Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422c855-dd5b-3466-b9fe-a1af325a912b.roa
File:                     9422c855-dd5b-3466-b9fe-a1af325a912b.roa (raw, json)
Hash identifier:          HK3fygmWCoGL1X3Xxz3AwSB9LJANzOjq+HbLozgSbYc=
Subject key identifier:   93:60:BB:64:AC:47:1F:2F:8F:DA:86:A7:D0:13:6C:E3:3B:47:C8:6A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2F743D3263514CF32F9D8580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422c855-dd5b-3466-b9fe-a1af325a912b.roa
Signing time:             Wed 08 Jun 2022 12:00:00 +0000
ROA not before:           Wed 08 Jun 2022 12:00:00 +0000
ROA not after:            Thu 14 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        168.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2f:74:3d:32:63:51:4c:f3:2f:9d:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  8 12:00:00 2022 GMT
            Not After : Jul 14 04:00:00 2022 GMT
        Subject: CN=e4a75127-a763-4dc3-a057-47652d5e580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:c5:8d:fa:62:4d:27:d1:d5:9a:6e:a1:db:
                    90:a8:84:7c:70:d4:ee:e0:a1:31:70:42:6c:68:b1:
                    03:21:01:37:3a:ca:76:de:9f:0e:01:a0:4d:1f:5f:
                    42:0a:92:32:54:ff:32:67:25:0c:e1:03:72:8b:21:
                    fb:65:dc:ca:56:06:1f:f2:e5:0f:85:1f:28:dc:38:
                    59:df:e5:57:c3:3d:c4:ca:80:0b:95:d1:f9:90:a5:
                    22:88:5b:60:9f:34:f6:7b:81:12:97:0f:20:af:4b:
                    9a:07:27:89:29:12:10:55:9e:ff:55:33:15:0b:e9:
                    7e:50:3c:f2:79:da:df:fb:72:8c:95:2a:f8:0c:49:
                    7c:ab:00:80:99:92:ed:e9:c1:9d:25:18:9e:79:dd:
                    83:3c:4a:29:a3:55:15:b1:47:02:22:60:a4:4b:71:
                    56:10:ae:ae:6a:30:25:d7:54:c7:d7:b1:36:7e:42:
                    b0:96:60:9c:c9:db:44:ac:60:5b:4a:4a:a4:25:fd:
                    0c:e4:1b:9c:ec:2f:ef:f5:41:15:3b:a6:2a:d5:a8:
                    dd:7f:76:c4:89:45:6a:15:f5:bb:65:d7:d3:d5:b6:
                    77:2c:97:00:46:f8:b2:d5:b2:47:2c:50:a8:40:67:
                    f5:f1:bb:27:e4:1d:4a:7a:67:76:d6:b1:13:d3:2f:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:BB:64:AC:47:1F:2F:8F:DA:86:A7:D0:13:6C:E3:3B:47:C8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9422c855-dd5b-3466-b9fe-a1af325a912b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:72:b4:0c:5a:5f:25:ed:1e:f4:70:5e:c0:db:24:84:84:
         08:cd:8d:98:fb:dd:10:f7:7b:32:39:54:52:c6:fc:25:0d:e7:
         ee:e7:68:bc:02:93:71:ff:90:c4:28:22:90:71:dd:99:bd:b4:
         47:21:fb:81:4a:36:6b:d8:b5:d5:24:cf:87:44:4e:ac:c2:1d:
         dc:f4:66:84:08:83:88:01:4e:83:7c:79:39:d5:70:84:80:e0:
         e6:15:e9:94:b5:11:d1:cc:37:d2:b5:90:f9:7a:ee:fd:11:ab:
         2d:31:e1:32:30:80:b9:40:ad:72:bd:70:f3:d3:d0:74:db:55:
         16:cc:5b:83:b5:d9:e0:8b:18:02:5f:a8:2f:05:9d:c7:fa:ef:
         da:d3:9f:8f:2a:f7:7c:4e:3d:92:51:76:c9:0a:d2:33:7f:cf:
         4c:0c:46:94:ac:6e:0f:da:a7:b6:ef:4a:74:cf:f3:0e:9b:c9:
         f0:ff:c3:c1:ca:fc:22:23:85:99:2e:48:62:60:f1:a9:55:da:
         c4:a9:eb:65:eb:a5:0d:3c:7e:23:df:ff:ec:61:59:8f:e2:76:
         a7:dd:93:af:7e:d5:28:ae:d3:89:10:5f:31:79:ff:77:5c:71:
         c4:39:a2:d8:bd:c6:ec:9f:fc:56:59:e7:ba:56:d2:b7:4c:26:
         81:0c:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:25 2025 by rpki-client