Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb07c89-0bae-33c0-b952-2278892dadd5.roa
File:                     abb07c89-0bae-33c0-b952-2278892dadd5.roa (raw, json)
Hash identifier:          OPDEkOKoA7e66IgdFKhoqQJuLLK/klP7JjRLk1sMT70=
Subject key identifier:   DE:18:7F:DC:60:5B:DA:DB:0F:B4:D8:81:6C:FF:62:9D:FD:E2:08:93
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405FC747860EC8DCF0C3992880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb07c89-0bae-33c0-b952-2278892dadd5.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        74.233.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:c7:47:86:0e:c8:dc:f0:c3:99:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=307893b5-a6c2-4825-bafd-126874a5771d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:dc:2d:69:27:6d:fa:b2:fb:9d:36:db:2a:
                    12:1e:47:60:b7:f1:86:26:f1:c3:2d:cd:98:22:c0:
                    ff:50:44:14:5b:91:4a:8b:ab:06:ad:16:52:98:19:
                    59:31:89:d5:98:e6:88:07:93:77:b1:77:b9:b8:d4:
                    8d:31:0e:43:48:88:62:3e:e1:ca:f7:40:83:ee:7e:
                    f3:a3:98:12:3b:6c:be:5e:9c:ba:55:74:a6:97:cd:
                    3c:6e:e8:ac:b4:d1:b0:96:85:6f:cc:27:74:86:0c:
                    1d:f3:28:ff:9d:64:05:bf:28:c5:93:54:6e:fe:14:
                    1a:fe:ae:62:3e:ef:bd:49:77:64:29:00:ec:61:35:
                    18:db:7a:56:97:75:8f:53:b2:a7:13:3d:3e:f0:6e:
                    43:9b:65:b4:3d:9a:7f:5e:7f:ea:8a:45:b5:b7:bd:
                    b8:a7:d1:35:34:1a:7d:d9:69:29:df:f0:13:e1:9e:
                    8b:a9:5a:a7:cd:09:c5:5d:4c:0c:e5:a0:13:56:4c:
                    20:7d:bb:2b:fa:0d:d1:89:28:81:07:77:37:c1:cd:
                    bc:b6:17:7d:4e:dd:e7:89:38:92:26:3b:1f:1b:74:
                    3a:d5:63:29:fe:ca:72:03:4c:43:98:f2:c9:0b:e0:
                    17:c9:02:c5:ad:80:7f:60:19:5f:de:bc:fc:e4:24:
                    7a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:7F:DC:60:5B:DA:DB:0F:B4:D8:81:6C:FF:62:9D:FD:E2:08:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb07c89-0bae-33c0-b952-2278892dadd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.233.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:29:4b:ce:f1:3d:8d:8d:05:8c:ea:cd:ac:12:d1:61:cf:
         7b:71:b4:ae:e7:ff:b1:b7:76:e8:48:4a:e0:5b:03:a6:3c:d4:
         6c:c7:3f:27:0e:2c:3e:b1:7b:c4:a3:cf:c1:8c:3b:b8:4f:43:
         03:8e:27:5f:65:07:52:8f:40:ac:28:4c:9a:09:35:c4:3e:83:
         22:d6:11:d9:e0:ac:07:ae:06:a6:56:7e:5e:2f:cb:ad:60:e2:
         8a:b6:d7:f4:53:4a:7c:1a:b6:5f:ad:fb:f5:0c:31:ea:96:40:
         c0:a2:3d:01:39:63:cd:40:a0:6c:34:a9:7a:a5:12:b3:f4:d9:
         e6:36:42:d6:0e:22:bb:1d:bd:2c:b4:eb:ef:c2:28:23:36:51:
         da:13:31:d5:9d:3f:b2:6b:cb:1e:ef:34:2b:04:56:a8:b8:e0:
         d2:65:78:97:eb:0f:a8:53:ed:31:3b:f0:c4:e5:f4:02:03:a1:
         c1:71:ab:ef:a2:63:61:53:27:d7:f6:9b:a1:86:1f:d0:ee:36:
         50:cf:37:45:8c:87:d9:fa:ab:7e:d8:0c:33:99:07:24:da:dc:
         44:ea:21:b7:78:e4:36:ca:1b:80:99:fa:46:2d:ad:b2:c3:53:
         fd:b7:ee:83:22:5b:fe:11:c8:3b:98:fa:87:17:00:da:fe:f6:
         03:7a:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:57 2025 by rpki-client