Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/930acd52-c281-3a00-805f-2a995cc2016e.roa
File:                     930acd52-c281-3a00-805f-2a995cc2016e.roa (raw, json)
Hash identifier:          DrvP6Yk5ccbDiZWQSqZwl5kOHT+WATVjPsv1PekB10M=
Subject key identifier:   16:81:C6:6E:94:8B:66:41:A3:F8:36:F4:F1:A8:69:CC:9A:8E:06:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1705BDE9539AF792740A9380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/930acd52-c281-3a00-805f-2a995cc2016e.roa
Signing time:             Tue 30 Aug 2022 20:45:07 +0000
ROA not before:           Tue 30 Aug 2022 20:45:07 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        141.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:17:05:bd:e9:53:9a:f7:92:74:0a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 30 20:45:07 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=d89b943b-7653-4f03-96b6-78468065a49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a6:38:42:e9:dd:ae:34:38:53:93:2f:0f:ec:
                    d8:35:57:6f:dc:c5:86:db:53:07:a9:75:ee:bc:16:
                    dd:74:a3:8b:01:53:0d:3e:e1:a7:4a:6e:61:c6:d9:
                    78:6e:70:38:f0:b1:fd:10:0f:fd:71:7b:87:8c:5f:
                    3f:69:2c:dc:0b:20:ed:4f:5e:8f:3c:c8:f0:92:3a:
                    25:64:13:2b:96:6f:16:ba:75:6f:33:e8:78:51:2e:
                    64:c4:fc:8e:dc:05:00:5d:88:ff:ec:d0:62:ab:b2:
                    79:2c:20:e0:f4:eb:fa:50:5d:33:99:6b:2f:e8:bf:
                    c9:42:7c:8a:86:d2:8d:81:4a:5e:0a:0c:0d:be:90:
                    a3:13:cd:a9:af:af:36:3d:b8:97:bd:15:5b:ac:e0:
                    c0:84:21:f1:1a:14:73:ca:e1:a7:73:f5:b9:c2:9e:
                    bb:fa:85:dc:b4:c9:21:63:d8:91:c9:7b:05:ef:ca:
                    57:f1:48:7b:33:73:14:a2:04:7c:8e:4f:86:c1:78:
                    c4:6c:ae:64:4a:63:f9:bd:31:cc:78:7d:59:24:ad:
                    bf:95:c2:bf:3c:63:d1:ae:5a:de:7f:39:52:44:87:
                    bc:1b:75:b7:db:f4:ab:24:67:e4:86:7a:73:64:47:
                    d8:37:52:68:5d:12:6d:8b:aa:fa:ea:06:2c:af:82:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:C6:6E:94:8B:66:41:A3:F8:36:F4:F1:A8:69:CC:9A:8E:06:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/930acd52-c281-3a00-805f-2a995cc2016e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:cc:6b:ed:e7:f0:39:1d:32:c1:40:02:6a:85:85:46:fe:ca:
         ed:f8:92:60:00:d5:73:5e:9d:0e:72:8a:32:d4:56:16:ed:85:
         16:9a:14:11:9a:3b:5a:d4:ad:3d:83:8f:de:a1:ba:14:f0:c3:
         6b:37:65:c5:a0:7c:13:75:3d:6a:02:1f:88:f8:fd:52:e2:52:
         95:3a:c1:b1:50:8f:13:f7:ad:00:cd:3d:25:1f:8d:bc:ef:5c:
         5c:5e:06:79:a4:27:f6:e3:04:b5:50:52:e7:dd:8d:2c:f3:d1:
         ab:28:9e:7d:c3:08:29:38:6b:3f:ba:09:49:ef:ed:3b:8b:68:
         9b:86:01:31:e4:b2:90:36:b9:7f:77:9f:f0:07:a4:53:3d:03:
         8f:1c:d5:73:7c:0d:bb:ed:25:b1:d9:6f:07:a9:48:90:cc:dd:
         f4:04:e1:d7:08:c9:e0:6f:79:74:3e:25:37:64:77:b6:a1:d2:
         59:8d:0c:68:d1:39:bb:b3:2b:34:48:87:7d:d6:9f:2e:7d:e3:
         d3:80:cd:10:24:d0:cd:b9:0d:9a:07:a1:30:9e:aa:2c:2c:13:
         ce:65:42:ba:9f:87:cd:a3:0e:fc:92:37:c9:02:ad:ba:74:c4:
         c2:c5:c4:9d:eb:7f:61:ce:fd:9e:bf:42:11:23:c0:50:21:bb:
         d0:62:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:30 2025 by rpki-client