Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89acda9f-8e1e-3a28-9772-45fa89f5a9e6.roa
File:                     89acda9f-8e1e-3a28-9772-45fa89f5a9e6.roa (raw, json)
Hash identifier:          hxZx6++EhteDu2Hz4xcmefp8M1PyJSAFzHUma2BHOvk=
Subject key identifier:   5B:A7:8A:3B:FB:FC:8A:E1:F2:B8:C8:C4:47:55:75:8A:0E:F6:EA:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C9685EBA49599CB6300717900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89acda9f-8e1e-3a28-9772-45fa89f5a9e6.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        75.2.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:85:eb:a4:95:99:cb:63:00:71:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=a915dfb6-d010-4e9a-98c7-24c6c3fac0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:7a:24:99:3b:a6:b8:11:9f:4f:ea:6e:22:
                    d6:51:d5:08:40:ac:57:0d:1c:87:f6:af:b9:9d:b5:
                    e7:3c:11:71:91:fc:b3:25:88:f0:75:b3:37:d4:75:
                    e7:ed:b2:1a:f4:32:55:c8:93:a3:4e:55:0d:80:d4:
                    83:76:56:75:d5:ad:20:26:73:5d:ab:14:db:20:05:
                    ec:5d:43:b8:e0:b5:64:51:57:81:46:11:4c:bc:2f:
                    10:d3:69:a5:91:79:2f:ac:7d:a3:86:15:f7:9e:c9:
                    2d:3d:7b:bc:67:30:42:1b:26:3e:84:a0:4e:4e:71:
                    3a:ba:ad:43:2e:dc:51:b2:51:a8:8d:fd:61:a5:03:
                    27:32:45:f2:e9:be:4f:80:88:16:17:03:ff:1b:e3:
                    96:43:ff:06:ed:61:bb:89:48:71:0e:71:2f:78:15:
                    14:67:c0:fb:04:d6:ee:eb:56:61:14:eb:f6:12:d6:
                    8c:9e:6c:40:47:2f:12:d7:8c:97:ed:00:77:12:9e:
                    7f:c7:24:55:2e:11:da:f0:7f:00:31:f7:e2:c6:7e:
                    d3:16:79:87:c2:d1:18:5c:46:cd:26:1b:8e:91:95:
                    92:a2:8f:fb:70:56:a3:76:64:29:11:91:34:59:22:
                    db:6c:91:ae:89:fb:7c:93:e6:fc:27:c6:4b:9f:0e:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:8A:3B:FB:FC:8A:E1:F2:B8:C8:C4:47:55:75:8A:0E:F6:EA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89acda9f-8e1e-3a28-9772-45fa89f5a9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:e9:1e:8a:df:53:bc:d2:60:0d:5b:6c:6f:26:51:86:e5:
         ca:80:55:49:92:08:15:f5:0a:8a:ac:3e:53:e4:86:71:17:dd:
         bd:94:db:d4:27:4c:6f:b7:13:3f:9a:4d:0b:44:b2:e4:47:6e:
         4b:73:02:1e:2b:52:be:a8:e1:40:df:95:71:0c:9a:9e:81:ac:
         ce:88:77:3c:f6:1d:7a:08:a9:de:7c:39:b9:28:5d:de:fa:8c:
         03:0b:93:66:48:78:13:78:dc:f2:20:74:20:d1:3c:c8:9e:69:
         af:a6:30:b1:c9:bd:86:01:f9:8d:9d:04:f8:82:5d:df:dc:96:
         a0:08:35:0f:ae:17:f4:e2:27:70:36:52:49:95:1f:83:d0:72:
         6a:d7:bb:a5:68:44:08:0b:d3:c4:5b:ac:ed:a3:d5:d9:73:10:
         00:cb:af:e1:24:06:98:58:e7:f1:fa:8d:6e:bf:e0:3d:4e:20:
         b3:b8:e3:ec:fb:46:b6:c9:a2:42:7e:33:d8:e6:55:8d:f3:e6:
         ef:eb:77:8a:01:aa:c8:a4:75:54:6b:77:a1:ff:4d:72:48:8c:
         8d:c3:01:8e:19:f0:e4:fb:23:56:58:7d:ff:d0:71:77:4b:23:
         a4:9d:bc:df:61:54:d9:32:86:67:64:b2:41:2d:ba:52:d1:55:
         b2:47:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:33 2025 by rpki-client