Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78f1858a-622f-3f77-a86c-ff0f22b73167.roa
File:                     78f1858a-622f-3f77-a86c-ff0f22b73167.roa (raw, json)
Hash identifier:          MJp4uH37SwSEHoJnkrvPiavMSiVk9HVh/6B69RMnxyM=
Subject key identifier:   D8:F9:CE:FC:1D:09:0C:F9:FB:AE:ED:3E:51:27:25:72:D3:F1:B3:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C7C77C40A068ACE53E5E05DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78f1858a-622f-3f77-a86c-ff0f22b73167.roa
Signing time:             Wed 05 Jan 2022 05:00:00 +0000
ROA not before:           Wed 05 Jan 2022 05:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        199.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:7c:77:c4:0a:06:8a:ce:53:e5:e0:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 05:00:00 2022 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=d9e52da8-9a09-439e-ae62-44f469398c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:6b:9c:e4:71:6d:8b:c3:18:df:fa:81:f3:
                    39:6d:c9:ff:27:b4:d8:0c:ec:bb:b7:c0:fc:96:40:
                    51:64:81:5b:b7:97:42:88:c8:42:a9:01:da:4e:16:
                    15:33:4e:3f:67:2f:64:52:ba:1c:90:e6:95:e7:47:
                    ab:86:cc:cb:2c:4b:9e:f1:0d:17:c0:9d:f8:98:6a:
                    05:56:7d:48:33:35:4f:79:a0:2e:10:c5:4b:2a:91:
                    ce:54:f8:af:db:6b:76:19:f1:38:30:4d:7a:74:34:
                    c2:c8:32:f7:e7:aa:41:24:02:9a:ab:bc:52:c0:d1:
                    32:38:12:13:eb:ae:8d:2c:80:2a:bc:2c:85:94:9c:
                    15:dd:6d:4e:93:89:a3:ad:ee:c4:e5:e6:f6:16:88:
                    f3:7b:d7:3d:a4:58:7f:e6:1b:ee:6e:df:7e:34:5c:
                    f9:0e:ec:5b:11:cf:2e:f0:2a:d2:d9:d1:1a:33:01:
                    9d:fb:95:01:2d:3a:22:0d:9b:a2:30:54:4e:55:3b:
                    7f:e4:50:a2:1f:2b:61:11:2e:fd:d7:1f:07:08:61:
                    20:cf:f9:2e:54:b6:a6:a6:b8:a9:d4:e8:6b:33:5c:
                    0e:a6:ab:7c:b0:54:0c:cf:d7:43:f9:89:c4:15:5f:
                    af:a9:f2:21:fc:44:3f:7c:13:66:a2:9c:b9:f8:3e:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:CE:FC:1D:09:0C:F9:FB:AE:ED:3E:51:27:25:72:D3:F1:B3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78f1858a-622f-3f77-a86c-ff0f22b73167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:4b:c5:fc:07:fd:08:59:3f:0b:06:02:e0:3d:33:b3:6d:
         f9:18:46:fd:94:09:66:41:03:4c:5b:b1:74:95:03:29:79:39:
         e1:6f:b7:23:96:3a:40:06:88:19:36:5c:8c:9b:7a:1c:60:a2:
         fa:ae:3a:65:b0:9a:a2:84:c3:a6:ce:80:d5:c4:96:f6:79:7e:
         11:2c:6c:96:59:58:1f:db:82:6f:7f:70:f5:e5:8c:41:1e:01:
         1e:ec:84:21:4f:4b:b2:73:ee:47:c8:3c:33:f2:f8:18:4a:fb:
         b7:94:34:71:a2:c7:ba:3d:7e:7c:e8:98:16:ec:44:ec:b3:71:
         8e:bc:4e:a0:99:5a:1a:01:2a:e0:76:a6:21:89:90:26:c3:71:
         fb:a0:6f:5c:b2:54:65:a4:fd:6d:12:87:8b:6c:c0:48:dc:d4:
         08:d6:e5:46:91:e3:8e:ac:c2:e0:ed:1d:25:4e:af:ed:20:64:
         8d:47:e8:91:8c:b8:0e:1c:f2:e1:f3:07:74:82:2e:54:a5:25:
         e4:6e:f8:b9:62:2c:15:0c:fb:ab:bb:a1:4b:d8:a9:23:b7:2c:
         48:a5:0d:89:8d:b3:8d:e4:8c:18:e9:1a:06:b6:12:04:2a:d5:
         13:72:6b:8e:f9:55:d2:95:c5:db:2f:59:3f:60:a1:af:24:f6:
         d1:ce:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:03 2025 by rpki-client