Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fa3ff8e-90d5-3b1e-ad5d-4839ce95af2b.roa
File:                     7fa3ff8e-90d5-3b1e-ad5d-4839ce95af2b.roa (raw, json)
Hash identifier:          DAv+oSiY1Clq6fFEBPgpFM2Py46Hn1/T2zGsqM5Uitk=
Subject key identifier:   5A:C9:6A:A0:DA:51:A3:98:6D:60:57:92:49:83:51:D2:F4:A7:6B:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C9677AF35A7F8227E2A131280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fa3ff8e-90d5-3b1e-ad5d-4839ce95af2b.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        71.141.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:77:af:35:a7:f8:22:7e:2a:13:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=75881a8a-d5dd-42e0-babb-e1c58a9578ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:a6:8b:b2:2b:f9:62:6f:35:d2:31:97:9f:
                    38:9a:a8:cc:9c:1a:8c:cd:f9:af:27:74:cf:de:5d:
                    ba:b6:a4:11:eb:50:27:53:7b:ba:e7:6e:21:79:65:
                    25:ac:bc:8d:3d:5f:a4:45:98:01:49:bd:2d:6e:9a:
                    9c:49:95:d4:f9:35:29:13:f9:ea:3e:a0:14:b8:2b:
                    70:18:b6:f7:1c:9c:34:cd:10:d4:01:13:c2:94:7a:
                    ec:49:26:b6:17:3e:28:2c:9a:a3:99:d3:31:b0:f6:
                    dc:aa:ce:67:95:e0:5a:73:e6:6b:66:4a:a1:78:58:
                    81:9a:18:d7:ee:4a:1b:3a:df:f2:9b:7e:12:ec:98:
                    ad:75:dd:b8:db:66:ee:95:65:4d:2e:55:8d:fb:4d:
                    e8:ec:ec:af:25:04:52:65:ed:49:76:9e:8f:3b:c9:
                    2b:2f:e5:9f:bd:2e:0f:3f:31:ce:f6:db:da:bc:10:
                    56:b6:f4:44:ac:ac:3e:3a:9d:ee:2f:91:d7:7c:b9:
                    f2:a3:1b:df:93:45:80:6d:78:89:1d:c5:03:3d:35:
                    b9:d1:92:7c:10:f1:61:77:dc:8d:8a:e3:92:99:b0:
                    3e:b1:4b:77:8e:86:44:0e:a9:71:56:a1:69:77:3c:
                    e4:e7:8d:ec:20:92:3d:1b:37:bb:94:2c:e2:e5:9d:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C9:6A:A0:DA:51:A3:98:6D:60:57:92:49:83:51:D2:F4:A7:6B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fa3ff8e-90d5-3b1e-ad5d-4839ce95af2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.141.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:78:2b:fc:1a:8b:e0:ac:8a:52:21:6a:76:86:db:c0:a2:52:
         b2:68:dc:c5:5a:3c:72:a8:09:bc:68:b6:62:9b:ca:3b:47:2b:
         e7:43:a2:21:c8:bd:27:c2:15:cd:7d:82:3c:f1:c8:6a:dd:f7:
         fa:19:a9:c3:59:52:61:ef:5e:e3:1d:6c:03:c4:fb:68:19:a2:
         f0:17:da:03:6b:cb:97:26:d6:b2:e6:7c:7e:84:84:5f:b6:79:
         5a:68:02:99:7a:98:e8:1b:94:ad:dd:b9:2a:45:87:1c:a9:20:
         b6:12:25:2e:fe:47:e7:4e:d0:55:da:52:d0:19:40:37:94:f0:
         50:48:73:15:0d:72:88:08:8a:ff:7f:91:15:f3:08:d5:47:24:
         81:6d:50:38:cf:fa:16:5e:86:38:84:de:2c:0a:85:4a:63:08:
         0e:c5:2b:e9:50:4a:18:c3:c4:c5:62:81:67:e5:78:a6:da:2e:
         a3:ba:06:20:09:ad:29:d1:08:ff:52:d2:3d:b4:e8:39:3b:e4:
         80:39:46:8b:7c:df:fe:4d:3a:06:3a:78:89:a0:3b:f9:7c:ec:
         c7:17:67:7c:99:4a:37:4b:28:38:e2:0b:cf:6c:37:eb:3a:d0:
         da:8c:dc:f3:a4:df:20:51:6e:2b:3b:56:40:db:64:d0:ba:ab:
         42:c0:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:20 2025 by rpki-client