Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a942ae73-00b0-3b7b-8e53-f8fff81525e5.roa
File:                     a942ae73-00b0-3b7b-8e53-f8fff81525e5.roa (raw, json)
Hash identifier:          a8wGqvhiQTn58yXUAh8lXa11IAlF53/xKLAHqJvgJvM=
Subject key identifier:   36:37:48:B9:60:C4:BB:48:5B:E7:4E:38:7E:89:AD:4E:C2:AA:8E:67
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406E5936FF1D5119A0EFF2C840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a942ae73-00b0-3b7b-8e53-f8fff81525e5.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        138.240.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6e:59:36:ff:1d:51:19:a0:ef:f2:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=d9b2e0b1-33a4-4361-b05e-262154978b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:d1:0e:6f:66:ee:5b:9a:85:6e:85:64:f3:
                    de:8a:ab:ed:33:8f:d4:0a:b0:2d:ec:72:5e:c3:30:
                    1b:b7:20:b5:0b:64:5c:45:63:21:4e:a6:bc:b7:8b:
                    ad:dc:9b:8f:e0:2e:ef:e1:f0:a3:84:a2:88:b3:23:
                    43:7b:6c:b7:da:9b:a1:63:85:a3:85:32:28:0c:dc:
                    bf:68:20:1a:21:78:f5:75:52:44:ee:7e:fc:59:1f:
                    97:37:fb:e0:02:4f:1e:47:4a:61:c9:54:34:d5:a4:
                    16:15:c2:49:70:a3:46:b1:5c:d0:06:fa:94:9a:99:
                    c2:47:1b:15:42:19:bb:bc:27:62:2b:c8:8a:2b:2a:
                    28:f9:55:97:88:3f:5d:e3:98:3d:5f:28:11:f9:21:
                    ba:09:ea:8e:fc:68:16:a7:01:f0:89:18:a8:51:5f:
                    81:e5:07:b1:82:09:4e:4c:7d:93:b2:f7:78:1f:b7:
                    99:32:d8:24:67:dc:69:d9:18:39:b8:53:a8:33:e6:
                    a1:d3:45:5e:ce:55:85:83:4c:3c:bd:6c:d2:46:c1:
                    2f:07:2d:57:9e:65:96:80:fe:1a:ee:55:cf:e7:30:
                    55:3e:64:86:4f:c4:e8:0d:14:45:fa:8c:ee:81:45:
                    f4:5c:01:c7:2f:32:bf:2f:c6:c8:3a:2d:0c:77:12:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:37:48:B9:60:C4:BB:48:5B:E7:4E:38:7E:89:AD:4E:C2:AA:8E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a942ae73-00b0-3b7b-8e53-f8fff81525e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.240.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:10:75:42:3e:61:a8:48:90:cb:87:d3:ba:69:3f:48:5a:
         8a:1a:fe:c3:78:4a:15:bb:b6:52:db:cf:c1:a2:68:82:b0:b6:
         27:3d:5f:38:15:b9:42:ff:9b:43:82:08:4f:4f:9b:60:3c:22:
         53:36:1a:47:cf:60:13:7c:6b:10:a1:1c:db:dd:64:fd:5f:22:
         61:b7:af:16:af:a1:ae:c2:50:82:dd:48:37:92:b6:47:0b:3e:
         26:02:16:68:6f:7e:20:8c:60:14:53:01:94:b5:8a:70:ae:a3:
         e3:72:a9:5c:ae:5d:93:2a:0d:2d:c6:cf:76:21:6c:f6:8e:aa:
         46:db:7d:85:5f:c0:57:11:37:d8:f3:6d:3d:da:d9:db:ec:dd:
         88:5a:83:b5:93:0b:fa:bc:ad:01:22:1f:d5:8e:42:3c:60:eb:
         7f:a2:d7:a1:70:a0:fa:58:12:13:68:87:15:b7:52:19:98:da:
         7b:58:b9:42:16:44:f8:43:70:cb:53:57:4f:a4:c1:4b:81:e0:
         af:f5:45:9e:f6:94:52:cf:8c:93:c2:c1:41:85:ef:97:43:0d:
         16:6d:6e:fa:11:49:d1:a6:b3:5b:0d:14:a5:0f:12:6b:fc:40:
         3c:a5:0a:0f:7b:79:42:7f:fb:ee:28:a0:7c:5e:ae:17:2e:92:
         b7:b3:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:51 2025 by rpki-client