Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85625fc1-9c26-3e75-82c9-8222ef91231b.roa
File:                     85625fc1-9c26-3e75-82c9-8222ef91231b.roa (raw, json)
Hash identifier:          pSjeSJ8xN/3CjydukERNeMZWyq/2LlCAdzIcnPszZyI=
Subject key identifier:   5A:D9:A0:B8:2E:83:D6:D2:1F:87:3F:1E:B6:C1:F1:9C:F1:1A:B9:89
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402746905A0ED46ECAA5352A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85625fc1-9c26-3e75-82c9-8222ef91231b.roa
Signing time:             Tue 06 Dec 2022 12:00:00 +0000
ROA not before:           Tue 06 Dec 2022 12:00:00 +0000
ROA not after:            Wed 11 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        199.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:27:46:90:5a:0e:d4:6e:ca:a5:35:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  6 12:00:00 2022 GMT
            Not After : Jan 11 05:00:00 2023 GMT
        Subject: CN=825f2f8a-a759-4c31-a221-4ba97ef75e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:82:f4:95:8a:7e:0c:51:0b:6f:b3:ad:bd:
                    8a:54:2e:fd:4a:9d:50:fb:a2:e8:52:1f:4d:36:e9:
                    4e:65:71:62:56:6a:d0:1f:5f:eb:8f:bb:33:db:77:
                    49:e8:5b:27:a2:79:d5:6e:74:40:53:e0:09:1a:b7:
                    92:2f:4c:b3:dd:fe:bb:9e:6d:cc:25:42:ed:0f:bb:
                    82:77:18:48:86:62:eb:08:16:1f:0e:d0:b6:28:18:
                    9d:c4:fa:be:c8:9d:91:1c:c6:8e:61:47:13:52:4e:
                    68:6d:57:de:b8:56:61:97:95:cc:29:ae:b5:26:8a:
                    ac:7f:be:cc:64:84:fa:fd:45:1b:2f:c3:c7:5f:16:
                    5a:6d:4b:cd:1f:7a:e2:c5:e4:e8:bb:e7:a9:48:17:
                    2c:18:e9:77:bb:1b:28:83:0e:39:1e:b5:a4:cc:25:
                    13:2a:2d:62:3e:cf:72:6f:e7:aa:12:a5:c5:53:77:
                    a7:b5:91:ae:d7:16:73:2b:fe:56:3f:98:45:3d:07:
                    63:87:4f:74:fd:6d:e3:88:af:bb:8e:94:55:67:14:
                    33:36:b8:aa:92:e6:68:85:3b:f6:30:a7:d7:17:2f:
                    e5:93:01:e5:68:5d:08:10:2e:5d:7a:1c:26:31:97:
                    22:f9:77:c1:6b:5c:a1:bd:6f:49:0d:79:e1:a4:34:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D9:A0:B8:2E:83:D6:D2:1F:87:3F:1E:B6:C1:F1:9C:F1:1A:B9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85625fc1-9c26-3e75-82c9-8222ef91231b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:ff:fc:15:57:3f:75:ba:47:63:24:ec:14:15:5f:cc:ae:
         98:c2:10:cc:cc:8a:a4:66:5e:97:df:9a:8e:1c:b1:ed:8d:9a:
         83:12:33:2f:bc:a5:df:6f:2d:d2:f6:e0:8d:cc:b1:f5:e2:e2:
         31:11:36:53:0f:fd:5b:26:8f:13:b9:0c:93:c3:6f:d1:a1:f6:
         a2:10:e4:ff:db:d9:6f:d6:4b:d0:e5:09:8c:47:d8:c5:23:5f:
         ff:77:43:33:eb:35:08:71:84:39:1a:8b:14:74:94:24:5f:0f:
         73:2e:44:b1:92:3e:f9:18:d2:f4:11:04:1a:f8:fd:36:c2:ae:
         a7:96:fa:29:13:59:aa:a8:1c:dc:0a:1d:be:2a:ba:c6:ed:ba:
         89:36:28:86:17:17:7e:84:f7:bc:31:67:fc:34:7e:ac:61:b0:
         0e:c7:08:1b:7e:95:53:21:6a:ac:8a:68:50:26:b7:d6:63:79:
         23:1c:f3:a8:e1:9a:52:36:f9:b4:40:ac:38:20:b5:c2:e9:d9:
         c2:b0:ea:57:04:76:c7:cd:5c:64:32:21:64:56:75:a2:a4:26:
         57:4b:c5:bf:82:51:15:b5:d8:31:ae:3b:34:36:ef:25:7b:ed:
         cb:31:bc:34:73:a5:3e:ba:2e:4a:c6:75:17:2b:48:35:40:51:
         7a:85:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:45 2025 by rpki-client