Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422698d-0b05-36d0-881c-028d9c2b7dd4.roa
File:                     9422698d-0b05-36d0-881c-028d9c2b7dd4.roa (raw, json)
Hash identifier:          6J5eHH2q2Et6wnu+s7md8ANMevjOWCjBy1mghuHrX+4=
Subject key identifier:   1D:71:F7:6D:F5:0A:F6:6A:10:34:A8:8B:33:8F:A6:D6:EE:A9:DA:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDE6DBBE80037FCB89F64FC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422698d-0b05-36d0-881c-028d9c2b7dd4.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Fri 16 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        40.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:de:6d:bb:e8:00:37:fc:b8:9f:64:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2022 GMT
        Subject: CN=f8014c65-2e2c-4250-be2b-65b6aeb17afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:b0:1d:39:ce:4e:78:e5:9f:21:fa:09:65:
                    2a:ec:38:54:b3:c7:c8:64:0a:a6:bb:04:a3:54:8b:
                    40:76:52:fb:9d:c5:8e:00:7c:0d:bc:33:f6:39:de:
                    9b:1b:e9:fc:4b:e7:15:de:a1:74:32:21:0d:0e:82:
                    bf:19:a0:66:0a:4a:89:e3:89:75:09:c6:ae:39:06:
                    f9:4e:2e:2f:8b:53:08:c0:88:85:1d:66:b1:0a:d6:
                    06:fe:0f:0d:51:99:96:e9:04:61:af:61:e1:5b:c6:
                    38:78:39:f2:64:8d:b3:83:11:82:6c:af:c3:59:7f:
                    40:68:b4:03:60:bf:22:95:ea:a9:7e:75:e1:9a:ac:
                    bf:b3:9f:6e:36:dd:70:8a:9f:2e:f7:92:2c:04:ba:
                    94:37:38:d4:40:53:38:c0:18:39:76:8c:90:d1:17:
                    b0:f5:99:9a:14:f8:6b:5c:30:8e:b3:63:da:c7:e3:
                    90:19:09:1c:30:d4:57:1b:ff:6c:b7:95:62:af:3c:
                    91:b8:67:e4:b4:bb:5d:f4:0d:f7:72:6f:ee:72:aa:
                    26:81:63:8e:49:8b:da:93:33:00:30:9b:ed:2e:1a:
                    ef:af:bc:c5:50:30:58:ae:74:3d:32:0d:ae:61:6e:
                    d9:6f:c6:a4:db:ec:dc:5b:76:91:8c:99:92:19:93:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:F7:6D:F5:0A:F6:6A:10:34:A8:8B:33:8F:A6:D6:EE:A9:DA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422698d-0b05-36d0-881c-028d9c2b7dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:ee:cb:43:83:0d:64:3d:9d:b0:c4:93:6e:cc:d6:54:1a:
         f7:27:38:17:e4:7e:1c:ab:58:db:b8:1a:ca:b0:d4:a7:1d:d4:
         9c:ee:da:65:81:42:c4:ee:92:26:44:07:44:88:53:07:82:9d:
         50:c2:a6:2c:a5:4c:52:a7:15:b7:a8:e5:7a:50:ba:8b:5f:14:
         df:87:e0:87:c5:49:5b:c6:be:4d:d4:c1:b6:a0:b7:4b:e8:6c:
         27:32:e0:a8:bd:b1:19:8a:f5:2b:6f:d9:af:5d:06:0a:b6:2c:
         31:fb:4d:0f:64:4f:31:4c:af:34:95:da:44:84:0c:c3:fe:4c:
         e2:22:b9:60:ca:9c:e6:5f:4f:d1:10:b2:99:be:ce:59:c2:c2:
         34:58:04:6c:82:24:73:e7:d2:4b:ef:f4:83:6e:9e:80:bb:0e:
         8d:27:62:18:66:41:0a:07:94:09:4e:67:11:75:61:b3:50:98:
         57:5f:14:86:de:bb:64:08:d9:48:86:41:5d:7f:c6:b1:be:02:
         f6:08:fb:ec:e0:e6:dd:77:01:ff:20:ac:e7:bc:61:60:4a:4a:
         e8:e7:f6:05:46:89:e4:ce:bb:a9:97:55:da:56:c5:8f:cb:f2:
         67:ff:00:9f:8f:b3:6d:6e:be:8f:66:9b:81:7e:bb:b1:2c:e3:
         9a:1b:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:55 2025 by rpki-client