Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/917e6e1f-2ccc-362a-8eae-e629c5276bb4.roa
File:                     917e6e1f-2ccc-362a-8eae-e629c5276bb4.roa (raw, json)
Hash identifier:          sLWtIyOF/3ufclHCFZylbmkV3Klf/70TfVkzbMrjCGE=
Subject key identifier:   5F:87:D5:F8:31:FC:F1:A3:5C:9B:85:98:AF:FC:D5:B1:4A:B1:41:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E47976D01FDD8B8DDDBA82900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/917e6e1f-2ccc-362a-8eae-e629c5276bb4.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:97:6d:01:fd:d8:b8:dd:db:a8:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=e27db80f-e3e6-4c40-b456-82a152eefcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:1b:00:ae:a9:c8:e6:5c:2d:9a:c1:98:6e:
                    b0:dd:7f:8b:a8:1d:e5:22:cd:58:08:58:5a:e4:96:
                    9f:89:31:ac:0c:30:99:c3:d5:b6:85:80:06:22:b6:
                    23:ea:b0:41:e3:3c:c2:9e:ca:0b:f4:6d:7e:b3:b6:
                    07:23:22:16:d8:77:62:64:9f:95:57:d8:53:29:d3:
                    bd:78:8f:8c:fc:cd:da:2b:fe:79:2b:0c:bd:64:21:
                    5b:b8:f8:ce:df:ca:0f:72:20:8e:df:2e:98:5b:c8:
                    a5:07:b4:25:dd:55:5c:63:f2:79:9f:52:bc:40:66:
                    c9:9a:11:56:87:3d:e0:c0:04:4d:94:9b:be:96:28:
                    b6:d3:49:65:8a:54:6d:72:c0:9f:6f:ce:1c:2c:64:
                    ac:91:8a:c1:4a:11:96:4c:20:67:30:98:75:42:fe:
                    8c:29:80:c8:67:ea:09:cb:7a:f5:6d:be:02:7e:94:
                    cd:d0:e0:fa:b2:29:fb:b5:78:b4:c1:da:0e:4c:b0:
                    a4:dd:e4:ca:a0:ab:f1:b8:85:b5:c7:62:fe:82:13:
                    41:ec:9e:31:ee:85:e5:ee:d3:ca:07:0d:76:fd:ac:
                    05:47:bd:f8:e3:0b:ec:93:73:4d:f2:46:ad:c6:56:
                    e4:bc:c6:a7:b9:79:49:20:ee:e3:be:80:8b:d8:d3:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:D5:F8:31:FC:F1:A3:5C:9B:85:98:AF:FC:D5:B1:4A:B1:41:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/917e6e1f-2ccc-362a-8eae-e629c5276bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:53:ce:49:31:be:e4:a5:05:4c:9d:97:88:b1:7f:8b:e7:91:
         53:7a:6e:ec:7e:4c:a3:f7:ed:19:4e:ce:14:39:8d:db:05:8f:
         51:0a:54:87:d8:db:aa:b7:78:ed:3c:82:ee:56:95:6b:3b:0f:
         a7:a2:3c:a5:7d:b8:34:e3:18:0f:c0:75:9a:aa:1d:5f:6f:f5:
         65:19:02:75:67:ab:a0:eb:87:8a:ab:85:9a:08:a0:20:ae:c5:
         4c:85:7d:15:52:81:3d:70:22:33:01:07:12:15:3c:cc:31:4f:
         e3:3a:3d:22:b3:42:ce:61:4b:f9:c7:17:50:d3:45:2f:f5:57:
         98:30:5c:4b:de:0e:69:14:0e:37:9d:62:11:35:a1:86:51:b6:
         9e:a9:ab:72:9c:61:0d:e0:56:e7:c5:c7:9c:6c:9b:1f:a1:27:
         b5:0f:0a:0a:41:2b:4c:01:e8:7b:36:7c:3d:18:fd:ec:f6:35:
         c4:b5:03:61:80:0d:66:c7:3a:dd:28:50:23:b8:f6:e8:9d:b7:
         e0:1f:d5:4b:0f:03:ed:f0:79:00:ad:dc:6d:54:ce:26:a7:d6:
         2f:e1:52:96:98:37:08:51:b2:dd:7f:0a:05:f6:32:8f:ad:d6:
         80:dd:83:7d:d0:6a:9e:14:16:96:6f:36:c8:e9:f7:4b:c0:e5:
         44:01:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:00 2025 by rpki-client