Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70330b18-302e-3739-9784-7f29aa02d2ec.roa
File:                     70330b18-302e-3739-9784-7f29aa02d2ec.roa (raw, json)
Hash identifier:          Fgpd3MqMSkJz3xOXsrwh1i0/KkARsTednqfAGUK9s7Y=
Subject key identifier:   8F:E6:8B:81:6C:F8:ED:6F:D7:96:6E:08:00:15:5F:27:15:46:04:16
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBA66A31A4BD4EA0F8DEFC180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70330b18-302e-3739-9784-7f29aa02d2ec.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:66:a3:1a:4b:d4:ea:0f:8d:ef:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=f0743df2-aa2c-4a95-8f45-d58f6b8ffe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:ed:df:2e:05:37:dd:52:55:3b:07:fc:0e:
                    83:62:86:0a:7f:f4:52:88:d5:84:ed:6a:84:53:2d:
                    42:9a:37:a3:2e:da:5a:81:83:d1:ae:cd:5d:fd:51:
                    55:83:38:4f:77:d6:bf:1e:03:dd:ab:bc:19:b7:74:
                    b7:ea:b1:76:d5:5b:7c:70:cf:16:6d:ca:c1:a0:23:
                    68:de:79:09:83:f5:4b:55:a7:f5:d1:a7:a7:34:f4:
                    5a:53:ea:ab:a0:55:ba:84:89:dd:8a:ea:db:08:ea:
                    96:5c:4b:ca:f0:44:74:b2:54:dd:7d:2a:a4:70:a3:
                    ff:e3:5b:d5:7f:4d:32:f3:0f:2a:8e:5b:00:65:7d:
                    43:87:39:19:2a:68:dc:72:92:06:86:8e:db:67:3c:
                    47:63:ec:87:16:3e:63:56:ae:ad:a7:2a:ad:f6:5b:
                    7c:d6:2e:07:1b:cb:87:ae:df:02:51:11:4b:ef:82:
                    70:fa:8f:29:73:14:72:09:ee:91:4a:d9:5a:f3:40:
                    ef:13:04:26:cd:d4:01:8b:b5:b6:03:30:11:96:1e:
                    12:88:9e:91:7b:a6:c3:90:86:d0:bc:b3:13:c6:13:
                    97:76:38:6a:66:82:89:10:63:22:42:84:0f:2f:0a:
                    b6:ef:a4:1d:2f:ae:c5:72:09:ff:3a:21:fc:dd:3b:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E6:8B:81:6C:F8:ED:6F:D7:96:6E:08:00:15:5F:27:15:46:04:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70330b18-302e-3739-9784-7f29aa02d2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:2c:6b:80:82:a4:d1:13:98:45:80:d3:c6:55:93:fa:bd:
         a7:f4:da:f5:47:d4:1e:3c:f0:1b:4c:5a:64:20:22:27:5a:ac:
         13:c4:11:ca:6b:bd:40:55:e5:99:5f:41:31:9e:16:e7:74:ae:
         c8:2b:bc:19:07:57:a4:d9:57:55:f5:96:56:ce:8c:14:ae:1f:
         19:17:90:52:65:eb:16:86:46:ec:7f:9c:c0:a7:68:cd:af:49:
         0c:b0:85:6d:b5:ed:fe:0e:a8:3e:72:ec:d3:e9:ac:41:8b:5a:
         df:c3:9f:56:0b:cc:36:bf:ab:c3:49:54:53:c7:b4:1f:2a:ac:
         5f:bf:06:ff:03:53:e2:00:35:ac:7b:3d:b8:ef:e6:06:23:dc:
         ff:98:04:b8:3e:1d:1d:29:f2:ab:11:d4:70:7e:cd:1c:61:f0:
         34:4f:b8:9f:94:56:e3:dc:f8:cf:c3:d8:5b:eb:44:58:d6:b5:
         2d:2d:0c:e7:09:e4:0d:ba:d0:ff:32:07:41:af:19:0a:71:3e:
         40:e7:7d:e2:35:25:ed:60:4a:e3:05:ab:3c:2c:f2:03:bb:88:
         db:44:b3:87:b8:de:64:0b:2e:74:c0:c4:2b:a1:b4:5d:f5:e7:
         40:1e:ce:ec:ee:cb:a2:33:cb:3f:44:fd:c1:62:a2:1f:40:ab:
         29:14:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:00:57 2025 by rpki-client