Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686dfdcc-dc9c-3a6e-a9d4-77b147a268ac.roa
File:                     686dfdcc-dc9c-3a6e-a9d4-77b147a268ac.roa (raw, json)
Hash identifier:          hSIxldyeGbalL1UXZtR9tYDkYKQALzff5snfylabGbw=
Subject key identifier:   4D:B1:E2:44:27:4B:E2:C9:BF:E6:39:BE:B1:BB:80:CC:B4:E7:F1:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E95E0288C594C6F0103F0B4C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686dfdcc-dc9c-3a6e-a9d4-77b147a268ac.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        71.141.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:e0:28:8c:59:4c:6f:01:03:f0:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=9a85c076-8f4f-429a-941d-990305ed3b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:dc:96:92:b4:b4:7e:4e:08:76:e9:6c:3b:
                    2a:d2:ac:ce:0b:e5:d2:b6:6c:35:13:fa:67:b4:9b:
                    28:fa:c6:a9:e6:d7:d3:94:0b:b1:1c:fb:56:44:30:
                    0d:0d:a5:13:a0:c4:86:03:7c:55:c9:4a:2c:2f:b1:
                    7b:ca:59:99:97:1f:87:de:a0:91:31:c6:68:70:d6:
                    24:46:73:45:c3:5f:4a:fe:6b:a4:cc:d8:ea:aa:75:
                    d0:02:03:c9:ad:53:83:f6:f7:c7:c7:11:b7:9d:63:
                    95:65:d6:a8:a4:14:6d:c8:34:e6:b5:fb:2d:7b:5b:
                    b2:31:7f:a7:6e:f3:02:ab:67:74:3b:ef:97:3c:8f:
                    c3:a3:1a:a6:2b:a7:2a:d6:5a:3c:f1:c9:1f:ef:85:
                    ec:cf:9b:74:8a:d8:5d:f3:85:26:3b:fa:43:86:4f:
                    0f:39:19:12:59:67:f9:98:f1:c4:ad:6c:a9:2a:ee:
                    ff:69:ff:10:6a:47:3b:2c:ed:42:93:e6:59:9e:a5:
                    ff:10:0e:24:f9:4a:49:60:55:86:eb:4a:70:b0:55:
                    8b:17:a5:fd:0d:b2:e2:35:ca:f5:6e:47:f1:ae:8a:
                    c8:e9:4e:72:74:78:58:c7:c8:69:c1:ed:85:b7:4b:
                    32:3c:05:b3:46:5a:21:d5:fc:41:81:28:a0:f7:f8:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:E2:44:27:4B:E2:C9:BF:E6:39:BE:B1:BB:80:CC:B4:E7:F1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686dfdcc-dc9c-3a6e-a9d4-77b147a268ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:7f:1d:68:32:cb:ff:e5:33:f0:51:d7:e5:ff:18:b0:91:
         45:d2:16:a3:3b:a0:b8:f5:08:46:c2:8e:be:24:0a:93:3a:01:
         f1:4e:c3:c9:fa:85:b2:64:16:18:52:e3:b4:98:ad:5a:97:d6:
         f5:8f:7d:92:b7:05:90:4b:9e:d6:76:d3:23:bd:bf:f7:bc:15:
         dd:01:b2:52:71:35:41:81:c0:28:47:51:28:06:91:1f:dc:32:
         d8:ab:45:77:c2:69:5e:79:52:50:c8:48:c3:86:3e:3b:ae:76:
         d4:4d:18:57:18:78:ee:4a:e9:20:29:e2:69:24:3e:01:49:fe:
         b2:21:6e:ef:b5:3b:a9:66:44:06:5a:57:45:6d:e4:20:e3:a4:
         e6:67:cd:c7:ce:93:75:88:b7:6c:1a:46:46:a4:2c:b2:02:95:
         46:95:f9:3d:73:97:ee:17:0b:b5:77:c1:49:82:5a:97:28:b6:
         b7:6f:37:bc:c7:31:04:54:9f:33:c3:56:99:13:43:27:ac:22:
         a1:e0:21:f8:b6:32:53:47:49:8f:f3:70:d1:90:94:0c:33:ca:
         d7:13:f2:c0:7f:06:75:be:f0:67:17:08:c4:40:b3:e3:cb:90:
         d5:1c:5a:31:9d:a9:6d:df:4f:1d:3c:77:67:66:aa:80:66:5c:
         92:2b:f2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:11 2025 by rpki-client