c6:9c:11:b7:cc:84:14:d0:08:07:a5:9d:05:
         3a:ee:a6:af:6a:d4:0f:72:3e:3a:9b:96:e7:2e:62:29:2f:99:
         fa:fa:0e:7a:91:93:f9:30:4e:3c:f3:a3:d9:18:3f:89:33:12:
         82:6f:93:00:f1:02:53:05:29:24:c7:59:d3:b8:6e:d1:ff:35:
         4a:7d:2e:65:6b:f1:e4:07:8a:66:3c:a5:cf:29:f7:b8:52:4c:
         cd:8a:4a:bc:11:5a:60:c3:67:fe:88:81:b3:66:88:8d:70:ff:
         66:2b:23:9a:49:e1:7f:5f:de:e1:a0:19:b2:6f:52:50:42:b7:
         c7:56:cf:2a:22:d2:6c:42:ef:de:9e:9e:6f:17:88:93:ec:a2:
         93:7d:5c:d2:d2:d0:17:bd:93:f5:aa:2d:a3:82:89:87:a4:f0:
         dc:f6:f1:68:cb:f9:c1:34:1a:aa:ed:80:7e:3e:af:1a:3d:93:
         9f:7c:6f:3c:ec:5f:9d:99:70:7f:57:e6:7f:ad:bd:86:00:9b:
         b1:a7:8e:dd:2f:60:a7:f0:32:2d:7d:08:01:45:53:7c:e9:47:
         d2:e4:7d:d3:78:d2:bd:1a:a8:32:97:45:1a:1d:b8:9b:bc:ed:
         f2:35:b9:72:64:54:c9:04:4e:4b:d3:fa:52:23:d4:57:bf:0d:
         fa:22:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:58 2025 by rpki-client