Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8481f689-27c4-38df-8cd0-a538f1809692.roa
File:                     8481f689-27c4-38df-8cd0-a538f1809692.roa (raw, json)
Hash identifier:          VLbgk6PcIynoCu6ZYd7TqWmZ5eoUx1zos62SbeuZB5g=
Subject key identifier:   E1:69:D5:A5:2E:12:EF:51:AA:0F:7B:F0:8B:A0:DA:3F:C9:57:C6:19
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584068D2D16B89B931C872A30C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8481f689-27c4-38df-8cd0-a538f1809692.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        155.197.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:68:d2:d1:6b:89:b9:31:c8:72:a3:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=7472ff25-110e-4fb5-bcaa-1c92a154e030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:66:c3:19:e2:ea:67:a5:40:a9:4d:ed:4a:
                    30:0f:19:3c:5a:9c:83:83:5d:6f:5f:35:44:4a:76:
                    bc:5b:85:7f:f4:4b:b1:31:45:d8:c8:3d:df:7b:c7:
                    9e:eb:0a:18:9e:1e:3b:af:4c:60:45:26:0d:b1:73:
                    3f:cb:d6:09:71:d0:ac:df:88:89:c3:cb:35:a4:32:
                    3d:e4:31:61:bd:b1:7f:52:05:9b:a8:e8:ea:a9:ca:
                    a7:d8:09:89:44:02:62:d8:f9:57:7f:80:98:2a:3c:
                    c0:96:0a:4f:c4:01:99:a2:e2:b6:63:c8:a0:ce:ea:
                    64:0f:a9:82:6f:d8:38:c4:39:40:85:e4:25:a2:98:
                    24:ef:e0:6e:35:f9:30:b3:2d:20:0d:44:f3:41:05:
                    4c:29:93:ce:ba:15:3f:03:69:98:21:54:60:be:d4:
                    4d:a3:28:9d:d8:99:75:1f:b6:31:14:98:b4:17:94:
                    7d:68:92:68:6a:65:de:60:ca:f5:c7:a8:16:d2:ac:
                    d8:ee:8f:5e:88:57:b8:de:15:75:7c:9c:1f:23:29:
                    f5:7b:eb:43:52:7a:33:e3:aa:68:de:fe:6e:0d:6a:
                    15:a4:50:0f:6a:dd:1b:fd:7a:d3:77:aa:e4:85:4d:
                    95:25:62:b9:ce:bc:ed:20:ac:3d:0a:d9:f6:72:8f:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:D5:A5:2E:12:EF:51:AA:0F:7B:F0:8B:A0:DA:3F:C9:57:C6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8481f689-27c4-38df-8cd0-a538f1809692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:77:2e:1d:cb:ff:49:9f:77:f1:79:97:82:9e:dd:bc:ad:
         e5:94:16:c9:70:aa:8d:a1:9f:72:a0:a9:57:cb:e2:59:5a:c3:
         e0:67:2c:d6:f3:37:7c:0a:11:ee:4d:8a:ba:58:0b:be:5b:52:
         e0:05:17:e5:c0:c0:dd:a6:07:23:4b:92:4c:4e:43:c9:9e:0c:
         4d:d5:5a:bd:0a:f1:66:61:a3:5a:2a:54:9d:6c:ed:01:db:34:
         5f:46:8a:9c:e7:b2:38:0f:1c:03:63:55:f7:52:24:b7:04:96:
         c4:f8:4a:61:d7:7a:c2:12:61:90:f3:92:da:b3:4a:76:0c:be:
         66:9f:ca:f9:a4:de:b2:22:77:08:d6:99:5c:ac:43:38:67:df:
         6e:8c:8c:c4:d8:d1:d7:ef:a9:f2:16:ec:b9:dc:a5:46:48:b6:
         81:88:05:10:8b:70:00:23:14:ec:c5:fe:c3:16:f4:6e:1b:1f:
         1a:01:9f:fe:df:41:16:d6:a6:9c:3e:a3:ac:b9:aa:1c:66:5a:
         51:9d:16:6a:02:33:e8:da:9b:54:74:47:64:84:a3:8e:cd:ec:
         5d:70:5a:ef:4d:35:41:57:4a:c5:3f:cc:d7:30:29:ce:3d:80:
         19:94:ae:5e:86:fb:a6:18:26:65:9e:32:c6:00:c5:fa:7e:bb:
         cf:9b:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:23 2025 by rpki-client