Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/693eaa57-a34e-3149-ad33-83a7f08a2ed8.roa
File:                     693eaa57-a34e-3149-ad33-83a7f08a2ed8.roa (raw, json)
Hash identifier:          pmxXpN0NPF4Jpg8zAqmbxm6poDutfMWf36W9YJUiw+Y=
Subject key identifier:   F1:44:B5:DC:F2:D7:AD:77:CF:94:12:D4:97:51:41:5E:E6:4C:8A:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F63C42A4E4616A63FD3E53900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/693eaa57-a34e-3149-ad33-83a7f08a2ed8.roa
Signing time:             Tue 27 Sep 2022 17:27:07 +0000
ROA not before:           Tue 27 Sep 2022 17:27:07 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        56.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:63:c4:2a:4e:46:16:a6:3f:d3:e5:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 27 17:27:07 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=60ac4487-4372-42d7-a8a8-3782c6d98edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:c6:85:68:e0:48:c3:8b:4c:1e:90:b2:8e:
                    cc:df:4b:02:18:5a:bc:af:dd:b9:8f:6f:ea:63:84:
                    25:9a:16:f7:ae:dd:67:cd:dd:a8:7a:ed:63:c9:ea:
                    ba:8c:cd:e7:8c:bb:ec:08:0d:83:3b:aa:f1:f2:45:
                    f2:f0:58:5b:ca:ae:34:25:75:0c:42:9a:6a:c3:dc:
                    f1:c3:29:69:9c:15:64:47:67:58:01:b5:3b:b3:3e:
                    ff:66:32:28:38:37:e4:17:fb:ad:cf:b7:fb:3c:65:
                    6e:6e:fe:c2:4f:9d:b6:d3:a0:72:ca:b7:5f:48:75:
                    ea:d2:d0:b1:3a:0b:a9:f3:78:06:d5:27:d0:fd:d3:
                    f7:b1:80:ce:ac:5e:63:34:21:ce:d8:1d:11:6e:0b:
                    42:5f:c4:de:90:55:da:66:29:27:12:b0:86:47:a6:
                    6c:b5:56:b6:19:76:6b:be:1f:33:0d:86:f5:37:4c:
                    3a:a3:86:39:98:1d:bb:6c:ed:db:c4:65:e0:82:5e:
                    cb:6a:c9:11:56:59:9c:92:3d:ee:6e:1f:fe:01:ed:
                    8e:b0:96:af:8d:b8:1c:59:d5:1f:af:22:34:a5:07:
                    d7:85:b8:a8:b2:cc:89:82:bc:a5:99:32:aa:a2:b5:
                    ca:0f:31:65:14:c4:9a:a6:23:da:b4:44:c1:71:22:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:44:B5:DC:F2:D7:AD:77:CF:94:12:D4:97:51:41:5E:E6:4C:8A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/693eaa57-a34e-3149-ad33-83a7f08a2ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:bc:24:f1:81:3d:2a:54:a6:81:3c:1f:72:78:16:3a:94:
         62:be:9c:6e:74:69:97:d7:a0:3e:f6:4e:f1:dc:39:0a:28:47:
         99:26:9c:02:89:f8:e9:a7:12:be:c3:79:6d:2f:a4:98:e9:11:
         c0:5c:dc:0a:a4:49:c8:b4:78:5a:fb:9f:c8:a4:e9:c6:bd:64:
         39:9c:cd:6e:7b:ac:d4:88:86:5e:0d:9b:1b:4b:87:67:37:39:
         8f:9f:f8:b9:e1:62:b3:fe:5d:1c:50:f1:8b:f4:2d:7f:7b:be:
         e8:5b:59:db:bb:f9:b6:70:ab:6a:0e:29:dd:a1:ee:5b:de:b4:
         dc:71:8f:8a:1b:01:46:36:b1:f6:56:e9:f8:43:d9:86:81:f4:
         64:ba:c8:e3:ec:22:e7:cc:e2:ca:9e:00:dc:b4:8c:4c:e4:e5:
         30:30:40:ca:50:96:37:73:10:28:f0:6c:ee:2b:8d:c3:b0:8e:
         4b:72:fb:cc:6b:81:66:c7:45:95:a8:fa:b4:0c:8f:f5:cd:e0:
         77:b8:f4:32:ad:ba:d2:21:3e:f1:8d:b8:07:68:2e:bf:8b:d2:
         a4:ca:e1:b1:42:cc:9e:b1:d9:53:e9:b5:d6:72:72:c5:b6:5c:
         f7:62:2d:11:90:63:e9:0b:b4:df:00:a0:13:f9:67:6e:c8:4b:
         1a:2f:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:34 2025 by rpki-client