Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/975fdc7d-d2aa-34ab-9353-f4295a6e9731.roa
File:                     975fdc7d-d2aa-34ab-9353-f4295a6e9731.roa (raw, json)
Hash identifier:          opelfLswTg7XcBstlHeaUqfEX2FOXP6IpezArtbgITc=
Subject key identifier:   BD:3F:CD:63:73:34:65:06:D6:36:AB:DB:55:16:FC:14:64:D5:31:EC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBD9469A582202F508D4C8880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/975fdc7d-d2aa-34ab-9353-f4295a6e9731.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        64.187.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:94:69:a5:82:20:2f:50:8d:4c:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=aa8a114e-eaff-4534-82f7-f2c760e2aac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:96:32:63:15:5e:59:cf:a3:84:af:43:06:
                    03:e6:cf:79:53:11:98:d2:62:fa:13:60:ec:d1:a9:
                    dc:5b:2f:2b:4e:5d:83:15:93:b2:8f:15:dd:35:f6:
                    c1:16:45:98:8c:df:a0:b2:a7:d6:6f:f8:3b:35:36:
                    2b:79:fe:74:d5:32:db:d1:aa:f4:71:54:54:cc:6a:
                    54:eb:af:08:ff:1b:b7:f5:bb:92:d0:21:75:b5:08:
                    1e:fb:55:f1:57:0c:3c:20:75:c4:83:b4:81:81:51:
                    ad:53:0e:1c:95:7a:9e:ad:a2:45:82:59:14:07:59:
                    7f:25:4c:ad:94:2e:92:3a:85:e5:cd:2c:f7:e5:c8:
                    3b:30:e3:68:3c:e5:8d:c0:1b:9a:93:dd:9a:83:a1:
                    58:62:01:24:c3:90:e9:a4:f2:62:8f:05:04:97:38:
                    f8:6a:81:68:8f:bf:da:09:77:fb:a6:7a:0f:fa:11:
                    5e:8b:a0:c6:f3:55:68:86:a0:2a:3e:f1:66:33:ee:
                    b4:4a:3e:c6:34:aa:35:b7:67:93:2b:fb:ac:98:43:
                    d2:51:52:e4:63:56:9a:63:28:4d:8f:80:e1:2c:bb:
                    9f:44:46:14:fd:52:f8:dc:d9:70:8c:0c:97:eb:ca:
                    02:fb:37:dc:5d:f9:e6:84:66:7d:01:e0:f0:b4:3e:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:CD:63:73:34:65:06:D6:36:AB:DB:55:16:FC:14:64:D5:31:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/975fdc7d-d2aa-34ab-9353-f4295a6e9731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:a4:c8:ec:5f:bf:2f:0d:34:01:72:55:bd:b5:48:47:6a:
         0c:75:c6:5b:04:51:b0:20:87:41:88:21:eb:71:0f:a9:e6:b4:
         03:20:46:eb:93:91:b3:6b:89:18:c6:5f:3d:dd:4d:53:0b:29:
         df:38:a8:24:fa:83:a5:fb:0c:87:39:38:65:fe:3d:38:8e:1b:
         85:48:78:c2:0b:be:20:77:48:99:e0:d2:4f:d1:43:36:77:b3:
         35:e8:c4:26:61:1b:dc:49:29:9a:4e:cc:dd:69:b9:44:f2:09:
         02:70:5f:fe:e2:d9:be:91:ad:88:8a:ba:f2:30:93:e6:c3:2d:
         d0:48:72:b1:d8:a5:3b:5e:85:4a:13:b4:33:a6:c6:bc:c2:be:
         80:3e:a8:48:c5:9a:3d:12:fc:75:4a:79:38:3e:51:75:01:57:
         aa:95:ad:b5:8f:a4:11:43:20:7a:e7:e8:23:01:bd:2f:fa:62:
         5d:94:d2:42:7c:71:92:04:55:20:dc:c3:99:8b:ee:e1:ef:47:
         3b:3c:0a:81:22:07:b0:04:e4:60:a8:15:0f:34:c0:6a:0d:49:
         5c:ba:c4:1d:c6:6a:41:a7:17:9d:52:fe:08:25:7e:0a:a2:90:
         0c:b9:9b:b9:3b:33:10:8c:ed:d6:9d:45:f6:cb:41:ad:ae:16:
         27:cd:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:31:09 2025 by rpki-client