Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d873819-265a-384c-af24-491e4d6dfb0f.roa
File:                     6d873819-265a-384c-af24-491e4d6dfb0f.roa (raw, json)
Hash identifier:          vUCgJXKZldV4/Kgv0JK3SRHW/LC1wPC6bCbzQeW30Z0=
Subject key identifier:   2A:83:8E:3D:63:8D:4E:7E:3A:61:6F:E5:95:9A:7C:04:B6:3A:C7:20
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCC92E90DA150E311AF153550
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d873819-265a-384c-af24-491e4d6dfb0f.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        130.171.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:92:e9:0d:a1:50:e3:11:af:15:35:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=372efe7e-be2b-4ba8-bd74-6e5f64148ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:48:dd:d5:bb:a6:d8:00:0d:b6:95:e4:55:
                    5f:c0:e7:bf:3e:46:0e:76:dd:b3:b0:48:f7:b6:7e:
                    41:fa:17:1b:fe:d5:8c:13:4e:fb:38:7f:8f:8c:a3:
                    66:05:e6:bd:25:db:25:fa:d9:c4:bb:f7:ae:ff:72:
                    53:55:1a:a7:88:c7:82:92:5e:d2:8b:7b:22:b8:e4:
                    ed:0c:b5:2e:4b:9b:80:de:d1:21:ba:68:7e:37:59:
                    d0:43:1c:9d:5a:2c:e6:69:8a:73:ec:d2:df:2b:c5:
                    39:30:29:93:87:4a:73:33:e1:ab:6c:13:e0:02:5e:
                    7e:94:b2:df:24:3a:84:7e:45:15:ac:22:b7:43:43:
                    2e:9a:90:37:0c:98:ef:d4:4e:fa:5d:b4:bd:68:11:
                    72:67:dd:27:22:74:0b:2d:84:7c:5a:94:b3:3b:91:
                    ea:39:da:60:03:d2:8d:e5:a7:75:bb:10:39:66:0d:
                    66:2b:b6:c2:2d:54:1f:36:76:4a:66:10:9d:27:f9:
                    c1:e0:d1:6c:73:d4:3a:ee:1e:bf:01:f4:3d:6e:22:
                    70:eb:ea:02:30:a3:1a:e0:40:05:6d:4c:e6:e6:7b:
                    61:99:23:0a:54:c2:d7:06:7e:a0:f0:98:fd:c4:9a:
                    f0:d8:9f:4d:e8:64:56:52:e6:dd:1e:b9:c4:33:17:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:83:8E:3D:63:8D:4E:7E:3A:61:6F:E5:95:9A:7C:04:B6:3A:C7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d873819-265a-384c-af24-491e4d6dfb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b4:9e:a5:4f:8c:79:e1:f1:09:ec:44:58:b7:28:6e:f0:a0:
         f8:a6:a8:7a:6f:a5:43:c1:66:16:78:b0:2b:5c:6b:eb:47:e9:
         6b:be:e2:bb:24:57:f7:e5:be:ae:67:56:a0:55:d6:a9:4b:0a:
         78:79:bb:01:ba:32:e0:25:4f:b0:e9:a8:fd:af:2a:b5:b0:c1:
         3c:51:6e:13:88:0e:dc:63:6c:12:01:a0:5b:e8:d7:82:63:60:
         99:ea:83:44:96:11:58:3c:3d:72:7a:93:d1:57:f4:1f:94:e0:
         04:87:60:15:8a:4e:09:16:69:b7:31:d0:f3:f1:25:8e:38:f0:
         27:90:da:06:2d:24:85:f6:b1:e6:89:0e:f3:87:cd:e7:56:49:
         9e:95:d4:16:5f:44:56:65:b7:d5:f7:0f:1b:99:bd:74:b8:b4:
         12:80:12:42:bb:64:51:45:2b:28:2d:53:74:6f:8e:c5:92:31:
         ba:8c:37:fc:c7:b6:83:ab:84:d4:d0:3b:bc:4e:7e:3f:e3:63:
         68:77:82:e9:90:ba:0b:97:e0:08:af:d7:44:3d:2b:67:ac:6e:
         8f:48:ce:20:2f:6b:fe:20:3c:4f:a3:4c:fe:9b:4c:fa:77:67:
         99:31:c9:77:e3:ab:37:80:92:eb:f2:86:24:72:49:0b:07:57:
         60:ca:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:18 2025 by rpki-client