Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae867613-46da-3e4e-baf8-81b45a5b7488.roa
File:                     ae867613-46da-3e4e-baf8-81b45a5b7488.roa (raw, json)
Hash identifier:          xXzOEdKHOuDOKDmxmlKE/Fdy4bdGZd7SmahsGXJz8ZE=
Subject key identifier:   A7:89:6D:76:B4:BE:A7:19:93:14:78:E7:7E:1C:B3:6C:0D:49:94:9E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584073686A80D991DDC41E88E180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae867613-46da-3e4e-baf8-81b45a5b7488.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:73:68:6a:80:d9:91:dd:c4:1e:88:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=ae170805-343f-45d8-9dbb-b10a6b4d97fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:c8:29:b8:23:f4:58:67:f2:6c:41:9b:0b:
                    53:ba:21:1f:51:4f:fa:05:cd:0e:79:c5:47:65:81:
                    50:3d:b5:87:2f:4b:ba:cc:bf:1e:46:bc:8b:29:b2:
                    19:81:7d:bc:26:3e:92:6d:9c:ad:a6:a8:55:87:c4:
                    d3:33:00:4d:db:1f:b3:e2:47:09:cb:b2:7e:52:bc:
                    53:34:97:ff:f7:5b:a0:94:6e:7a:6a:b1:4d:09:cf:
                    39:60:a5:c3:be:fd:09:e1:e1:57:4f:2c:37:15:60:
                    8b:4b:0f:dc:bb:67:e9:0e:af:5f:fb:5e:fc:92:04:
                    0e:62:85:c0:94:95:cc:f4:d3:30:02:04:9b:4f:38:
                    17:b5:a4:41:ab:f9:df:ef:65:e5:40:de:13:5d:c6:
                    83:9b:e2:19:83:c7:b3:ad:49:17:fe:3e:73:f2:c7:
                    f1:bb:83:79:91:a7:f3:8e:d4:f4:cf:5c:94:3e:5e:
                    84:2e:e3:2c:af:96:18:ee:a8:0b:c2:fe:11:12:88:
                    82:54:b6:7d:1a:ab:6c:42:59:b2:e5:39:b2:5a:f4:
                    76:9a:68:e5:2a:10:12:1f:4b:cf:26:6d:e4:28:42:
                    0c:4b:76:0c:0e:b2:7c:ea:a9:92:06:7b:86:f1:40:
                    69:38:7b:58:6a:5c:a7:b4:de:2b:f6:5f:f1:fa:fd:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:6D:76:B4:BE:A7:19:93:14:78:E7:7E:1C:B3:6C:0D:49:94:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae867613-46da-3e4e-baf8-81b45a5b7488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:53:10:38:85:2a:5a:1a:0e:66:ce:a2:3e:99:bc:02:cf:10:
         b4:e2:95:23:43:0e:e2:4b:e3:66:d0:7b:e2:5f:fd:96:fd:94:
         89:13:b0:b1:e2:ad:3f:72:c6:50:79:7f:71:18:a4:a6:4f:15:
         75:29:37:bb:aa:99:a0:e7:d0:13:dc:6e:a3:7d:09:d2:a9:8c:
         f2:69:7a:1c:20:b3:b7:d5:36:12:2d:5f:26:43:12:8b:d8:17:
         5d:9c:12:53:dd:68:80:80:e9:49:1c:b9:f7:ea:25:0d:ad:5c:
         17:07:cf:e9:a8:3f:8c:05:f5:c9:dc:db:ad:bc:55:89:0a:98:
         bb:18:52:92:e8:c4:fa:22:ac:fc:d1:ec:c0:1e:ee:32:ff:e9:
         ab:a0:1e:15:a2:ac:ea:cf:20:67:57:bb:8b:7a:e9:5d:c6:11:
         2b:bb:5c:96:da:4d:d1:1d:19:8c:2b:de:c5:7c:7b:27:e3:a8:
         c6:98:01:11:25:ef:57:ca:86:0a:3c:ef:20:4b:53:f5:5e:d9:
         2d:67:5f:88:19:b2:97:3b:8c:8a:a6:2f:9c:ce:63:3c:79:45:
         c1:e3:c7:02:b8:1f:1f:32:ac:1e:8d:07:00:b6:cd:f6:28:22:
         21:59:c5:82:83:28:e4:e0:ca:f4:c1:9a:83:25:db:07:2f:a6:
         f0:aa:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:16 2025 by rpki-client