Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a01200f1-5987-3895-a2c8-72e7e3a6ebe2.roa
File:                     a01200f1-5987-3895-a2c8-72e7e3a6ebe2.roa (raw, json)
Hash identifier:          W/xWTPsuUxJKSDAV03onVJKNbGCmu9j/zMtat6m23jU=
Subject key identifier:   E2:62:4D:47:71:A9:58:2A:9B:07:84:A0:3E:C5:F8:4F:AA:D8:A6:FD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1F5F53C382056021069F71D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a01200f1-5987-3895-a2c8-72e7e3a6ebe2.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:5f:53:c3:82:05:60:21:06:9f:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=1e6aa907-739b-41e5-9cbd-1f498f4bde30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:b6:a3:d0:ab:ac:3a:94:f1:e5:ed:5a:e8:
                    2a:53:49:da:12:7c:71:38:54:a3:2c:f3:e5:3d:c2:
                    d9:12:61:db:c5:90:de:0c:b3:dc:bf:bd:7e:c7:7c:
                    a4:78:b5:0d:83:26:0b:13:2e:16:17:1c:b6:5e:7b:
                    70:e1:3c:0b:12:f1:03:20:15:9f:48:70:2a:cb:5c:
                    27:50:53:13:fb:f5:38:53:81:e1:04:75:bc:51:8b:
                    3b:6f:cd:2a:18:06:de:d0:5e:ca:b0:66:8a:63:97:
                    b0:c5:37:31:02:18:c1:2c:37:75:20:d1:31:70:32:
                    83:ba:78:0f:27:8c:5f:48:3b:01:cc:b8:6c:7d:13:
                    f6:13:8e:cd:26:5b:bb:48:f0:a8:83:e9:b5:ba:39:
                    2e:cf:f9:67:f8:13:01:83:d2:18:48:fd:a1:67:6d:
                    61:4a:a6:8a:cb:24:db:79:48:9f:0f:ee:dd:48:fa:
                    e6:6f:cf:e8:52:43:21:f7:d6:d9:98:d4:1e:a1:ec:
                    92:f5:ad:c1:cd:80:4d:d3:df:26:f3:95:62:3f:d3:
                    5e:9b:f5:9d:4e:0c:80:5a:9e:2b:cd:80:c1:f2:e1:
                    11:a1:71:13:43:9c:ae:63:b7:0c:fa:89:1a:a8:6f:
                    f6:2b:53:13:03:ba:1d:f1:ce:eb:ab:09:53:a2:06:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:4D:47:71:A9:58:2A:9B:07:84:A0:3E:C5:F8:4F:AA:D8:A6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a01200f1-5987-3895-a2c8-72e7e3a6ebe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:88:82:19:6c:62:19:fa:38:77:a9:9d:1d:de:18:0e:d7:
         2e:cc:79:4f:9a:e7:9e:62:8a:64:d7:ca:54:06:53:36:39:be:
         8d:cd:5f:bd:11:32:93:9c:8a:01:4b:45:62:52:f9:bd:4a:78:
         3b:72:c9:ba:34:c0:ff:21:15:64:82:1d:37:5f:03:46:87:72:
         35:81:a9:ee:4c:33:ec:6f:f2:f5:a3:7a:65:f0:8c:ec:1a:dc:
         9f:74:20:a8:60:e5:56:7d:80:21:97:66:dc:c5:fc:81:dd:78:
         02:e6:23:a0:0a:37:d9:6d:6b:17:04:e4:e7:81:ca:f1:9d:f5:
         b0:de:e3:87:73:f3:85:a9:85:be:27:48:f4:d9:c9:56:59:95:
         78:3e:97:37:00:4d:8e:40:a5:12:7f:a7:07:c0:47:87:44:c4:
         eb:a0:e6:ce:5e:8f:f6:43:95:b7:45:55:27:c2:46:f3:d0:50:
         50:19:3a:72:b8:c9:53:3f:4f:41:d0:07:af:0e:8b:b9:78:92:
         73:32:9e:97:9d:17:53:e8:f2:ae:5b:c4:67:0c:f0:fc:47:e3:
         38:d9:ca:59:bb:78:d8:36:be:b2:26:dc:95:8b:da:b6:6e:ab:
         1d:31:55:2f:ab:2c:a9:96:b3:fe:05:ad:fc:92:f5:75:75:63:
         2f:d3:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:03 2025 by rpki-client