Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bdf3194-0329-3a06-b19c-1bc707d8f036.roa
File:                     7bdf3194-0329-3a06-b19c-1bc707d8f036.roa (raw, json)
Hash identifier:          y6SFFfyICbUFNcQ0hh/BTmfa8T9Kj+vIFPsPx+vjdi4=
Subject key identifier:   D8:19:06:A3:50:88:C7:2D:ED:9C:88:F6:F3:8A:9E:E3:CE:98:C4:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F38D7E6A813C2C78DCE263E2C
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bdf3194-0329-3a06-b19c-1bc707d8f036.roa
Signing time:             Sun 11 Sep 2022 12:00:00 +0000
ROA not before:           Sun 11 Sep 2022 12:00:00 +0000
ROA not after:            Mon 17 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.31.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:38:d7:e6:a8:13:c2:c7:8d:ce:26:3e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 11 12:00:00 2022 GMT
            Not After : Oct 17 04:00:00 2022 GMT
        Subject: CN=8594ec2e-3d15-4ded-ad31-a55b11f036af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:04:2c:81:af:fa:36:62:25:d2:91:21:c6:
                    df:68:30:26:cf:29:71:25:68:04:38:ef:21:13:9c:
                    c5:75:51:fd:9d:12:f3:6c:60:7f:fc:c6:55:43:f9:
                    45:db:f1:8d:66:ff:ca:59:2a:86:d2:48:2c:68:6e:
                    6b:97:3a:ef:db:dc:5a:59:74:3f:6f:84:67:82:a3:
                    21:e6:f1:88:dd:76:a6:fe:8b:42:01:b5:90:3e:4b:
                    0c:5d:f0:65:ff:7c:9b:3e:b5:6d:db:7a:d1:5e:e0:
                    20:94:97:cd:9b:23:dd:53:aa:74:e4:05:95:a4:35:
                    3f:f4:35:08:c0:32:b2:66:ab:c0:74:14:71:6e:7e:
                    fc:6e:dd:74:1c:a9:a6:64:b9:ca:fe:f5:fd:9f:75:
                    d2:57:c5:17:02:29:28:9b:99:40:7b:65:bb:cf:09:
                    99:59:fd:7a:13:d1:fc:fa:5d:f4:a0:f2:6a:ef:52:
                    fd:e1:17:26:3d:e7:47:58:55:03:22:84:3b:b8:a7:
                    d0:88:fc:6b:e4:06:0e:c3:13:57:3e:62:6c:8b:44:
                    5d:ac:5f:b7:fd:2e:55:c4:a1:eb:9d:28:61:02:36:
                    d3:f1:8d:82:a3:67:2b:ca:7f:33:2b:e7:2b:7f:98:
                    52:15:ff:cc:bb:ea:87:c9:aa:ae:2e:5c:be:ac:3e:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:19:06:A3:50:88:C7:2D:ED:9C:88:F6:F3:8A:9E:E3:CE:98:C4:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bdf3194-0329-3a06-b19c-1bc707d8f036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:c2:a5:5f:c4:f4:7f:a1:f1:3c:9e:21:d2:9d:a3:3a:f4:
         38:09:88:7c:7d:81:94:92:8f:e7:d1:57:36:09:75:90:77:b2:
         d4:45:02:51:4b:04:c0:c5:e7:db:3c:d6:15:70:2a:8b:58:05:
         39:18:f9:bb:6d:df:f7:ae:88:72:b6:50:18:bd:9e:46:db:f1:
         3d:0d:be:32:c7:d7:1b:2e:6c:6c:bd:f6:ad:61:78:92:73:89:
         53:c0:c4:d8:66:6e:2f:d8:40:e9:a6:82:bf:e8:3f:63:19:fa:
         43:30:2d:0e:6b:0e:a6:35:aa:b3:7d:52:2e:9b:f7:4a:16:23:
         ad:57:10:d0:3c:6a:af:b8:b3:f6:af:80:8a:ce:47:86:fc:e0:
         3a:0d:4d:31:2f:28:7f:1a:4c:15:02:7c:a3:c3:de:36:97:03:
         a7:ed:0f:d1:db:40:c7:5f:01:d6:a7:73:3d:58:c5:9a:c5:26:
         b6:2a:02:6a:78:c2:24:f6:dd:f2:26:8c:e0:30:dd:47:2d:e5:
         fb:c4:d6:72:e6:ac:fd:62:4f:d0:16:0f:4f:16:e8:84:08:6a:
         d4:3c:5f:7b:c2:2e:f7:1f:eb:50:36:bb:90:a9:a4:76:f7:31:
         af:21:60:da:77:27:57:fc:7e:13:e4:c6:ff:70:99:dc:9c:d3:
         59:ab:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:20 2025 by rpki-client