Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87b0e4eb-db37-3793-ad1b-6da7c55f1278.roa
File:                     87b0e4eb-db37-3793-ad1b-6da7c55f1278.roa (raw, json)
Hash identifier:          6Z7oZf06DHTsyvNSJh70T/gz6ZSqtOWFkpFlR64ezHo=
Subject key identifier:   D8:76:45:B6:15:CC:FC:75:4B:0B:9A:FF:46:7D:E8:64:25:BB:7F:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA5934DE1F802DB1661B2E700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87b0e4eb-db37-3793-ad1b-6da7c55f1278.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        45.33.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:93:4d:e1:f8:02:db:16:61:b2:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=a58b47f0-0e90-411e-9186-a7605adbdcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:f8:f2:eb:39:bb:27:b9:58:07:a5:f7:62:
                    34:b8:34:29:0d:32:b8:4c:6d:c2:9a:e3:c0:d3:07:
                    e1:9d:32:be:97:ea:d6:74:ad:7c:6a:e1:9b:0d:9e:
                    89:81:74:90:e0:97:04:0c:5d:25:2f:9a:69:fc:5e:
                    af:e6:78:04:6a:5d:9a:fe:11:00:8e:eb:6e:a3:13:
                    c1:42:99:eb:99:bf:4b:d1:af:f3:e3:19:f9:cb:11:
                    84:22:63:88:46:1d:07:5d:89:98:6c:5f:e8:fd:0e:
                    63:5d:27:6a:d2:af:c0:79:df:de:a8:13:16:04:88:
                    6e:ea:0a:7b:3d:41:80:14:f2:58:4a:a9:bd:7e:7a:
                    4c:1a:13:9f:f1:d9:ff:9b:3f:74:25:6b:0f:66:c7:
                    46:9c:77:b6:5f:e0:e2:98:b2:f0:c6:12:50:88:0e:
                    07:a8:b9:6e:4f:09:3c:22:55:d0:cc:1a:85:19:2b:
                    ed:7b:d1:f5:1b:62:30:b2:45:5f:96:31:cc:2a:85:
                    cc:42:77:2b:c4:f6:da:d6:e3:f5:93:4d:19:07:6b:
                    87:d0:f4:5a:53:75:7e:35:e1:fc:3a:31:36:ab:7f:
                    ac:f5:a2:3a:1f:66:93:25:ce:d3:8f:f2:68:80:e8:
                    ae:66:75:05:f3:5c:bf:e1:a7:28:04:ac:04:96:16:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:45:B6:15:CC:FC:75:4B:0B:9A:FF:46:7D:E8:64:25:BB:7F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87b0e4eb-db37-3793-ad1b-6da7c55f1278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:85:de:5f:ed:b2:52:f8:93:38:31:27:41:fc:65:f7:ea:4b:
         5b:03:ba:d5:a0:6e:b4:e8:d8:9d:11:09:e4:d6:cf:7d:2d:dc:
         48:3e:57:22:e9:0a:45:b1:fb:6f:03:ed:a7:da:4c:4d:22:98:
         26:48:82:4e:07:81:d4:5f:05:9e:b9:33:d7:17:24:61:2b:31:
         fa:69:3a:d7:63:41:c3:ea:ed:00:9c:35:21:37:5b:3c:3a:fb:
         a8:4d:52:29:43:4f:8c:ae:ef:56:22:fe:53:ea:d6:ec:af:34:
         f0:b6:5e:18:23:a0:21:b6:1b:5d:b0:5a:b7:b0:78:31:20:b1:
         a1:0f:9c:d6:32:87:83:e4:27:40:73:1b:b7:38:aa:b6:08:f6:
         00:83:8a:95:f2:26:5e:cb:81:16:90:3f:97:94:fc:4c:50:d5:
         1f:57:ae:87:02:3e:0d:23:15:07:53:9e:2d:23:f3:4e:da:ab:
         47:1c:0d:8a:6e:8e:6c:2a:41:e0:7f:32:12:b5:3e:f7:1b:5a:
         16:fb:5d:98:16:b1:21:a4:9d:58:c5:5e:0f:30:c3:dc:17:56:
         02:ae:d5:83:71:b3:8e:01:ef:b3:4f:1a:f4:4d:2c:54:02:b4:
         bd:8f:f3:83:7f:6d:75:64:a8:6c:5c:60:77:f8:fb:00:74:27:
         2c:cd:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:50 2025 by rpki-client