Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94973278-f534-3c2c-8216-5d43fa28f5f2.roa
File:                     94973278-f534-3c2c-8216-5d43fa28f5f2.roa (raw, json)
Hash identifier:          5BUFEiL5pIBdQlZcMj2QZ6PGRcISaOFUDx8tvi1mIZA=
Subject key identifier:   BA:6B:9B:8C:43:63:74:7D:4E:5C:36:75:2C:44:60:1A:15:86:6F:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0B197F5CCFCDB4437BE23820
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94973278-f534-3c2c-8216-5d43fa28f5f2.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        71.152.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0b:19:7f:5c:cf:cd:b4:43:7b:e2:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=a0374c64-2d70-455b-9971-953a2fc90913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:66:b6:b3:c8:8a:77:03:0d:ff:cb:f4:7f:
                    8f:71:8c:0b:c9:d2:20:54:f9:05:c5:2d:21:1e:67:
                    cc:73:8b:81:6c:87:32:94:ca:80:34:81:58:3b:e2:
                    fb:1c:d1:5c:6e:40:04:df:8c:51:e3:3c:c7:1c:60:
                    63:f4:02:54:78:3a:76:65:81:f7:a0:bc:7c:1a:2b:
                    9c:11:ee:a8:6f:3d:8b:74:d3:6e:1e:71:13:d4:ee:
                    43:8e:1e:03:d0:e6:94:3d:e0:7e:a7:f0:b9:19:32:
                    25:98:41:c3:87:8a:f7:33:ff:2e:fa:02:3e:94:fb:
                    59:c5:5d:3f:56:3d:87:1a:02:9c:79:b2:f9:a0:86:
                    34:d4:ae:83:78:ec:64:89:26:3b:fe:9f:78:85:6c:
                    88:f3:69:25:99:5e:1d:81:70:e8:67:d5:e8:ba:0e:
                    94:42:7f:03:57:79:11:60:ad:24:d7:f4:03:86:ad:
                    31:88:53:3e:3b:5e:12:d0:d0:3f:dc:c1:49:ac:28:
                    09:c8:e0:60:20:48:f6:c3:77:08:0c:bf:d6:11:3d:
                    a4:64:37:0e:a6:c8:7b:84:e1:c5:b3:51:07:18:a4:
                    05:06:31:19:40:e6:eb:75:9f:ab:57:88:52:21:40:
                    08:e8:35:4b:c0:e3:e6:15:a6:eb:7e:37:0b:73:ed:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:9B:8C:43:63:74:7D:4E:5C:36:75:2C:44:60:1A:15:86:6F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94973278-f534-3c2c-8216-5d43fa28f5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.152.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:78:9d:30:db:b6:b8:99:67:a3:eb:cc:d5:02:f3:0e:5b:3d:
         12:97:b2:55:62:a4:c2:47:6c:68:ac:bb:1a:0e:01:39:7a:af:
         c7:e9:d0:ea:ae:88:d4:12:76:86:3f:d2:c9:f1:a3:d2:7e:f2:
         af:a5:a9:6b:5c:24:23:df:9a:8f:15:5e:34:24:6e:cc:8b:d9:
         be:6e:6e:3b:35:d4:1a:a2:95:f6:20:4b:bf:e4:5f:3b:82:ee:
         ce:0c:30:19:31:2d:1d:61:ed:4d:e4:4e:76:df:72:84:6b:2e:
         34:6a:ba:4e:6b:73:a7:df:73:06:a2:e2:ba:13:0b:c7:ae:6b:
         93:8c:ce:a2:3e:13:c1:c0:bd:d3:2b:53:45:a6:03:17:47:68:
         90:77:1c:ba:9b:f9:78:de:a6:a7:7c:19:46:83:ae:80:5e:6d:
         32:36:ff:fd:2c:e9:0c:45:e0:1e:47:37:0c:a6:c4:82:d3:2e:
         7a:66:08:ff:bc:c9:16:25:d0:ec:db:c1:b7:9c:07:8c:5d:35:
         ad:d1:60:d9:1f:72:96:73:87:73:c6:52:c3:12:3d:19:f9:a2:
         95:33:52:3d:13:62:56:65:e5:9f:8e:1d:b6:e2:00:5c:b1:c2:
         b7:c1:96:6a:47:a3:c5:ab:6b:cb:d5:24:a3:20:89:a6:e9:d1:
         9a:08:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:12 2025 by rpki-client