Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a2f52-6393-30c3-b5e1-60849cf790d9.roa
File:                     788a2f52-6393-30c3-b5e1-60849cf790d9.roa (raw, json)
Hash identifier:          CpLWlctzYOeI09WfE+vbLGpcUIZEizgCnaKiExNQjxE=
Subject key identifier:   84:FD:88:2A:F8:5E:79:4B:B1:B6:32:80:E2:6C:0C:84:88:92:23:31
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD30E09F0AC77F9AA87A5100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a2f52-6393-30c3-b5e1-60849cf790d9.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        32.164.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:30:e0:9f:0a:c7:7f:9a:a8:7a:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=38275d65-f1b3-41fd-b72b-a275ffb4b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:07:5b:77:33:f4:1b:f0:9a:8a:c3:ee:96:
                    60:bc:db:2c:d0:ee:1a:01:2a:05:fa:16:47:ce:df:
                    7c:72:c5:87:1b:a3:79:3d:f5:8b:91:4c:86:d6:d9:
                    73:de:a7:f4:04:7c:60:d6:1e:ee:48:17:7b:08:01:
                    66:a0:da:34:02:f6:80:54:c3:ec:37:2a:f6:3d:d1:
                    b8:c6:0f:99:8b:b1:2b:66:9d:89:2f:d0:3f:8b:2a:
                    07:ac:95:f4:1b:c7:7b:d0:cb:93:4a:80:84:aa:6e:
                    bb:77:b9:70:e1:dd:54:09:78:89:91:0e:e6:62:e6:
                    9c:20:38:0d:b2:5a:d6:49:82:29:47:45:e0:2e:d3:
                    00:1e:c6:bf:c1:54:84:55:95:32:4f:50:d4:87:95:
                    31:bc:9a:9b:89:c2:fc:97:49:50:a0:d3:55:88:aa:
                    ff:eb:eb:44:54:b3:e9:62:55:14:2b:43:70:12:f1:
                    a3:ed:ae:8e:65:28:13:d0:e3:e0:e7:81:e1:56:c8:
                    8c:62:c2:95:90:3c:46:2a:d7:33:77:a9:07:a2:fb:
                    f0:c5:8b:17:e0:34:02:3b:0f:36:78:7e:df:db:f6:
                    ad:42:f4:6a:6b:a1:df:ec:f3:19:4a:12:e6:b8:3d:
                    e1:ef:5a:31:e3:e2:7c:53:93:57:db:1d:42:18:b4:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FD:88:2A:F8:5E:79:4B:B1:B6:32:80:E2:6C:0C:84:88:92:23:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a2f52-6393-30c3-b5e1-60849cf790d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.164.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:da:1d:65:bb:f3:fc:bb:6c:43:af:4c:89:26:e2:27:a2:11:
         bf:62:15:8e:e6:1a:1e:57:6a:b3:0b:63:ac:db:fb:6f:79:85:
         5a:40:82:c7:f1:84:61:65:77:ef:bf:b9:f2:35:7d:03:77:3e:
         87:f5:5c:9d:fa:cd:a2:c5:e4:d1:fe:24:57:5d:93:7f:96:f8:
         68:67:21:a7:7f:1d:36:7d:e5:b1:e0:8c:ac:84:47:bd:52:41:
         e4:bb:f5:71:c1:4f:4c:cb:9b:74:6e:80:9d:ff:74:32:d5:56:
         22:37:94:3e:88:9e:90:1f:d3:aa:a1:a6:0d:3a:42:ce:cd:f7:
         c9:30:8b:67:d3:79:09:c4:54:10:e0:2e:d3:26:86:0c:9a:11:
         38:4d:67:de:37:25:8e:8a:f8:a7:39:ee:a3:90:21:ca:b7:51:
         e4:ea:77:11:fa:1a:49:04:ea:45:db:24:20:4a:99:99:c0:fd:
         34:ce:ee:e4:9d:4d:60:14:fd:44:55:85:59:55:b9:fa:11:37:
         31:77:8c:9d:21:68:b3:93:22:82:d3:60:a5:c9:39:d9:c6:8f:
         9e:d1:e0:40:e6:0f:42:cb:0f:2a:ad:e6:23:bd:f0:34:3b:5c:
         ff:eb:c0:3d:2f:c9:4c:d5:72:8e:2d:86:08:20:72:73:22:60:
         b5:54:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:26 2025 by rpki-client