Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8aecfe6f-d05e-3083-a06b-463e5eb4142a.roa
File:                     8aecfe6f-d05e-3083-a06b-463e5eb4142a.roa (raw, json)
Hash identifier:          6OimAjaS0zGGuuocKseD7JonpRO/TnBnQbOzu75Y7Hs=
Subject key identifier:   91:F1:F4:BA:55:9E:C7:4D:09:14:79:48:A5:5E:5C:50:F0:28:45:11
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FBFB09CA418695F9425500FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8aecfe6f-d05e-3083-a06b-463e5eb4142a.roa
Signing time:             Sun 30 Oct 2022 12:00:00 +0000
ROA not before:           Sun 30 Oct 2022 12:00:00 +0000
ROA not after:            Mon 05 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        168.203.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:bf:b0:9c:a4:18:69:5f:94:25:50:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 30 12:00:00 2022 GMT
            Not After : Dec  5 05:00:00 2022 GMT
        Subject: CN=47a07d93-9c7a-4cc7-978e-3f99a80b5bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:07:9c:25:f4:63:47:fe:9c:b2:2f:1f:fd:
                    e8:ca:64:06:e6:b9:0b:d4:7e:44:8f:06:d2:4e:c4:
                    6c:63:b4:fa:9a:26:81:43:f5:98:4d:d8:3e:aa:40:
                    2f:99:ac:97:d4:a2:c2:ae:0d:21:98:58:70:2c:a3:
                    af:a3:d8:5c:2c:2e:10:51:8d:09:ea:fc:f7:3a:0e:
                    ae:f8:d2:c2:9b:8b:3f:85:c2:36:ac:db:f5:14:3d:
                    da:dd:c9:ca:67:ff:d5:ac:27:3f:81:bd:cc:84:87:
                    d2:41:ec:81:8a:4d:80:48:b7:3c:bb:20:71:ff:a7:
                    0d:63:76:ff:c2:da:01:15:49:95:b6:3e:2b:c2:7c:
                    dc:43:f9:15:4a:b9:6f:6d:32:ab:61:6b:b4:b8:80:
                    0a:14:f2:2c:12:6a:d0:e5:a5:1f:37:37:de:43:27:
                    5e:c8:08:c0:ed:cc:e9:88:6a:0c:1f:88:05:16:9f:
                    59:89:f8:ec:eb:e7:fe:db:2d:32:8f:c3:32:58:91:
                    7b:3f:18:51:72:61:da:aa:9a:06:f0:7a:3f:8b:d7:
                    1d:c0:1e:d8:0b:56:86:ed:62:53:c6:09:e1:27:7d:
                    10:98:4e:ed:09:1a:00:6c:7b:ea:c7:70:ae:0b:36:
                    c2:b3:71:b5:52:02:f2:a3:0c:04:0a:ab:b6:e4:0d:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F1:F4:BA:55:9E:C7:4D:09:14:79:48:A5:5E:5C:50:F0:28:45:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8aecfe6f-d05e-3083-a06b-463e5eb4142a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:be:18:79:09:6e:59:86:04:f8:a1:6d:24:8f:09:52:26:
         b7:37:b5:9e:1e:33:40:91:0e:24:d1:50:b6:75:f9:c0:ab:97:
         16:1e:55:ed:d7:52:05:0c:54:b3:a3:4c:fc:fa:91:12:45:df:
         ea:92:1f:2e:f6:39:a8:d5:60:9c:d1:be:f8:44:da:d2:2d:6f:
         9a:39:bc:1a:f8:27:52:d3:62:3b:c0:c4:8c:7b:35:53:c2:52:
         7a:f3:dd:18:f5:18:9d:25:90:7c:d4:f5:40:17:43:43:a2:9d:
         8d:e9:48:ec:04:88:aa:f4:2a:9a:2c:ef:0b:9b:41:48:0a:97:
         3a:ed:fb:00:6d:5b:9b:a4:a3:30:b5:d1:19:26:24:79:24:0a:
         59:5e:43:84:e7:7c:92:8c:2b:9c:38:aa:b0:50:b5:09:ee:b1:
         3f:85:d1:9c:8e:2c:bd:4c:1b:e7:bc:a5:80:52:b9:00:dc:d2:
         eb:22:4e:14:8a:8e:0d:22:58:33:88:ce:29:a1:8e:6a:60:a7:
         0b:50:58:63:29:84:b9:bd:b5:72:34:b6:3b:bc:1b:7c:bd:46:
         fd:d1:38:92:94:a3:2f:32:8f:e6:c3:48:29:7c:42:63:f1:34:
         9d:2c:de:c5:0d:69:85:a1:76:b5:25:35:2d:53:a4:9c:53:70:
         9f:29:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:08:29 2025 by rpki-client