Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9514de40-e198-3c28-8bb5-6e11a51cbe6a.roa
File:                     9514de40-e198-3c28-8bb5-6e11a51cbe6a.roa (raw, json)
Hash identifier:          ajl1VaeKhDm0b1I1BT29wKxCqXkZhtKfBNv8Wxny5qI=
Subject key identifier:   76:4F:ED:05:2E:37:BA:C4:53:DA:B0:41:7A:45:B6:0B:8F:1E:B1:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB31A5297AB94AE6EDE1CE800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9514de40-e198-3c28-8bb5-6e11a51cbe6a.roa
Signing time:             Mon 25 Jul 2022 17:39:07 +0000
ROA not before:           Mon 25 Jul 2022 17:39:07 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        56.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:1a:52:97:ab:94:ae:6e:de:1c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 25 17:39:07 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=24dbaa29-b5c5-418c-983e-a6e9467088d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:64:40:77:d9:07:a2:a1:b1:b8:3d:31:bc:
                    84:d0:88:df:df:97:43:49:14:19:7c:37:cd:80:cb:
                    86:6b:e0:86:4b:f7:ae:e1:a7:37:e5:80:9c:ab:1b:
                    63:7a:d9:7e:06:e9:c6:3f:b6:45:f1:4c:ab:7c:ec:
                    df:e1:1a:1b:9c:21:6b:31:ee:70:9b:62:67:a0:bb:
                    18:66:5c:f8:be:0c:67:4e:fe:12:f1:0e:4e:7d:70:
                    93:a8:2a:60:14:10:f1:9a:b4:8d:76:86:61:83:ba:
                    a1:07:38:1e:49:d2:63:e4:0a:e1:9b:4e:e8:0a:63:
                    df:95:56:0c:7a:13:d5:d8:fc:16:9b:d1:54:7b:cb:
                    24:81:73:45:4c:1d:b2:5e:94:be:b8:a3:bb:5d:54:
                    32:ef:76:49:25:48:30:34:1b:6a:e5:08:01:06:bc:
                    3e:e6:1d:7a:33:18:7d:ef:20:a1:e2:51:92:37:55:
                    bb:48:3d:6f:c2:3c:7d:4e:8a:2a:73:0c:72:a7:26:
                    56:d5:a6:00:37:b9:d0:4a:a9:98:42:a5:62:fc:4a:
                    5b:61:9d:66:d8:ff:3a:dc:28:07:63:88:3b:98:47:
                    78:72:95:09:7b:14:ae:76:b3:ef:62:c4:1c:63:a0:
                    3a:61:ff:6d:5b:bc:c9:c2:f5:71:dc:2f:4c:95:80:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:ED:05:2E:37:BA:C4:53:DA:B0:41:7A:45:B6:0B:8F:1E:B1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9514de40-e198-3c28-8bb5-6e11a51cbe6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:ef:b4:4c:ab:57:f5:73:ba:44:a8:6d:78:cf:63:f7:ed:
         ea:d4:bb:d4:c5:77:38:4b:3e:b0:a4:1a:55:06:8a:c7:d4:12:
         7a:30:7c:2e:90:86:04:b4:12:d7:f4:fd:44:69:ff:58:d3:95:
         c1:96:69:4d:77:65:82:00:3e:f5:9f:b7:dc:da:dd:d8:98:1d:
         91:3f:f7:27:9c:5d:9c:f9:62:8a:37:e6:65:87:1a:d8:37:af:
         12:f8:c8:bb:f6:b8:b5:34:62:a3:ce:9e:5a:ac:dd:2b:58:05:
         c3:6c:75:a2:eb:b3:d1:a7:92:08:7f:54:ae:5e:b5:67:91:a4:
         2b:9e:f4:2d:31:78:66:2b:cf:85:57:de:ed:aa:72:e2:fc:42:
         43:38:06:3c:05:f6:c5:86:d6:94:6b:ce:03:58:e8:6d:b9:b4:
         6d:c0:21:07:c2:c7:f0:8c:c3:f3:50:0d:b1:3f:87:52:c5:11:
         5f:94:f4:ac:c5:86:fe:db:7d:e2:8e:2f:ac:82:49:00:db:72:
         05:af:50:f5:53:7b:8d:9e:72:db:9c:44:59:a7:51:e1:d5:40:
         5f:6e:f9:af:e2:08:fa:31:cf:ce:dd:71:81:0d:0a:7e:78:f3:
         cc:c8:80:65:42:5d:70:86:43:e9:b7:1d:13:a9:34:ff:00:b7:
         ef:22:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:45 2025 by rpki-client