Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c3928bd-f772-32f9-ad75-6fe08d3a2a71.roa
File:                     9c3928bd-f772-32f9-ad75-6fe08d3a2a71.roa (raw, json)
Hash identifier:          3eig4N1BDAWmDfhiPDb2LF18pcU/1We3st3ffRGVyAg=
Subject key identifier:   95:CD:CF:0C:31:00:F5:54:5F:78:BD:A3:CB:CF:DB:F3:73:0D:1F:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E464FDAB7158CEDA04B45C7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c3928bd-f772-32f9-ad75-6fe08d3a2a71.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.39.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:4f:da:b7:15:8c:ed:a0:4b:45:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=11694ae2-5e5a-4a5c-ba24-92644d8b58bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:1e:79:ce:a8:b9:c1:ea:65:13:c4:98:4b:
                    d0:46:ad:8c:24:fc:44:73:44:bc:cc:95:6e:07:5a:
                    61:28:d2:15:8f:e2:b5:89:f9:7e:2d:39:27:69:9d:
                    7b:05:ba:9f:3b:14:32:26:ac:32:e2:a2:1f:e2:b0:
                    03:a8:45:6c:55:a0:18:39:46:2b:dc:03:17:84:32:
                    f0:54:63:32:89:e7:d6:01:e7:2f:41:38:61:dd:7b:
                    93:05:d0:82:03:5a:64:af:ee:97:5c:f3:c5:41:d9:
                    91:12:59:3c:83:89:9e:0e:b1:49:a1:3e:12:0a:4d:
                    db:3b:84:b2:fa:db:5a:42:bb:07:61:20:fb:82:33:
                    63:54:6a:49:ff:4c:8c:bc:cc:39:ff:a8:a2:85:0a:
                    50:13:2c:c2:bd:3f:24:b7:de:84:bc:55:a4:53:2f:
                    81:48:1e:c8:f4:f4:42:6f:51:04:bb:fa:65:f2:99:
                    96:2f:56:ab:27:a7:09:cc:d3:24:e5:34:06:a6:45:
                    31:3e:75:fa:f9:b0:3a:31:2c:2e:a4:b6:71:71:71:
                    fc:3d:f8:2e:f0:c0:ad:6e:14:3b:1d:3f:5d:6b:5a:
                    49:96:3f:b1:04:43:1c:5f:92:1a:cb:78:26:85:b7:
                    46:b6:25:28:a4:ce:26:85:82:91:15:09:08:76:1b:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:CF:0C:31:00:F5:54:5F:78:BD:A3:CB:CF:DB:F3:73:0D:1F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c3928bd-f772-32f9-ad75-6fe08d3a2a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:68:29:0b:14:31:a7:b7:6e:0b:39:24:c1:29:bb:8e:78:
         a7:6c:fb:b7:ec:09:56:f7:49:cb:71:8e:0e:3e:bb:fd:5d:cd:
         1e:e9:b5:2d:11:16:d4:73:5b:f8:77:5e:08:fc:21:a7:b8:bc:
         51:2f:0c:bd:a0:1c:e0:b6:8f:9d:1e:d2:8e:9e:a8:49:11:b9:
         61:ab:0e:bf:3b:b1:6a:6b:99:ea:d2:8e:b9:15:a9:fd:76:0f:
         7c:2a:a8:6e:6f:8d:cf:6c:43:03:05:d2:46:50:35:94:3f:a1:
         eb:e9:8f:8d:70:66:12:8a:1c:f2:e2:44:5d:1e:ed:37:f5:0f:
         6f:1e:a8:f7:bf:83:6b:21:0d:92:30:70:81:80:bf:8b:9d:7f:
         43:dc:23:3e:c5:99:74:00:5e:21:b7:1a:9d:21:48:0a:e6:fb:
         3e:41:21:4d:24:80:ba:29:1a:10:30:39:9b:ad:11:1c:57:b1:
         4a:f2:95:cc:94:81:78:3e:ef:72:80:24:3d:e9:01:82:c4:b6:
         f5:2e:57:7f:5b:d4:ea:23:07:45:fb:5b:b0:de:82:52:28:ff:
         68:f8:af:aa:6b:5c:f7:b1:9a:26:d5:4e:70:08:29:0d:7c:c3:
         f2:17:1c:fe:54:6c:92:e5:b6:a8:2f:d6:77:9e:84:9d:46:be:
         8d:d2:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:04 2025 by rpki-client