Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b7881dc-2959-37fc-a9f9-0ecfd0a87022.roa
File:                     6b7881dc-2959-37fc-a9f9-0ecfd0a87022.roa (raw, json)
Hash identifier:          Zqjz92Li6eH65KXgSwCGo8c4r323h0CtEQydZqoDL20=
Subject key identifier:   C1:5E:AE:A1:71:D6:55:A8:84:DD:9D:59:99:4F:90:30:E0:AD:2B:C7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840657A93EF3369D0C829A2B580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b7881dc-2959-37fc-a9f9-0ecfd0a87022.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        40.165.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:65:7a:93:ef:33:69:d0:c8:29:a2:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=4ee3ef58-92d7-4312-9333-6ebf9b417e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:d2:27:35:2a:b0:b5:5b:a4:91:d7:ca:e5:
                    bd:30:48:2d:b8:c5:f2:88:a5:1f:60:a6:ab:53:4a:
                    0b:bf:d1:d1:07:94:ee:61:01:10:54:e7:7d:bf:85:
                    5d:3d:46:16:fa:32:d3:09:36:66:be:66:2c:0d:2b:
                    81:e4:d6:12:5a:25:89:74:d9:5d:d8:4f:d2:da:28:
                    b8:d2:6b:c1:f4:54:57:42:3a:c3:58:50:53:bb:27:
                    60:79:8a:7b:c5:25:9b:0b:b9:e6:c9:94:c0:e3:3e:
                    5d:56:e5:2d:d4:6a:09:2f:3a:d8:62:43:87:a3:bd:
                    7a:e7:1e:56:ce:4d:98:ef:9f:94:7b:05:00:7f:d6:
                    39:0e:20:00:e6:e9:af:33:03:3a:b6:4c:88:16:bb:
                    cd:54:18:91:85:76:f0:7f:97:27:20:ec:cf:f3:df:
                    08:a7:df:c9:ec:dc:21:db:52:cc:f8:a4:99:11:e6:
                    33:5a:ea:db:e5:f6:41:94:b2:36:ad:ec:c7:2b:6b:
                    99:5d:cb:b2:54:1c:14:22:95:2c:65:9e:7d:fa:eb:
                    46:47:d5:a1:b3:05:73:5c:d9:0a:a7:f6:76:19:3d:
                    5b:f5:92:8c:ed:e5:f1:2f:3f:5b:5c:c8:2f:5c:6e:
                    ba:73:71:f5:b7:18:e5:19:a1:97:f5:e7:51:1c:aa:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:AE:A1:71:D6:55:A8:84:DD:9D:59:99:4F:90:30:E0:AD:2B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b7881dc-2959-37fc-a9f9-0ecfd0a87022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:d2:09:e0:a6:74:97:e8:71:fe:fb:e8:44:bc:3f:de:e6:
         9b:f6:3e:d6:9e:b4:70:2c:33:3a:22:ec:e1:35:62:5e:84:2a:
         73:cb:a6:1e:05:72:11:5d:6d:c9:8d:a1:d5:6f:99:ab:43:ae:
         8a:32:03:51:fc:87:2d:58:6a:55:e9:eb:de:37:39:b2:24:94:
         ff:7d:73:bc:01:fd:6e:b1:6a:c2:2e:46:fd:ac:04:90:6d:bc:
         ad:d7:73:d3:09:38:a4:0d:af:98:33:fd:96:f9:e4:16:18:f5:
         e3:4d:d4:96:27:18:0b:15:f1:a8:1b:5d:7c:8f:9c:b9:bf:88:
         98:cd:4f:a7:2d:d2:26:bf:77:b8:8b:0e:c0:fe:32:c6:11:bb:
         65:a4:e5:be:a8:8e:bd:25:18:e3:09:e8:f6:7a:84:f6:63:9d:
         92:f4:f4:87:4d:e7:00:bf:2d:63:bb:f7:29:40:9c:92:66:a3:
         9d:f4:ef:4f:b9:fe:ca:c8:ed:8b:cc:9a:83:cf:b0:b6:b7:a3:
         ad:4e:ca:37:b4:12:34:1a:80:61:96:d4:a5:eb:90:fe:cd:eb:
         16:9d:04:4a:3e:2d:aa:04:5c:7c:8f:d9:ad:26:53:c6:6f:0e:
         b1:8b:b6:22:03:7e:c8:1e:e2:67:98:16:6c:78:b8:bf:94:c6:
         f6:f6:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:19 2025 by rpki-client