Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a34aae-2553-3c02-8b48-d08a3a999740.roa
File:                     97a34aae-2553-3c02-8b48-d08a3a999740.roa (raw, json)
Hash identifier:          sJvpIYTGXL/ByEPgIRSzoRO20/wN76ATTHs9HZSMZ+Q=
Subject key identifier:   CF:FA:F6:7A:A4:1F:7D:58:40:EC:12:77:50:96:70:A1:02:52:09:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F84FA15F77ABD22B0D443E7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a34aae-2553-3c02-8b48-d08a3a999740.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        160.209.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:84:fa:15:f7:7a:bd:22:b0:d4:43:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=f64603ca-5cc7-4fd5-ac8f-9e99f3d76ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:69:c8:c5:2d:80:df:67:94:b3:54:8c:7a:
                    89:ae:7d:3a:a1:a1:77:54:49:c6:9e:c5:2b:c7:9c:
                    c5:08:77:39:b5:82:c5:c2:57:a3:a6:cc:8b:b6:6a:
                    f3:ea:42:7d:cf:8a:d8:cb:c8:c3:43:37:a6:c2:d8:
                    0d:fa:cf:80:83:f3:5e:77:f9:86:dc:14:e7:dd:89:
                    d4:14:d2:c1:9a:10:8f:df:74:00:4f:66:f2:95:e1:
                    19:ac:cb:35:4f:1b:40:a2:36:9c:87:16:48:85:58:
                    81:c2:52:61:2e:35:f5:b0:3e:9c:7e:99:ee:a3:a5:
                    8a:e8:6d:41:14:ae:fd:5e:99:d2:6b:14:72:1f:a7:
                    2f:37:d1:b7:94:33:70:6e:1f:02:5b:e4:7e:94:f0:
                    30:50:53:37:ff:9b:af:05:17:c9:4d:5c:9f:ec:7d:
                    d5:9e:d5:ec:e9:e7:a0:fe:f9:9d:fc:b8:ff:17:a4:
                    5f:9d:35:89:c9:03:a7:83:d1:f9:2c:68:14:dd:47:
                    7a:8f:ac:14:66:75:25:f6:ca:6a:b8:38:15:99:89:
                    bd:d2:61:83:13:d1:b5:86:71:e3:3d:63:1b:d6:ed:
                    12:9b:59:d7:56:25:64:17:15:39:0e:5b:31:7d:22:
                    cf:55:57:e2:68:af:26:ee:7a:95:f8:b5:99:68:f1:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:F6:7A:A4:1F:7D:58:40:EC:12:77:50:96:70:A1:02:52:09:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97a34aae-2553-3c02-8b48-d08a3a999740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:67:89:08:28:b3:19:d8:0a:6d:f3:34:6a:de:cb:ed:f6:
         4e:08:8a:34:bb:d3:c7:28:83:f2:9f:b4:6c:7d:dd:27:0d:ce:
         92:a9:33:b0:c5:14:87:67:21:34:3d:0b:af:dd:50:74:9f:57:
         05:75:3d:28:f9:cb:2b:9e:3b:c5:77:33:b9:a2:f4:07:4b:0c:
         fb:6a:39:ab:3d:c5:4c:0b:88:51:a9:31:f0:4b:13:40:24:45:
         35:82:db:5f:17:5c:af:85:24:0f:f6:8e:cc:6d:fb:23:4a:14:
         10:4b:fe:3b:de:dc:71:23:ba:23:db:6e:87:f3:8c:b5:98:4e:
         80:7c:49:c2:49:8c:51:ad:e4:5a:0c:43:0a:43:70:c3:bf:8b:
         7d:6a:08:ab:0e:4c:93:a9:8a:3c:9f:21:f5:d3:a0:b9:0f:dd:
         98:6a:17:6f:89:26:5e:41:0d:3a:45:a0:83:1b:5c:4d:87:56:
         2a:b5:f6:6c:e4:ad:a4:b7:a2:39:e3:c9:2e:27:b9:8b:39:62:
         0f:c7:10:e4:04:b1:db:60:15:0a:e5:bf:e0:55:f0:3b:44:4f:
         85:65:1a:b8:d8:80:3a:22:35:8a:60:43:ae:eb:e4:c5:76:78:
         18:b6:47:5e:d4:6d:97:d2:cb:41:01:31:82:42:ba:64:6e:6d:
         6a:b8:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:06:15 2025 by rpki-client