Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c90270-71cb-3f24-8776-5c9a0188e493.roa
File:                     a5c90270-71cb-3f24-8776-5c9a0188e493.roa (raw, json)
Hash identifier:          KVOtj04Z6K6zMzzokw0ryV9AR2bIVdvJABz7XIZEeXo=
Subject key identifier:   D0:A8:0E:47:F8:73:9A:B2:CB:CE:EF:B3:34:B0:0E:97:03:29:FC:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D6EC41ACC8290731B45D1F480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c90270-71cb-3f24-8776-5c9a0188e493.roa
Signing time:             Fri 01 Apr 2022 04:00:00 +0000
ROA not before:           Fri 01 Apr 2022 04:00:00 +0000
ROA not after:            Fri 06 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:6e:c4:1a:cc:82:90:73:1b:45:d1:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  1 04:00:00 2022 GMT
            Not After : May  6 04:00:00 2022 GMT
        Subject: CN=ef25ff2d-8fa3-4f28-b688-ada9ab73a9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:f4:4d:b4:20:09:ba:65:6e:1c:05:05:4b:
                    55:c7:ae:ba:e6:8f:7c:d9:97:01:e8:9f:0c:b3:33:
                    64:ea:70:26:23:b3:69:48:98:d5:02:e8:77:a1:5f:
                    f8:00:3e:57:c7:31:65:b5:c8:7d:83:a8:20:47:84:
                    9f:bd:b9:e9:e9:78:d8:cd:37:2f:ac:53:43:90:62:
                    aa:f7:89:37:62:bf:25:bb:c2:c8:7e:4a:82:d0:4c:
                    93:59:95:cc:e8:f6:ec:4a:ba:8b:8a:d3:76:76:42:
                    55:36:5f:38:d2:90:e3:82:7d:5a:45:17:ab:67:44:
                    3d:02:82:42:63:1d:65:06:75:9e:14:fc:de:22:d6:
                    c5:2e:6a:56:ae:cd:11:4a:26:93:b9:03:03:f1:6f:
                    77:c7:90:74:6e:47:56:b2:0e:11:d5:28:62:a4:b4:
                    fb:ca:c5:c7:5a:d1:f2:9c:bc:3c:d7:75:73:48:28:
                    7c:a5:41:8a:7c:84:f2:eb:cd:62:57:90:47:52:31:
                    b4:05:5e:71:8d:b0:cb:63:32:19:30:99:7c:e0:56:
                    9d:78:dc:10:80:ea:2f:d8:8c:3c:33:a0:1f:dd:97:
                    0a:d8:82:cf:47:ed:f7:ac:cb:db:97:6b:25:bd:65:
                    4e:84:4c:62:6c:71:a0:78:44:42:af:3f:23:06:f1:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A8:0E:47:F8:73:9A:B2:CB:CE:EF:B3:34:B0:0E:97:03:29:FC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c90270-71cb-3f24-8776-5c9a0188e493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:86:f9:bb:39:dd:0d:06:ff:2e:99:22:6c:2d:e7:3d:e3:a1:
         39:29:b7:ca:24:d2:6f:3d:99:de:c6:ed:ac:22:7e:3e:72:40:
         3c:78:d4:8a:d9:b7:bb:35:58:56:23:cd:c0:80:e9:20:9f:03:
         cb:21:05:a6:2e:75:c3:25:aa:e0:22:d5:fd:68:0a:fe:d8:fc:
         61:35:50:35:d7:1c:77:4d:31:90:34:37:cf:9a:d9:b3:e2:62:
         19:7a:73:c4:3a:3d:ab:24:23:0a:12:a8:46:6f:fe:88:98:27:
         03:27:78:a8:9e:c5:89:82:d7:67:8f:d2:48:39:3a:c9:43:fc:
         0a:be:10:b7:15:1f:a9:b3:72:f5:b0:e1:e8:dd:4f:d7:a4:51:
         8a:5e:88:5a:1d:55:3a:9b:10:d7:ee:68:9c:73:3a:b7:53:88:
         3d:39:3a:77:9a:20:7b:8e:bb:dd:d2:da:e5:1d:15:95:4c:e9:
         66:71:93:26:3e:04:62:6f:c0:b4:8e:b3:1f:1f:db:8f:63:2a:
         06:8b:71:91:dc:95:2f:50:64:ec:0d:5c:dc:74:93:ab:8d:57:
         67:4b:30:e1:09:54:25:64:f0:68:0b:f0:a1:ab:5a:f1:f6:6e:
         0c:9e:f9:e6:d7:c3:5f:be:7c:07:a7:a1:9d:b7:98:16:b4:7a:
         33:83:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:33 2025 by rpki-client