Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72e6f6ec-6133-3e9b-adaf-534ba1b1acd6.roa
File:                     72e6f6ec-6133-3e9b-adaf-534ba1b1acd6.roa (raw, json)
Hash identifier:          4TpfudCwAYrV3Pg1f+ZCkpIp6k1844ClOo+Ssvv+ZI4=
Subject key identifier:   8C:F6:C1:37:D0:CB:3D:A7:C2:7A:9D:8B:4C:1B:7F:91:11:E2:A0:56
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F849632334929C83CACB380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72e6f6ec-6133-3e9b-adaf-534ba1b1acd6.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        204.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:84:96:32:33:49:29:c8:3c:ac:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=60baba31-267e-4c47-a7ac-6157d05286c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:d5:e0:1b:09:f5:4f:f0:38:6a:ec:2d:be:
                    d8:1b:f8:33:62:1d:ac:07:b0:b9:b7:3f:73:06:b3:
                    34:09:dc:90:43:c3:9f:39:ad:fa:2a:34:35:4c:4c:
                    39:44:a3:9b:45:7a:c4:7b:f8:80:27:2b:64:44:94:
                    32:b1:51:ba:4a:8f:dd:39:c1:b6:16:b0:49:13:dc:
                    a7:c1:e9:a2:c4:82:51:a6:30:0c:a5:c6:0f:09:58:
                    13:4d:31:d2:53:d0:15:f4:eb:04:ec:88:72:1a:7a:
                    b2:44:8c:0c:b7:d8:f7:91:73:42:d3:cb:e6:b5:ed:
                    20:21:4d:73:ad:5b:40:3c:83:52:f9:cc:92:71:b0:
                    1b:43:6d:97:8d:50:e1:d5:9a:5a:a6:b3:45:61:4e:
                    78:37:53:3d:65:5b:22:cb:bc:d8:1a:cd:ec:e0:5c:
                    ba:45:10:95:8b:19:d0:22:72:92:74:ce:2b:ab:9b:
                    92:2a:6d:ae:94:25:a3:4e:a0:05:0d:bc:55:5e:f9:
                    1d:a0:9b:9e:78:55:34:a8:c2:ee:a3:43:f0:ed:8d:
                    31:f1:07:c8:9c:0e:b3:d3:c9:30:67:7d:d1:5c:a1:
                    d9:e7:5d:61:c2:08:70:85:bd:5f:71:97:c3:86:c5:
                    80:e7:34:c6:e6:40:ae:e8:f7:21:9e:cc:b7:d8:49:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:C1:37:D0:CB:3D:A7:C2:7A:9D:8B:4C:1B:7F:91:11:E2:A0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72e6f6ec-6133-3e9b-adaf-534ba1b1acd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:09:72:d4:d1:f9:cb:1e:56:51:55:64:08:68:db:d0:47:42:
         3c:ad:28:72:04:bf:83:46:1a:07:2b:f9:d9:a9:60:38:c1:b4:
         09:e7:41:fc:fa:1d:47:d0:ec:be:7a:c4:6e:64:b9:ae:42:33:
         c8:1c:4b:06:32:c3:47:cd:5c:32:3c:78:b7:3e:4d:5a:75:d3:
         92:dc:e1:e8:87:a4:5a:56:da:54:71:df:b9:02:3d:73:95:a1:
         ba:4e:07:b8:11:05:63:85:c6:7a:fd:4b:97:cb:da:c3:af:7a:
         57:aa:11:18:d8:3c:c6:03:b7:30:5c:08:56:55:ea:f0:5b:f6:
         04:0a:18:8d:f0:f1:0e:e6:33:cc:d0:63:b3:d2:76:c6:f2:ea:
         0e:ab:d0:ca:e3:8e:25:1a:3d:3e:62:c4:2f:7e:1e:af:64:a0:
         89:c4:c5:8a:e7:98:53:4c:c0:e5:b0:93:2f:4f:49:7c:02:52:
         54:71:4e:eb:b2:28:d0:36:19:e1:51:33:64:a6:6a:23:bd:d8:
         aa:21:c8:4a:b4:c5:95:ae:62:4f:d1:3d:21:81:e8:e1:14:ea:
         a8:8b:79:ae:59:8b:6b:a9:91:48:e0:18:86:0d:b0:b0:e1:22:
         2d:b9:25:5d:dc:47:0f:07:24:08:42:c4:db:48:9c:e7:81:b2:
         63:6d:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:54 2025 by rpki-client