Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cff05a4-b719-3c05-88e6-35a90bcd76a0.roa
File:                     6cff05a4-b719-3c05-88e6-35a90bcd76a0.roa (raw, json)
Hash identifier:          dz/Gg1cC09dumoOaDsyUETHJIe+kpSb+0zkcPJMVOhQ=
Subject key identifier:   FB:41:BA:FD:2B:52:FC:C8:2C:3C:38:C4:BD:CB:0C:8D:B2:C4:5B:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406E5197F5BD4F00792A25FC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cff05a4-b719-3c05-88e6-35a90bcd76a0.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        128.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6e:51:97:f5:bd:4f:00:79:2a:25:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=4f7a061e-6636-4007-9925-b1e472145aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:64:2b:de:29:70:88:e8:81:84:ca:a6:9b:
                    07:e6:f4:e1:57:ce:50:a4:4c:9a:03:b0:4d:79:ab:
                    c4:d2:de:cd:ac:ab:5c:95:2f:69:04:56:3c:97:86:
                    8b:87:83:9a:07:f4:57:73:51:c4:dc:a4:f1:0e:fe:
                    fd:6a:d1:63:ff:22:14:a3:fd:4c:1c:73:40:7a:b1:
                    e2:36:1e:17:24:64:a9:4f:7c:65:32:27:3b:34:63:
                    f6:c5:79:5b:6c:f2:b6:29:96:c0:2b:2e:90:1e:84:
                    a4:fe:1a:49:45:bd:21:05:e7:b6:87:71:e7:76:74:
                    f0:96:17:14:62:b3:c0:b3:e0:17:61:00:04:c7:7e:
                    a9:2d:f3:ce:1d:5f:36:40:cd:25:c3:ff:36:ac:f6:
                    77:c6:c6:d1:34:7b:05:b8:f2:41:e6:c2:cd:37:8e:
                    cc:75:51:6e:00:f5:9d:e3:ab:4d:90:fb:58:c4:9a:
                    ef:d4:1e:0f:94:f8:6b:3d:df:7f:bf:39:c5:dd:b3:
                    70:a8:12:8d:79:6d:35:8e:32:c0:cb:9a:79:12:01:
                    93:09:3b:fb:80:95:4e:f6:c7:78:1e:22:f9:75:8e:
                    66:2c:36:79:b2:e4:e2:3e:4b:25:ca:ee:be:01:02:
                    9a:e0:66:53:bd:2a:91:81:05:dd:5f:63:4e:ee:ff:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:BA:FD:2B:52:FC:C8:2C:3C:38:C4:BD:CB:0C:8D:B2:C4:5B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6cff05a4-b719-3c05-88e6-35a90bcd76a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:09:e1:f3:f3:f2:a4:38:68:3f:e1:8f:d3:87:b2:9f:81:
         87:01:01:d7:1f:43:b4:3a:e0:5f:15:e2:f5:e2:ab:0b:ff:b9:
         ce:4a:20:59:73:95:5e:6e:1b:e3:b5:36:06:02:6b:6e:c7:2b:
         c9:8f:19:dd:85:e1:4d:11:27:60:22:5c:a5:e5:59:14:de:5b:
         94:9b:e4:cf:8a:d5:b5:8a:71:16:2f:89:3e:95:e1:6c:f3:ce:
         19:55:fb:1c:70:4a:b5:bc:ba:86:a5:9d:7e:42:d8:7a:92:48:
         28:95:7a:36:dc:cc:25:32:11:b1:f9:f2:f6:c7:d5:28:ed:d8:
         e0:c0:3b:b4:78:1f:39:1e:75:70:b5:72:42:a9:7d:6d:62:a2:
         3c:d1:06:9a:15:22:2b:ad:df:57:90:64:c2:0f:b1:79:48:a8:
         ee:84:55:e4:31:31:42:02:29:d3:dc:26:12:9f:c1:50:5f:d8:
         c1:6f:0e:ea:0e:37:e7:27:4f:b1:2a:43:ed:89:0f:33:8b:4d:
         f2:aa:49:77:82:65:5a:9b:2e:62:67:29:69:fd:c2:05:13:ef:
         ce:80:d7:03:fd:ed:db:f4:5d:84:c0:8a:3d:58:27:d3:5c:91:
         0a:06:03:c0:5a:b5:bc:fe:90:28:16:bb:04:c6:dc:2e:ef:bc:
         4d:5e:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:02 2025 by rpki-client