Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de85bd9-f2d2-3233-af52-93c3d4995b17.roa
File:                     9de85bd9-f2d2-3233-af52-93c3d4995b17.roa (raw, json)
Hash identifier:          KWHdg2qEDQvdFZPXVe33sco1fPKSQlQ/16s38lD7DDE=
Subject key identifier:   FF:B7:FA:89:B3:54:5B:64:0A:2C:1A:19:D7:4E:57:9E:67:C0:F0:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBDAABC8D6B46CF6E929D9C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de85bd9-f2d2-3233-af52-93c3d4995b17.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        76.211.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:aa:bc:8d:6b:46:cf:6e:92:9d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=50e24765-1cc0-4252-899b-418231fa94c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:1f:99:19:39:59:0e:49:e3:6c:3f:1e:ae:
                    2a:b8:1a:68:f6:68:fe:6e:81:21:08:e9:e2:d4:94:
                    70:d4:f1:ba:83:aa:76:f9:91:3f:17:fe:a8:09:26:
                    a9:24:60:17:31:99:33:9b:47:07:1b:42:4b:ed:31:
                    5f:7d:1b:96:37:42:fe:d1:40:dd:ac:cb:4e:ca:56:
                    ea:fe:f0:d2:37:55:26:d6:44:3c:a8:a9:7f:60:b6:
                    39:23:f5:f1:00:5d:13:3f:75:92:b7:e7:7e:99:e9:
                    69:a2:b4:e0:80:ee:48:47:51:de:d0:98:68:9a:df:
                    35:3e:af:f6:e0:ba:f2:b3:8d:f0:58:8a:0a:aa:29:
                    12:53:99:a2:95:8d:99:b3:00:ca:92:a1:ed:6e:b2:
                    8f:d3:c0:a7:dc:78:d9:83:2d:0b:25:55:e8:13:45:
                    d1:7b:04:b6:27:db:76:af:d5:51:86:00:d6:f7:ce:
                    6a:f0:37:13:a1:0b:e0:f9:91:e8:11:a5:5b:ec:bc:
                    08:47:3f:bb:9e:f6:fa:58:b7:56:ee:79:22:6a:41:
                    38:3b:df:55:39:f7:02:99:52:d4:82:f0:2f:e0:8a:
                    de:9d:3d:85:7d:a5:e2:d1:bc:6b:87:bc:6a:91:b1:
                    09:f7:1a:0c:29:e4:fa:33:5d:8e:7a:f4:45:aa:b6:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B7:FA:89:B3:54:5B:64:0A:2C:1A:19:D7:4E:57:9E:67:C0:F0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9de85bd9-f2d2-3233-af52-93c3d4995b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:83:87:35:e3:4e:e3:3b:3e:a1:9e:bb:83:c7:cd:cf:df:ee:
         e1:1a:a1:6c:ec:5f:1e:33:18:17:9e:43:04:54:59:e0:43:5f:
         f6:c7:16:e6:a7:15:be:15:b6:11:d9:35:66:95:cc:67:71:76:
         a4:c5:53:30:a5:00:ad:e0:40:86:70:96:b6:db:d4:81:7c:26:
         c9:0d:0e:9b:88:e9:c1:25:24:7f:f1:54:6b:51:03:de:0b:1f:
         07:d6:13:26:ca:f7:a0:72:b3:b4:9e:0a:7a:8c:ca:ee:81:54:
         4a:a1:f5:93:eb:6c:5b:78:4b:62:7b:bd:48:75:76:8c:06:0a:
         83:76:89:bd:d8:3e:77:fd:6f:90:42:78:79:5e:83:19:1b:9e:
         2f:02:71:53:24:ec:d3:40:70:8c:7c:54:a0:e7:1f:95:37:28:
         b1:29:dd:53:87:72:a4:67:13:ab:cd:f0:f2:a5:13:71:5a:2d:
         d7:5b:de:aa:96:58:82:87:07:d1:c6:1f:0f:b2:15:c5:f3:0a:
         96:44:18:6b:3f:70:62:b8:e5:ad:b2:c1:20:dc:fe:12:8a:dc:
         e1:0a:dc:97:58:58:2f:e1:95:5a:cd:f7:b3:9d:a4:e1:49:90:
         d6:72:5b:5c:6e:27:cf:fe:6a:18:81:e7:ff:28:78:0f:4e:55:
         31:a1:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:08 2025 by rpki-client