Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8caa85af-8ce7-30b3-93aa-e35da97a9f40.roa
File:                     8caa85af-8ce7-30b3-93aa-e35da97a9f40.roa (raw, json)
Hash identifier:          XNLNVTdtPQZN3ddugs1PhXXfyPuNPFngvGuEAUkYVUg=
Subject key identifier:   C3:50:DD:D4:9C:F2:C1:31:14:6B:B0:8F:50:F0:84:98:A4:07:74:EC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6FF6D811AE55DC1FDF872200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8caa85af-8ce7-30b3-93aa-e35da97a9f40.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        161.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:f6:d8:11:ae:55:dc:1f:df:87:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=79bbd0e4-2354-47a1-8485-233bb9b0c1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:66:db:18:7c:29:05:61:26:04:90:9a:12:
                    b0:c6:94:03:74:20:eb:25:1c:65:ea:56:cf:98:d8:
                    f4:99:09:70:74:4c:ef:e1:1a:03:ab:54:ef:38:f9:
                    b5:68:9e:00:1a:78:26:fa:83:6b:10:b5:e6:15:de:
                    cb:ea:76:75:d7:e0:42:e9:7c:95:1e:b7:30:89:65:
                    fc:3a:fe:04:26:9c:30:2c:6b:0f:a2:f3:29:9c:f9:
                    99:be:71:f8:48:79:6d:af:8a:1b:04:f7:a7:df:cb:
                    99:b9:55:26:0d:fd:c6:0f:57:78:48:17:b2:9a:15:
                    b4:15:7a:07:c2:21:e1:05:2b:87:78:81:2e:6c:90:
                    c7:0f:12:04:12:f9:4e:85:c8:93:fd:21:3c:93:d2:
                    02:af:5d:ff:d9:24:91:07:fa:b3:0e:2a:dc:71:1f:
                    28:4d:48:5b:09:ef:9d:62:a5:83:05:c5:ce:b9:70:
                    a3:a1:2f:ea:fc:0f:26:70:6d:30:25:07:6a:a5:70:
                    6a:a3:7d:6f:9f:80:4e:0f:69:50:7e:4a:7c:56:c2:
                    8b:17:58:bd:ef:95:05:d4:33:92:6d:1a:61:0d:57:
                    7f:63:2e:40:d7:2f:0f:2f:d7:aa:22:06:11:74:2d:
                    c7:b7:67:cf:2f:e8:3e:c8:a2:3b:c7:57:6b:b8:12:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:DD:D4:9C:F2:C1:31:14:6B:B0:8F:50:F0:84:98:A4:07:74:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8caa85af-8ce7-30b3-93aa-e35da97a9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:db:01:ed:ab:2d:51:b6:47:44:64:c0:6d:10:ba:19:51:
         63:a5:aa:63:94:68:45:31:fc:32:f0:14:2e:7c:14:88:14:a8:
         b4:72:ec:c0:3c:08:88:49:5c:b9:7e:57:56:51:e5:e6:90:4c:
         05:6b:d3:1c:e6:13:3e:6f:d5:81:22:fb:46:30:63:6b:b4:0f:
         6d:41:24:20:56:00:b8:f9:12:70:4a:fd:5e:50:a2:99:e7:45:
         cc:07:cb:db:f0:bb:40:9d:cb:24:ba:01:39:fd:79:10:60:ad:
         0b:a0:29:75:f1:a9:ed:e7:8f:c0:66:fb:e8:61:50:92:60:ee:
         4e:6e:36:fd:2b:08:7c:4b:99:ea:3e:b3:25:d5:60:2c:f8:df:
         1a:41:33:7a:65:f9:e0:4b:e1:ab:20:2d:07:2a:23:8e:7b:d4:
         88:4e:3d:6f:c1:ee:dd:1c:4e:e4:46:81:ad:35:9c:bc:aa:85:
         57:72:95:19:41:8c:8f:70:52:9d:ea:b0:dc:ea:9b:5a:f8:cd:
         9f:7e:f4:d5:db:72:5c:dd:0e:89:68:8d:2f:88:c5:37:35:41:
         4c:d7:87:9a:a0:89:52:6d:15:b6:e7:74:66:bb:11:f1:17:d0:
         15:50:91:bd:4e:e5:02:46:95:60:3f:b7:b5:33:73:6f:6a:7c:
         2f:45:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:08 2025 by rpki-client