Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d5715c-e7c1-388e-83a0-bc77df3d42b5.roa
File:                     80d5715c-e7c1-388e-83a0-bc77df3d42b5.roa (raw, json)
Hash identifier:          TSwXsx5vI8ZktQC6zsYMbnNtN9rPFl3X8ck90Kgdw6I=
Subject key identifier:   5D:D3:B8:8E:BA:B8:59:65:C3:59:E2:66:AD:6A:C9:61:A8:F8:CE:70
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D786502C47479EDE6560BD340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d5715c-e7c1-388e-83a0-bc77df3d42b5.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Tue 10 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:78:65:02:c4:74:79:ed:e6:56:0b:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : May 10 04:00:00 2022 GMT
        Subject: CN=a92cd716-a947-432e-8b4f-daa3fb348a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:00:3c:81:46:60:0b:ea:4c:1c:9e:10:43:
                    65:42:40:ed:c8:7b:e3:ed:84:96:83:cf:a9:62:0c:
                    88:27:5c:a2:e6:1d:b9:61:66:11:a8:d0:c8:e0:9e:
                    d7:39:f7:5f:1c:4b:3d:bc:a2:f7:52:f1:66:5c:c9:
                    2c:a9:41:46:6d:d3:1f:37:6c:1a:8f:44:70:5b:af:
                    c6:5f:08:e1:03:40:b0:22:dc:32:16:4a:1f:14:75:
                    cd:61:07:0b:7c:17:4a:ef:c5:32:7e:4a:7c:e2:35:
                    da:06:d8:72:88:2d:b8:19:ed:e9:cf:16:ab:76:85:
                    91:71:b6:6a:e4:a8:a4:3c:56:44:4e:56:5d:11:69:
                    78:2d:f4:b1:e2:e0:3b:30:76:ec:47:38:bb:d0:0c:
                    8e:e3:d7:f9:ae:64:4b:0a:e2:8c:e4:96:6f:55:05:
                    4d:91:97:8f:71:e1:97:74:6e:de:a9:cb:81:6f:e8:
                    31:5b:ee:a5:48:c7:3f:18:ce:0b:8b:ff:e4:51:50:
                    1f:e1:1d:2a:e7:20:34:c8:7a:95:1a:00:71:d9:e0:
                    d7:50:e5:05:42:ae:ba:42:d4:9a:ea:ea:4a:18:49:
                    0a:fc:ea:ff:2f:29:38:cb:08:48:13:63:c0:31:7f:
                    c8:9a:c3:33:92:53:85:56:ac:bd:b6:20:e8:e8:f7:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:B8:8E:BA:B8:59:65:C3:59:E2:66:AD:6A:C9:61:A8:F8:CE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d5715c-e7c1-388e-83a0-bc77df3d42b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:d9:57:77:ac:3a:54:bc:b9:4f:77:fd:51:32:41:94:59:
         35:27:c8:34:2a:56:3a:55:61:b2:7f:95:f0:aa:6b:81:cb:46:
         6e:ac:6a:db:18:ad:fd:3a:35:82:61:d1:7d:d8:5f:58:df:e0:
         be:cb:68:87:d1:28:74:05:f6:0d:68:71:fa:5d:84:99:d7:4e:
         4a:79:15:c5:9c:e9:7a:72:f5:c8:7d:8e:ad:8f:6f:38:df:dd:
         d8:e8:84:1a:a7:cb:15:51:d2:01:cb:b5:48:b3:b3:c3:95:dc:
         f1:3d:63:2d:96:be:44:ae:6f:ab:cc:aa:5c:24:9c:54:a7:a9:
         e7:89:26:4e:f6:73:49:c5:56:d9:54:66:2d:48:79:4e:2f:84:
         7a:73:f6:dd:9d:21:ca:df:b2:b4:ec:5f:59:43:69:30:76:cc:
         e2:aa:7d:49:dd:76:1d:3b:c4:67:32:4d:bd:02:69:8c:cd:52:
         c8:8d:93:98:2c:1a:f6:12:04:db:d6:dd:f4:c0:f4:b4:77:e0:
         f8:5d:aa:9f:3d:6d:bb:b1:ef:a3:25:ef:7d:17:8b:c0:11:2d:
         6c:56:6d:ac:59:5d:25:22:0b:ee:1b:50:ab:1c:93:1e:00:90:
         61:cf:e2:fa:7b:6d:d2:87:1f:2d:c2:b1:cd:79:d3:e0:b4:8c:
         06:19:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:16:04 2025 by rpki-client