Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7194106f-6b84-3b09-827c-a7b4814a2682.roa
File:                     7194106f-6b84-3b09-827c-a7b4814a2682.roa (raw, json)
Hash identifier:          rMT/24rCcw8buRN6/AksKv/tAyb78oLVTkWgkRgn440=
Subject key identifier:   F0:F7:ED:D6:78:3C:C3:A9:47:9E:1D:DD:82:A1:E0:55:05:88:B9:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2FF1CF91EF2E90774CD70EF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7194106f-6b84-3b09-827c-a7b4814a2682.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        162.213.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:f1:cf:91:ef:2e:90:77:4c:d7:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=6d80326a-29ac-4445-b946-23efc052f1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:03:72:ef:89:27:9d:5a:4b:13:70:fd:4d:
                    e7:a9:42:64:da:92:62:3c:7f:ff:05:d7:cd:a3:5e:
                    65:a5:34:dc:7d:3f:28:a1:aa:03:35:6a:18:a3:7d:
                    b3:f6:96:29:5d:fd:49:8c:18:0d:b9:73:af:bd:90:
                    ab:41:d5:56:a7:45:03:ea:7c:87:52:a8:7d:8c:0d:
                    26:9f:3d:b7:09:4b:58:b3:4d:47:c4:71:05:97:9c:
                    39:f5:78:a9:c2:6a:43:d7:8d:b8:53:31:e8:67:3c:
                    0a:fe:21:f0:72:79:ed:b5:32:78:b9:51:09:dc:1d:
                    e2:99:62:b9:3f:66:9e:f3:2a:f3:16:d4:0b:6c:8d:
                    92:83:b4:50:24:dd:05:a2:ff:fc:63:fd:24:c1:16:
                    3e:0b:0a:e6:1b:c4:d4:6d:0c:b6:ba:a0:53:9c:4c:
                    e2:58:a1:f2:db:40:76:18:4a:2f:61:d4:7f:71:6f:
                    88:12:95:0f:f9:b9:a6:1a:53:e8:1f:0c:13:26:0c:
                    c4:6e:66:fa:31:36:a3:22:8a:a4:cd:58:51:7d:61:
                    a0:d7:22:51:af:f5:ac:bd:1f:7d:0c:45:c9:c3:9e:
                    13:fa:b0:f2:15:2d:fe:da:85:96:1b:b7:a9:71:2f:
                    d5:0a:d4:7c:46:f4:20:65:8b:a4:45:e6:d1:ab:b2:
                    2a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F7:ED:D6:78:3C:C3:A9:47:9E:1D:DD:82:A1:E0:55:05:88:B9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7194106f-6b84-3b09-827c-a7b4814a2682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:db:ae:db:60:5e:05:e5:ad:7c:a6:f8:d0:4a:74:cf:1b:
         8d:85:a1:bd:fe:b0:96:a6:84:e8:b4:20:e0:d1:27:1d:07:ad:
         1b:b6:8c:fa:27:3d:2e:d8:89:74:6c:f5:ca:21:8b:b7:31:50:
         a0:41:8f:8b:c7:24:ee:8a:9d:de:44:2a:e3:27:b4:ec:91:90:
         2c:ea:2e:95:0b:66:1e:a2:d6:ef:1d:fc:be:c5:5f:46:8a:47:
         16:da:b6:79:23:72:97:d5:74:ef:38:6e:98:e4:21:48:eb:26:
         68:02:79:b5:02:b4:94:e7:aa:b6:89:1e:ad:03:c8:b9:af:cc:
         20:4f:1b:20:0a:4c:76:e7:89:da:8b:c5:97:fc:ca:4d:73:93:
         72:69:76:e9:7b:5b:ce:86:30:38:6d:8e:02:a9:0b:a0:c7:5b:
         bf:53:5b:13:1b:4c:a8:fb:de:44:47:9d:c4:d7:63:a4:9a:45:
         c7:0f:8e:c3:80:c7:af:bf:4c:c9:40:8d:a6:d7:e2:df:42:4f:
         05:b1:5e:64:de:1e:ed:61:4d:79:23:9b:35:7d:79:35:41:a4:
         78:7a:e4:c9:2c:8d:c7:65:da:30:25:31:75:a7:90:eb:bd:4d:
         14:5f:57:3e:d9:35:a0:7d:e2:60:df:04:74:a6:d5:27:66:93:
         9e:46:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:35 2025 by rpki-client