Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8459fdfc-92a7-3083-8650-af25339b70cc.roa
File:                     8459fdfc-92a7-3083-8650-af25339b70cc.roa (raw, json)
Hash identifier:          gXFDpZDuED2Zps+p0O6ED9+IGfJZn9n9KebsMmAfhyY=
Subject key identifier:   6E:2C:86:64:FD:9D:3E:08:D0:34:6D:85:8B:B2:0E:FE:B5:44:DB:B0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D813C3864A4EA1117BB416700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8459fdfc-92a7-3083-8650-af25339b70cc.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.252.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:3c:38:64:a4:ea:11:17:bb:41:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=2a32dc65-48ec-4d51-8914-097126a8af7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:53:83:95:56:91:23:30:cf:94:0b:8e:8f:
                    7b:db:e3:3b:60:1b:48:e9:36:c4:eb:6e:95:d7:36:
                    cf:1d:06:10:8f:02:56:97:28:0a:e9:a0:58:93:b7:
                    ff:d1:56:3e:36:c2:33:08:b6:0f:69:d7:78:7b:3c:
                    3d:0e:ee:c4:e3:73:1f:08:37:af:81:13:14:cb:3e:
                    40:bd:a3:5b:f1:8d:f2:17:96:cd:25:fc:f6:ea:37:
                    be:50:ea:e6:3c:d1:ac:1e:2a:06:42:aa:51:7d:14:
                    39:87:52:79:36:34:c5:cf:50:12:97:62:50:73:07:
                    2d:b0:8b:7e:20:9b:45:34:d0:96:6a:8b:35:17:e6:
                    eb:9f:ff:7b:26:f0:80:2e:0b:c1:63:78:af:30:b1:
                    45:1a:d9:82:53:e1:91:c1:77:0d:c5:3f:2e:c5:5d:
                    6b:29:87:bf:54:49:17:1e:56:a8:cc:01:53:14:d0:
                    87:1f:e3:63:cc:be:16:0a:ec:1d:33:4f:21:55:0a:
                    da:f9:2d:69:ca:4a:2b:95:a1:d0:30:29:35:5f:20:
                    bc:20:42:af:58:f8:f0:a0:7a:52:dd:1c:6a:8f:3d:
                    e1:ad:0f:72:3c:3f:03:fe:4d:be:12:62:dc:0e:f3:
                    5a:34:f4:94:63:9e:8d:5c:e7:48:2b:be:5b:ea:98:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2C:86:64:FD:9D:3E:08:D0:34:6D:85:8B:B2:0E:FE:B5:44:DB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8459fdfc-92a7-3083-8650-af25339b70cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.252.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:51:03:e6:58:bd:8d:cd:64:77:e3:40:56:0a:7e:cf:be:dc:
         b0:6a:41:74:22:9c:bd:88:dd:c9:69:a0:ff:ee:3b:28:be:26:
         42:e5:58:ec:d8:c6:b8:8f:8f:87:1e:41:47:e5:de:ce:1d:10:
         d1:fe:bb:3f:74:2b:89:c8:47:1f:98:85:4f:d4:7e:59:39:f2:
         d3:3e:45:d8:36:2e:2e:7c:41:fe:4c:60:62:0b:cd:9c:3a:5d:
         80:54:d3:ab:d7:6e:78:d0:15:bf:b7:77:b4:86:6f:4b:28:08:
         39:e8:6e:95:03:c7:f9:23:53:fe:53:81:09:eb:d8:29:18:3d:
         1c:72:3f:8d:01:94:d6:a4:1f:35:12:83:15:3a:80:9b:aa:ba:
         1d:ab:4c:7c:67:b0:33:1c:27:cc:71:2b:86:2d:b1:2b:48:cf:
         44:d4:85:3c:f3:b5:a9:a3:ca:b1:e6:ef:ab:ac:3d:ae:93:e2:
         19:75:70:11:8f:4c:f1:48:ce:a5:b3:c2:7c:fc:96:18:f1:d2:
         7c:9a:2f:05:1d:d9:6a:4d:91:dd:69:36:a2:89:5a:83:38:50:
         fd:25:1b:71:60:8e:ed:ed:bf:32:fb:60:02:02:cf:76:bd:c3:
         ac:a1:38:8f:93:78:5e:d5:98:95:e9:23:55:bd:78:58:54:e4:
         ea:c4:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:23 2025 by rpki-client