Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd051dd-5bf9-3d03-923b-e2e12fbb1c2d.roa
File:                     7bd051dd-5bf9-3d03-923b-e2e12fbb1c2d.roa (raw, json)
Hash identifier:          rasBHmR5/iqslPzyr/0AnDulhgGpXbhnypAJPcqLvew=
Subject key identifier:   47:FF:21:4D:C3:26:30:22:2F:80:F0:6D:65:54:64:2E:9F:3D:45:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403507D19D025635EB44349200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd051dd-5bf9-3d03-923b-e2e12fbb1c2d.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        168.203.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:07:d1:9d:02:56:35:eb:44:34:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=cb9558db-7a06-48ee-8160-ecf77dff2dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:93:3c:92:14:13:d9:23:ea:eb:bc:ca:cb:
                    e0:96:36:ef:4f:b3:c7:cf:fe:85:7d:39:19:fe:f5:
                    1f:64:16:6f:00:5b:74:99:59:4e:c5:36:34:b4:2f:
                    1f:f4:19:06:38:cf:46:1c:3a:fc:9f:24:06:17:ad:
                    fd:dd:29:a1:e3:f4:a5:d2:1d:fc:ff:71:14:2b:52:
                    7c:53:7e:39:eb:f1:a1:ce:b1:ea:f6:ed:f0:74:e9:
                    20:f5:c9:c4:65:2a:3c:8e:f1:80:03:e8:1e:f8:84:
                    03:29:73:dd:9c:6f:f4:64:74:86:08:46:a4:42:70:
                    e3:8b:28:ef:3f:4d:b1:5b:27:9f:aa:44:e4:bc:05:
                    05:51:74:96:8c:cd:68:55:29:2b:46:72:02:ab:6f:
                    ce:5c:16:c0:ce:88:8d:22:db:32:31:60:5e:e9:97:
                    a2:71:79:57:3c:f9:1e:d7:e6:7e:70:8b:90:85:28:
                    40:f9:ec:18:2c:ad:eb:d6:46:68:71:05:9b:35:41:
                    e4:25:a3:72:8f:ca:4a:36:d1:8e:99:18:a9:80:8c:
                    9b:25:d3:a6:93:6c:88:a5:db:d3:e4:15:47:a4:6a:
                    d6:b4:44:5d:6a:42:c8:e3:37:db:e9:6c:b3:4e:c7:
                    33:fa:33:e2:99:b2:0f:d9:47:66:de:37:bc:2b:a2:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FF:21:4D:C3:26:30:22:2F:80:F0:6D:65:54:64:2E:9F:3D:45:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd051dd-5bf9-3d03-923b-e2e12fbb1c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:e0:f1:9f:33:68:52:e2:23:d3:95:19:c2:f4:4b:28:59:
         e3:3d:bf:8b:0b:03:57:20:29:fc:42:e4:14:66:de:b1:f4:7e:
         21:fe:d4:e8:74:e0:ea:cd:44:40:e8:80:1d:33:1d:3f:69:b4:
         87:27:29:be:74:a4:d4:1e:78:f0:e2:b7:1f:57:cf:46:08:e0:
         0b:fe:c6:65:46:52:92:5c:4b:7b:32:c1:d9:97:ec:7a:6f:f2:
         44:d7:1b:e5:f1:d4:5a:01:bc:db:78:cb:b8:2c:dd:36:ff:1b:
         69:29:b0:71:c2:73:ae:53:65:30:d7:b5:cf:dd:d0:39:2e:05:
         f6:0b:36:7e:fe:7c:cc:f7:c7:96:b7:b8:32:f9:a9:58:cc:c1:
         19:65:c9:83:bd:97:2b:0d:5c:5a:1b:c7:e5:d1:d4:28:7e:76:
         f6:14:46:25:36:c7:df:f9:11:17:33:6a:51:e0:51:26:6e:dc:
         06:bd:10:5d:bb:29:18:58:18:b0:af:eb:90:9e:5d:2c:13:15:
         8e:1c:67:58:c1:68:b5:c3:1f:9e:0d:19:63:2d:53:1b:56:75:
         57:36:a6:80:db:77:ea:fe:1b:b0:16:07:db:62:5c:ee:5b:e3:
         68:cb:f6:e8:84:c8:f4:dd:f7:51:90:67:1a:3a:53:ef:b7:84:
         32:89:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:18 2025 by rpki-client