Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f8714ae-025c-392f-a10f-b499d73cea30.roa
File:                     6f8714ae-025c-392f-a10f-b499d73cea30.roa (raw, json)
Hash identifier:          ZWLtpuVrbovA71qMcJVm/QMUKdMGgzfWZ+IsQ4nFRb4=
Subject key identifier:   95:86:A1:BB:4C:F1:11:39:9C:A8:0F:97:9F:66:09:A5:27:AC:C7:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6FD8D8C08115FF7D3710DB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f8714ae-025c-392f-a10f-b499d73cea30.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        167.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:d8:d8:c0:81:15:ff:7d:37:10:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=26f896f4-97f7-4c99-9940-a0d18168616f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:78:5e:19:74:62:87:95:30:44:d1:9f:13:
                    06:8d:c6:f0:b8:95:24:59:19:43:c1:e6:c7:7a:f1:
                    d9:64:cd:58:6c:8a:03:73:39:6a:20:de:14:5f:ba:
                    3c:9b:d3:41:ef:92:71:08:2e:08:7c:81:c8:37:32:
                    21:e7:77:c1:54:b7:29:d3:10:01:51:bd:91:8c:4d:
                    7e:46:92:0b:2a:54:57:c2:94:04:5c:35:f3:7d:4c:
                    17:14:b4:ac:1e:7c:9d:8a:24:6b:9f:52:99:5a:34:
                    d0:74:6f:a6:76:30:8f:d9:e3:b9:7a:2b:aa:d2:d5:
                    af:ca:11:06:1a:6f:4a:e6:f7:5e:c4:b0:5f:6f:74:
                    d9:3e:a8:54:a1:36:e7:da:85:c0:63:02:6f:2f:af:
                    0a:08:5e:d9:4c:99:e1:73:7b:f3:20:99:ea:50:e4:
                    43:68:1c:cb:0a:32:00:08:b4:b2:79:7e:83:60:c8:
                    e7:ee:41:5e:6f:df:11:0e:9f:bd:5b:c5:fc:2f:d2:
                    71:65:69:e3:a2:fa:b0:1e:dd:72:ce:86:2e:72:7d:
                    16:cf:ae:5b:e0:6e:f9:66:bd:b6:00:ec:3a:ff:ae:
                    38:af:8b:0f:08:17:95:43:6f:a6:e1:44:9c:2c:fb:
                    6b:1a:fd:22:0f:3a:ab:50:4f:9d:37:e8:aa:56:6f:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:86:A1:BB:4C:F1:11:39:9C:A8:0F:97:9F:66:09:A5:27:AC:C7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f8714ae-025c-392f-a10f-b499d73cea30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.2.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ac:c1:d0:57:c6:95:41:86:d6:99:1b:79:dd:27:70:ac:16:
         91:7e:d0:6f:23:98:01:8e:51:89:05:4f:d4:39:7f:fe:b2:24:
         94:a9:b6:7a:fe:8e:ad:c2:38:9a:c3:bc:3f:b6:a0:d3:38:e9:
         63:72:1d:54:9d:d7:21:35:43:01:a0:05:bd:15:a5:ab:88:66:
         56:9d:a4:8a:c3:33:41:c1:8a:c9:6b:25:7a:d6:1e:81:96:12:
         3a:2c:ae:3f:fb:b7:8f:16:d6:13:ba:0a:a1:89:75:47:98:05:
         f1:e2:69:ef:32:06:fe:5b:4d:bb:c5:35:25:a7:a5:88:c7:d1:
         6a:66:a2:d7:95:2c:b6:87:93:ed:ec:3a:3e:44:b6:96:09:5d:
         d9:d5:4f:74:41:2e:89:cf:45:6a:96:75:ee:0a:16:7a:7f:9d:
         5c:b6:4a:d4:43:7b:63:ee:c7:bb:98:f0:54:24:80:d0:0c:27:
         d9:7e:30:1a:b5:73:f9:7b:23:0d:d1:9d:6e:52:b8:11:67:a7:
         10:82:7e:fe:5b:fe:60:bb:94:4c:31:19:6f:c9:00:ff:d4:a7:
         52:b3:59:0f:fb:98:ee:e7:a9:20:1d:4a:70:58:c6:ed:9c:20:
         8c:29:a8:fb:c5:10:33:0e:7d:4e:73:70:f8:5e:fc:35:dd:37:
         9c:9e:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:52 2025 by rpki-client