Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7276e9fd-22ca-3aa7-80e6-bc6d7a718502.roa
File:                     7276e9fd-22ca-3aa7-80e6-bc6d7a718502.roa (raw, json)
Hash identifier:          XzM0KwUYsOvR3r1hC7PQptwADRj7aiop6GAtEPBRgfU=
Subject key identifier:   A5:98:AC:58:DA:D9:99:13:49:6B:D3:9D:08:8F:CB:76:90:94:7E:48
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840388CAEF20FC0CEE263801208
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7276e9fd-22ca-3aa7-80e6-bc6d7a718502.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        151.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:38:8c:ae:f2:0f:c0:ce:e2:63:80:12:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=b759e10f-1960-4943-9a10-fb0fa2eac496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:6d:80:24:f4:68:27:e9:7c:2f:3c:67:55:
                    d7:74:37:ec:2f:34:13:c7:21:e7:79:69:09:5b:4a:
                    73:c8:86:c8:2b:da:8c:ff:32:bd:05:91:ed:a6:10:
                    cc:28:fc:39:58:a1:a4:05:89:c4:3d:fb:1e:cc:08:
                    b4:06:21:6b:07:98:11:c2:a4:c8:b4:08:d3:85:d3:
                    a4:1c:d6:8a:93:b9:d5:64:ce:05:7f:a3:a1:61:ba:
                    07:be:4e:2f:18:a8:a1:ee:14:17:97:b9:23:3c:a2:
                    9a:24:7f:c8:70:0e:d3:2a:85:0c:2c:15:03:2c:04:
                    7a:f4:f9:a4:80:11:0a:6a:a8:23:8b:34:1d:63:ea:
                    78:4e:cf:57:d8:f7:bd:2c:7c:42:d3:4d:f8:51:0e:
                    1a:d6:75:30:6b:88:c9:b8:99:49:3b:8a:0c:5d:55:
                    62:13:bf:20:dd:2d:c8:eb:cf:d9:7a:dd:9c:37:c3:
                    2d:a9:d2:ba:60:63:7f:9f:ad:3d:0b:66:0f:19:a5:
                    03:66:c1:bd:6b:a6:80:ed:dc:f7:fb:ed:cf:00:c3:
                    ea:00:87:ef:5e:79:af:24:65:31:8b:4a:b5:b2:d9:
                    01:a3:ae:4d:82:b1:7e:ae:b0:38:fb:e7:ae:69:20:
                    62:fd:76:92:d6:39:8e:5b:de:3e:70:95:39:d7:b2:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:AC:58:DA:D9:99:13:49:6B:D3:9D:08:8F:CB:76:90:94:7E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7276e9fd-22ca-3aa7-80e6-bc6d7a718502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d2:f3:d6:a2:cd:24:be:22:4e:87:8f:f8:7e:68:dd:9e:66:
         89:32:d2:05:24:f3:66:03:5e:4b:21:a3:97:ff:01:d0:cb:cd:
         f5:c1:c0:6b:35:04:0c:e4:a6:3c:e3:a5:c7:0d:5a:6f:11:65:
         6f:70:21:21:8a:a9:6c:6c:5d:d1:c8:af:6c:e0:42:70:ab:7c:
         a0:5f:98:f6:d4:eb:10:cc:d8:3c:89:08:00:76:d3:22:af:db:
         87:7f:98:4c:1d:90:8c:65:23:55:9a:23:62:ea:22:ef:4a:91:
         fd:95:d7:7b:cb:93:a1:42:8d:e6:b8:99:23:03:86:7b:1a:ff:
         f9:f1:dd:5a:5d:c5:6a:61:51:13:05:1a:23:88:95:07:ed:2b:
         cd:80:7a:19:2d:a3:0b:7c:e3:1e:fe:f6:3d:05:c6:71:5b:8c:
         31:ff:9d:38:81:16:76:39:f7:45:63:74:95:66:b5:99:30:79:
         4e:07:29:b5:89:ac:ae:4b:83:00:ce:26:ca:2a:7c:4f:23:b8:
         f5:f8:11:7a:ea:46:89:f5:14:dc:4a:a9:f2:b7:eb:88:fe:97:
         b4:f0:f1:26:cb:00:44:67:b7:96:70:44:ba:a9:09:a3:d9:41:
         c8:bc:da:c9:a0:7a:09:8b:01:db:fb:d9:0a:50:a4:c3:89:f8:
         1e:76:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:35 2025 by rpki-client