Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/677737d7-56b8-36d9-84ab-09cbb2700906.roa
File:                     677737d7-56b8-36d9-84ab-09cbb2700906.roa (raw, json)
Hash identifier:          UzjWSkCi4wQK6jBqMjfesqoquDN1QWPZrj8OvD3z7lc=
Subject key identifier:   09:9F:48:9E:2D:C4:9D:05:D4:FF:14:C4:C4:DC:C7:8E:31:55:7A:F5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6C593E356E5366001DA05780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/677737d7-56b8-36d9-84ab-09cbb2700906.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.99.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:59:3e:35:6e:53:66:00:1d:a0:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=6219290a-df03-414b-97ed-ed84d75325a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:9e:62:b8:cc:e3:ea:82:7a:fe:83:cc:ad:
                    31:07:d9:d3:42:d3:78:e3:1d:21:09:2c:e8:06:a6:
                    e4:6b:d4:b6:64:07:e2:e9:21:f5:21:c7:4e:4c:15:
                    25:bc:66:2d:f8:b2:4b:93:92:4c:b0:61:ba:18:d6:
                    95:38:ad:6a:bd:e6:eb:13:0d:03:6c:3c:65:62:1b:
                    eb:8d:65:b1:4b:80:ea:42:0c:dd:c0:14:26:b8:eb:
                    db:d6:78:d8:c2:be:95:85:7e:9d:a6:e5:33:3e:d2:
                    a1:df:71:23:62:2c:e4:48:8b:e4:bf:24:ae:a0:62:
                    28:27:9d:f5:f6:85:f0:7d:ca:2f:ce:d3:35:c0:81:
                    78:e5:00:7e:b7:f1:c9:22:0f:e3:7f:ab:6d:0e:7c:
                    6b:47:7b:65:34:06:b7:71:5b:2c:31:89:ac:60:11:
                    65:a0:6a:87:e3:9a:b3:bb:04:e4:74:63:e0:43:a1:
                    02:ee:32:32:fd:89:ac:2f:c1:0c:b6:07:c8:46:65:
                    02:37:9b:25:a3:a7:1c:4b:69:a3:23:6e:56:fc:a6:
                    b0:20:f1:c6:27:04:e1:f5:0d:19:e5:2f:4a:4e:51:
                    45:3a:fb:24:0c:cf:95:51:d5:16:e9:2d:a7:fb:89:
                    6a:b8:d9:e1:5a:bd:ec:75:55:6e:6a:72:39:ad:02:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:48:9E:2D:C4:9D:05:D4:FF:14:C4:C4:DC:C7:8E:31:55:7A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/677737d7-56b8-36d9-84ab-09cbb2700906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:2c:c7:18:cd:95:00:ec:4c:c8:57:b1:6e:e6:9c:ae:03:
         e9:20:5b:0e:1b:0c:a3:a7:2a:0e:11:ea:08:a7:31:3c:a8:ff:
         dc:72:f5:c9:46:65:8b:2f:3c:07:fd:df:77:02:9b:68:f7:94:
         14:84:63:24:16:39:e3:fb:ad:4a:cd:2a:4c:1e:3b:c7:dc:43:
         b5:85:fd:0d:28:93:b0:04:7c:e6:be:b1:88:18:7c:2c:53:b7:
         da:f9:81:53:16:84:6b:95:08:0d:76:3a:f2:28:7f:58:e6:c6:
         58:20:73:e4:c9:95:3b:31:91:bf:bf:86:9c:c1:dd:fa:69:e8:
         07:b6:2d:a0:26:bd:5a:89:91:c2:fc:f0:68:3e:84:58:9d:39:
         d9:04:28:06:1c:a4:46:34:b3:b3:1c:82:96:2b:05:ad:f3:01:
         cd:04:2f:ec:2c:b1:24:64:cd:aa:f4:c8:7e:59:71:46:71:fd:
         8c:f0:2b:09:22:67:dc:26:ab:4e:91:65:39:df:9c:d2:c5:f1:
         4c:7c:e3:48:b8:c7:fe:68:0d:92:45:88:c7:c3:30:24:ef:d3:
         3f:32:d0:11:26:8e:0b:d4:1a:04:64:25:bd:8d:b9:ad:34:c9:
         06:4d:5a:25:e4:d7:64:9f:00:cd:0d:3a:40:51:97:ac:bd:a2:
         9f:1b:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:01 2025 by rpki-client