Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91de0f74-d991-31f0-9436-cdc822988506.roa
File:                     91de0f74-d991-31f0-9436-cdc822988506.roa (raw, json)
Hash identifier:          pgNWC1y1Ne3//XOYB6pFY9ZaQggxfCDnA/eSOT6iU2k=
Subject key identifier:   77:C1:BD:72:79:B6:AD:C0:0F:A6:2F:D3:0B:01:3C:39:86:66:71:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE114414FB48C9F53D77C5CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91de0f74-d991-31f0-9436-cdc822988506.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        63.246.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:14:41:4f:b4:8c:9f:53:d7:7c:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=1a127513-c098-4619-85f1-7c66de5d56bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:ea:47:73:8f:60:0d:bb:38:cb:b2:4e:63:
                    e2:c5:6e:52:95:7f:e0:db:12:6d:83:24:1b:7a:16:
                    cf:53:11:21:f9:b0:93:8c:b3:6a:8c:c0:0c:2b:c7:
                    8b:5c:a0:7c:98:0f:50:aa:ff:62:dd:6e:73:05:e2:
                    37:66:93:69:f6:fd:a5:0c:7f:c2:8e:d8:8b:82:dc:
                    14:f4:8d:4b:0f:c0:d0:97:ad:cb:ed:bb:5b:f9:8f:
                    02:ba:0c:f5:12:a0:6a:4f:66:35:d6:ae:ee:86:79:
                    bf:60:70:1b:9f:e6:63:e3:d2:c1:a3:c2:a0:7c:66:
                    0d:bc:39:27:6b:3a:85:87:c6:60:e2:a7:97:8c:3e:
                    78:95:fa:b1:92:22:99:8c:4e:c7:83:a5:51:e1:bc:
                    e9:44:80:7e:b2:9e:b2:f3:78:7f:d7:6b:5f:7c:51:
                    d0:32:4d:c5:45:35:99:72:96:e3:3d:15:0e:f9:67:
                    bb:60:5c:4c:7e:a1:1a:f7:9f:cd:ba:2f:7a:07:c9:
                    5d:b5:f7:a1:58:5d:b8:67:ee:d1:68:ba:fc:4a:bb:
                    af:62:bf:39:9a:b9:d2:d0:02:6d:e0:a5:ad:40:d5:
                    18:f1:de:dd:cb:12:5b:3d:b5:e0:f5:5d:ae:a0:29:
                    56:91:94:75:88:fe:6a:fe:68:9f:fd:29:fa:4d:6a:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:BD:72:79:B6:AD:C0:0F:A6:2F:D3:0B:01:3C:39:86:66:71:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91de0f74-d991-31f0-9436-cdc822988506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:e8:9f:87:a5:53:8e:14:4c:2a:5d:40:ca:69:7f:44:04:
         85:5e:c2:a1:35:67:33:e0:2f:76:5b:d7:f9:8b:ec:d3:2f:da:
         f8:91:09:78:f4:69:57:04:61:e2:d0:34:e2:9f:38:f1:43:cc:
         52:a5:87:5f:e2:66:ab:58:27:70:e3:4f:32:d9:d1:93:37:7a:
         e4:fe:a4:ac:31:bf:49:c6:1f:3c:3d:bd:15:e2:2f:b1:98:e2:
         bc:7d:17:45:b9:f9:03:ec:aa:51:b0:bf:87:a8:6d:6f:c8:c2:
         83:5a:20:7d:b6:48:47:21:33:04:df:e6:73:d9:4a:60:7f:38:
         23:a1:09:43:6c:e9:16:30:13:c9:d3:39:da:fe:40:a8:3e:cb:
         a1:c9:e9:1b:b5:ff:a0:7d:78:34:b7:ab:1b:fd:8b:6d:1c:c8:
         fb:fc:8f:3a:09:8f:4f:8d:59:fb:05:a9:5a:62:3f:00:61:15:
         38:7d:8d:e8:9b:67:65:0f:fe:d4:97:04:17:af:f8:47:46:8b:
         22:6a:91:d6:f9:02:f7:94:52:f9:89:eb:33:15:bb:2a:f6:38:
         05:81:f3:27:22:9e:a6:ce:3e:e3:88:6e:b6:ac:c6:f2:71:ee:
         ed:3d:7a:a8:da:8a:66:8a:2c:90:28:e5:e7:b0:43:96:37:6a:
         ed:8d:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:35 2025 by rpki-client