Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8183ffab-f756-366c-a217-b93ab6e2fe61.roa
File:                     8183ffab-f756-366c-a217-b93ab6e2fe61.roa (raw, json)
Hash identifier:          8Fn1ZYx03HnvtVay17H9zYrT2TBpX6+ecCjEQ+dizBA=
Subject key identifier:   5A:7B:62:9C:4E:7E:71:8F:AE:6E:CC:1C:BA:42:A6:AD:F2:3A:EC:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C54BBBCF38A5A404A8CAF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8183ffab-f756-366c-a217-b93ab6e2fe61.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        165.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:54:bb:bc:f3:8a:5a:40:4a:8c:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=d9bf842c-d835-41e2-a339-8fd239aae715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:36:f1:11:53:a7:e8:55:d2:bc:ed:6d:4c:
                    f3:28:65:76:9a:db:da:2d:bf:3f:fa:12:a6:dc:4f:
                    20:ca:2e:53:1e:34:4c:e0:1c:8c:2a:1e:25:75:89:
                    04:2e:a9:8b:80:2d:4b:e7:c8:7e:90:f4:27:cc:07:
                    71:83:a2:b1:99:6a:33:7e:3e:8c:42:2c:9a:fd:43:
                    55:26:ba:8a:d3:af:38:e9:59:da:c0:f1:47:d7:33:
                    ff:5a:70:56:38:da:24:f8:dd:2a:51:72:5a:05:cb:
                    d1:fd:17:3d:d5:1a:87:4a:20:f7:c5:be:93:42:fc:
                    d5:78:c8:6f:62:cc:82:f0:86:0c:21:c4:1b:23:05:
                    d3:8d:38:65:d0:45:1f:16:ed:43:46:26:b7:d9:df:
                    bb:1a:06:96:0a:db:cb:b4:ba:7c:a5:d9:e2:dc:98:
                    d5:97:81:21:29:8e:b0:57:27:36:56:6c:54:95:7c:
                    a7:b5:95:2b:08:c5:31:49:07:00:a5:69:a8:51:11:
                    6d:ce:d0:c9:9d:16:17:7b:66:12:58:91:a9:86:b1:
                    79:43:8e:b9:ea:63:6c:c6:71:23:78:0a:c9:65:11:
                    db:3d:cb:b7:27:e4:26:cc:32:21:4c:5b:6b:fe:fd:
                    a8:90:29:40:bf:fd:61:05:25:80:4c:ac:ba:00:40:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:62:9C:4E:7E:71:8F:AE:6E:CC:1C:BA:42:A6:AD:F2:3A:EC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8183ffab-f756-366c-a217-b93ab6e2fe61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:08:ec:4c:5c:51:55:80:7c:f2:af:72:7f:b5:e9:46:db:
         07:b3:bd:c4:cd:43:4a:45:a8:a1:e8:97:5d:71:01:a0:35:c1:
         8a:aa:9c:79:ca:26:aa:d2:3f:67:4a:59:e7:d1:d9:be:b7:ec:
         32:10:42:62:9f:7a:32:36:00:ce:ab:0a:4f:34:0d:58:1b:cd:
         8a:3f:79:72:0c:03:f3:49:51:01:3a:67:eb:b1:03:6a:27:a2:
         76:fe:7c:d7:0b:f4:1a:30:8e:b1:e9:13:68:d2:65:a7:37:fb:
         e3:21:dc:7b:7c:2e:e3:46:e3:42:23:e0:9a:87:db:cd:f8:76:
         e0:76:b3:76:be:ea:1b:c7:93:7e:8f:02:d5:b7:ee:fe:44:04:
         ab:5f:06:91:ed:ae:c3:f7:76:fc:94:95:d4:23:3d:49:e4:8d:
         81:12:49:b9:bb:8c:9c:8d:79:ab:a8:5b:d2:f8:b8:5d:de:c6:
         4e:79:21:12:ad:d6:ce:a8:f0:c8:3f:dd:31:29:6c:68:65:16:
         61:4e:51:14:4f:a4:07:79:31:d3:ad:83:6a:8d:68:e1:8e:d4:
         05:64:74:bf:29:a4:32:ed:43:c0:0b:75:ed:4b:b4:9f:79:7f:
         50:6a:79:c1:0d:bc:b4:7d:85:ef:b5:0e:18:a5:bd:38:18:c6:
         fe:36:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client