Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a088421c-9165-3c0b-b03b-57907549828d.roa
File:                     a088421c-9165-3c0b-b03b-57907549828d.roa (raw, json)
Hash identifier:          VlW1P1oe3wf23X0GXNslZ5JyRSOUAhCfnNzXx/7kDNY=
Subject key identifier:   42:2A:46:36:BC:82:FA:B4:EA:27:2C:53:8A:90:1F:A0:7A:DC:A6:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBD94FC3FB24D2AB9D4FB9730
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a088421c-9165-3c0b-b03b-57907549828d.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        70.251.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:94:fc:3f:b2:4d:2a:b9:d4:fb:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=ed1d6bb4-7c8e-477a-8667-034084d97a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:e7:43:aa:4e:6d:5a:ee:75:5c:e3:fc:19:
                    d3:87:fa:60:49:16:51:f2:13:6b:65:ce:30:b6:0d:
                    69:47:f1:bf:22:1d:ea:b4:cf:4b:ae:52:f0:15:e2:
                    62:85:9b:c4:86:d9:2b:1f:91:e0:a6:25:9f:7a:91:
                    d0:e3:84:aa:90:73:81:12:9c:47:e4:08:db:b4:71:
                    87:72:a2:dd:a8:d6:99:17:ef:d7:6c:ba:78:5b:7d:
                    c8:23:c0:5c:ce:5b:89:53:36:c6:15:d0:d2:fd:07:
                    12:ab:ba:44:52:9a:02:7d:08:28:87:0d:e7:9a:0a:
                    0b:55:ae:9a:e7:53:ed:60:0e:ac:16:46:c5:87:b3:
                    ea:ad:36:b4:dd:cf:0b:a6:23:03:c0:fd:ba:0f:9c:
                    4c:4d:3a:f9:07:ca:ee:ad:e6:44:e8:8f:61:23:3e:
                    1b:a5:3a:cb:f1:91:d1:ee:6c:cd:3c:d7:ec:97:75:
                    11:66:98:c8:34:61:25:08:b3:f2:7c:e7:f5:7b:26:
                    54:36:1d:9b:e6:cd:1b:6a:f6:05:8b:f2:49:36:21:
                    bc:67:fb:8b:3e:fc:f2:f3:c4:00:ba:b0:27:c3:7d:
                    4d:b5:bf:c3:0c:14:81:a5:b0:c0:e7:9a:87:3a:a6:
                    9a:c7:a3:9e:b6:f1:03:b8:83:ab:6f:87:2d:20:d1:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:46:36:BC:82:FA:B4:EA:27:2C:53:8A:90:1F:A0:7A:DC:A6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a088421c-9165-3c0b-b03b-57907549828d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:63:ca:2e:c4:16:e2:fc:78:6a:a2:dc:57:5a:9a:b8:af:
         b9:b2:88:66:c1:f9:97:a2:27:4f:e7:f8:d5:48:22:07:ab:38:
         b6:23:62:71:4a:2f:19:d4:38:57:d3:5a:0e:fb:91:50:f5:5b:
         2d:9d:fc:bf:52:73:13:78:21:36:67:a0:7b:76:1e:3f:49:49:
         d6:52:37:40:d1:3c:79:82:79:c6:e8:7f:7a:bb:8f:27:42:2b:
         f5:f6:93:fe:af:4c:a7:96:d3:c8:0d:63:2a:fb:4c:b8:4e:74:
         50:72:b5:2b:4a:94:43:51:fc:b1:14:bf:e7:7b:6d:e2:fb:c7:
         1d:49:04:42:38:18:1c:dd:06:19:ee:ee:67:ad:fc:a2:2d:be:
         a7:c6:6e:0f:57:e0:5c:59:2c:0a:c1:4f:53:1c:83:25:9c:73:
         35:96:4e:82:15:ae:60:75:77:41:db:8e:ed:3f:86:46:a1:79:
         f6:4e:a9:78:8d:6c:6d:c7:8a:35:8c:6b:dc:c9:b7:a3:4e:22:
         81:3b:fa:e7:8e:5c:1b:6e:7b:25:c0:a7:e8:75:bf:c9:7e:1f:
         82:2f:4a:da:7f:19:f3:76:e8:77:c9:bb:96:98:21:ec:72:a8:
         24:84:3b:22:d9:cb:3e:96:c9:16:52:51:2b:38:b4:bc:d3:e0:
         21:00:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:47 2025 by rpki-client