Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0f3f9dc-fc80-3d76-9491-989bd8f76c6f.roa
File:                     a0f3f9dc-fc80-3d76-9491-989bd8f76c6f.roa (raw, json)
Hash identifier:          zCOj2qghLvvi49nDUx6FCjOLhbbuxVoQQt1ghNfgABE=
Subject key identifier:   D1:66:BA:F4:E1:2F:89:7D:4F:39:8F:29:9A:97:82:11:A7:AB:3D:19
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3227AABD0153AEC8A456DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0f3f9dc-fc80-3d76-9491-989bd8f76c6f.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        70.237.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:27:aa:bd:01:53:ae:c8:a4:56:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=115fa9ee-6257-4f74-be8c-fc7d4a720757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:6f:a4:60:f3:42:cf:3f:9d:48:fc:e6:d9:
                    3e:ff:ec:02:77:47:2b:68:71:18:1a:d6:ea:f1:6a:
                    22:d5:52:0b:47:1c:5f:c5:1e:ac:9f:5e:a9:06:c7:
                    82:5e:14:ac:49:6a:fc:80:a2:85:5f:6b:3a:a3:e9:
                    a7:8a:04:ef:be:76:b3:7a:71:a4:f6:08:1f:36:a2:
                    53:f3:96:65:5c:b0:0a:00:e6:ea:6b:fd:8f:33:16:
                    f2:4a:4f:42:ff:da:29:b1:01:7a:e7:63:a4:eb:30:
                    86:d2:89:38:68:48:b4:0b:1a:88:e3:88:00:95:02:
                    b6:bc:f4:a1:c8:4c:19:03:fd:e7:6f:1d:aa:91:ed:
                    93:21:a8:b0:d5:51:46:95:5f:55:61:a1:27:19:f8:
                    29:9a:94:32:7d:52:85:f4:fa:53:7a:49:4b:10:eb:
                    f8:32:35:f7:ae:ea:3a:04:9e:35:cc:1c:19:62:95:
                    11:41:62:6a:4f:ef:66:63:5f:53:8f:f3:39:7f:e8:
                    9a:c6:55:43:4b:39:44:ed:ac:0c:dd:93:f5:34:81:
                    06:9c:f1:84:27:2b:92:aa:07:b7:ba:e8:30:7e:b6:
                    49:65:4d:24:a4:d0:10:17:94:cf:e4:28:9d:7a:ec:
                    2b:0e:48:4d:cd:8c:d3:97:1c:bb:3b:e0:34:57:14:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:66:BA:F4:E1:2F:89:7D:4F:39:8F:29:9A:97:82:11:A7:AB:3D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0f3f9dc-fc80-3d76-9491-989bd8f76c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.237.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:7b:ce:e3:00:2e:5d:74:c5:00:17:42:a3:c0:93:8f:3d:
         04:8a:0e:03:7c:e0:db:3c:e8:53:d0:ae:29:f1:0c:4d:9b:f2:
         78:c0:90:ac:bf:eb:ba:e6:64:7a:9c:67:78:84:e5:20:61:3b:
         8f:b0:40:a6:9a:08:20:7a:8a:49:34:91:06:d4:3e:92:67:d9:
         26:8c:89:9e:8f:c9:9e:b4:9a:6a:55:5f:4d:94:fa:7e:59:96:
         0d:97:1f:d2:77:d5:38:c3:29:4c:fa:71:a7:40:3c:eb:c0:bc:
         95:dd:48:3b:3d:29:b0:02:90:97:2d:16:eb:37:10:73:b8:6f:
         24:1d:7f:a8:1c:6d:95:82:dd:46:ac:ca:a7:41:68:77:b4:c2:
         58:25:9c:3e:6a:4c:5b:23:fb:4c:89:2f:af:5f:67:aa:a4:b1:
         06:50:ef:3b:c2:af:40:d9:e3:c7:68:db:64:69:c2:2a:a4:47:
         da:d5:1a:e8:1c:51:36:05:c6:09:66:5b:ef:ed:82:37:8c:8d:
         37:e0:72:be:56:f3:64:23:e6:aa:93:93:1e:07:e1:6d:08:53:
         63:10:17:4e:c9:a8:36:a5:82:62:6c:a8:8a:31:80:fd:bb:30:
         ef:37:93:7a:65:66:81:bd:8c:6a:e4:8a:6c:9d:cf:a6:68:ef:
         0f:26:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:48 2025 by rpki-client