Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/694ba3e0-1c3d-3538-b923-c40aaeab5a55.roa
File:                     694ba3e0-1c3d-3538-b923-c40aaeab5a55.roa (raw, json)
Hash identifier:          aG/GLfII3xjaG9hsZ4LvdmVmB9aa5crcHQobAPDDx6E=
Subject key identifier:   FD:60:A2:17:28:66:40:85:F7:E6:6E:C8:9F:C9:BF:8B:8B:92:F7:87
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA7FD660C9D7D72F42E329A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/694ba3e0-1c3d-3538-b923-c40aaeab5a55.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        75.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:fd:66:0c:9d:7d:72:f4:2e:32:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=bb7eea86-7d86-4694-89d0-475f08151d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:d4:73:c0:7e:78:da:36:13:a5:4f:77:ae:
                    13:e8:48:51:be:0b:b4:96:f3:1f:ea:70:95:a2:a5:
                    56:47:5b:38:85:51:fb:29:23:94:7e:d6:b0:3f:5b:
                    60:43:ab:ee:a7:61:4f:c7:46:20:aa:ad:5f:d4:fd:
                    59:2a:47:89:f4:76:af:e1:b4:fc:16:53:46:d9:8a:
                    43:f7:b3:48:24:0b:c2:3d:47:55:0e:1b:65:34:46:
                    72:aa:5b:f2:90:7f:55:10:d9:6d:03:86:3f:76:46:
                    93:47:f7:44:a2:a2:46:aa:b4:6c:5d:25:7d:d3:da:
                    eb:b7:e0:64:ab:d4:62:c6:84:a1:f3:99:4a:e1:2e:
                    21:a6:03:34:54:a0:98:48:0e:fb:34:cd:ce:b2:e1:
                    81:3c:38:f8:1b:2c:db:4d:93:41:17:79:05:dc:9f:
                    72:f3:fe:6c:0d:a7:71:7f:e0:53:de:a0:75:14:05:
                    ff:6b:b2:3a:47:27:dd:d2:e5:0c:0c:70:a0:0b:38:
                    01:ea:7f:99:cf:97:1e:cc:0c:85:f3:24:91:38:e1:
                    23:ab:b8:c3:a3:4c:15:bf:31:f8:3e:1f:c1:6e:10:
                    77:d0:44:4a:7b:94:52:73:a1:41:96:03:be:f5:f7:
                    6e:3c:32:8f:45:6b:0c:37:a8:d0:e7:1d:48:7d:cd:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:A2:17:28:66:40:85:F7:E6:6E:C8:9F:C9:BF:8B:8B:92:F7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/694ba3e0-1c3d-3538-b923-c40aaeab5a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:1b:f9:44:1e:ba:2c:5b:26:6b:19:8e:1a:b9:5a:a9:5e:
         cf:93:57:cb:a2:54:d4:61:c5:cb:e7:2c:a2:80:5f:79:63:6f:
         32:ec:ae:ae:9b:84:84:36:e3:6d:8d:d3:2d:a9:32:ff:c6:29:
         46:a6:89:c2:3b:d1:99:85:96:10:ef:e7:29:97:e3:67:7f:9c:
         82:65:5d:c9:e5:27:08:95:82:9b:2e:29:28:39:fd:d2:d5:d4:
         99:85:84:c5:3a:43:a5:55:06:9d:fd:d6:be:0c:2a:e8:55:cb:
         ad:c0:76:de:9c:48:10:f2:2c:48:7c:06:94:5a:4d:29:30:80:
         a0:90:60:c1:69:b2:17:53:1c:79:64:8e:10:2b:8a:4b:ba:bb:
         ba:75:d3:3a:2f:84:8f:38:91:82:54:8d:8f:4b:33:0f:e5:24:
         12:8c:8a:9a:d9:31:75:ab:8e:08:cd:ac:3d:e0:b7:08:16:2c:
         6c:65:00:4e:86:6d:a8:b2:40:2c:ae:f6:6d:bd:f3:e2:1d:a8:
         0d:5f:16:6a:c4:e3:04:6f:09:c7:5e:68:06:f2:1c:91:5e:d2:
         81:71:e9:8e:a3:94:18:03:5c:73:c5:8f:8b:75:e7:0c:ac:e2:
         f7:f0:bf:50:aa:86:28:48:cc:4f:47:89:38:23:2a:5a:c6:33:
         30:92:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:31:21 2025 by rpki-client