Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1247429-1572-35f5-a23e-c5509d793248.roa
File:                     b1247429-1572-35f5-a23e-c5509d793248.roa (raw, json)
Hash identifier:          IyWA2C8nBHuokxBQi4aN8SyIIxcNyFEyfDJ6Wjt+4BU=
Subject key identifier:   16:46:AE:59:A8:1F:4A:A9:F8:0E:14:C4:F3:97:87:44:BC:A9:34:45
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584094D9E7702A2AC6C73A4C4240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1247429-1572-35f5-a23e-c5509d793248.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        107.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:d9:e7:70:2a:2a:c6:c7:3a:4c:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=8a0bcead-33d0-4a13-8cdc-baa007a401c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:60:7d:22:a6:d6:b9:2f:82:e2:ac:ce:1a:
                    95:79:41:84:c0:5d:ea:1e:09:97:9b:22:de:b5:f0:
                    c8:6e:01:87:ce:42:35:13:34:f7:e2:9c:02:cb:31:
                    ef:bd:9a:ce:25:85:b1:8a:82:40:84:40:5b:11:ff:
                    f9:60:64:70:05:59:5f:26:b1:06:d5:95:70:c0:3f:
                    99:3a:4e:32:bc:38:b4:a1:c0:7f:80:75:23:6e:c2:
                    d3:37:2c:c1:e1:59:4e:76:68:ac:e7:0c:1b:33:db:
                    10:7d:50:13:6f:9f:bc:6d:26:95:a8:44:34:69:18:
                    57:8c:a1:33:20:ed:2b:5b:77:e8:79:b1:14:10:ab:
                    e9:bc:37:09:7a:1d:7b:14:6c:94:3b:49:50:a8:22:
                    64:81:96:8b:68:1d:f9:da:ab:2e:f1:d4:bc:76:b7:
                    c9:2c:ef:f1:4a:27:b4:a8:69:7b:03:c8:de:16:23:
                    f4:76:44:fe:e0:0a:3d:1d:3f:9f:7c:b2:85:13:97:
                    66:87:71:6b:47:1e:0a:ca:93:a1:4b:f8:1c:4d:eb:
                    73:ee:10:6a:bb:4b:d0:f2:d8:84:19:4a:4c:76:d9:
                    ff:c9:f4:6a:87:54:1a:e8:45:5a:bf:cd:cf:2a:95:
                    c9:62:28:4c:c1:7c:38:9d:35:09:0d:06:1c:c3:4f:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:AE:59:A8:1F:4A:A9:F8:0E:14:C4:F3:97:87:44:BC:A9:34:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1247429-1572-35f5-a23e-c5509d793248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0d:a9:6a:0b:90:7a:21:61:e3:26:48:b0:e5:3a:de:26:a6:
         35:32:c7:1f:63:45:30:ea:e2:3a:1c:6b:99:2c:90:2d:04:1b:
         bb:39:ef:9d:41:30:30:a2:45:8d:fb:a9:aa:8a:f9:32:35:5b:
         99:31:41:bc:59:bb:24:b1:ca:12:48:10:95:0a:18:09:6b:b2:
         f2:6a:68:d4:ce:02:95:c2:25:cd:0b:31:f5:93:72:b2:3f:55:
         cd:1e:8e:ec:00:ba:9e:4f:30:0e:d9:e1:5f:50:fd:55:e3:bc:
         3e:94:bc:a9:7b:e2:b9:f3:ce:f3:3b:54:78:d4:75:86:b5:9d:
         b7:39:eb:db:68:4f:1b:b8:9b:7f:29:a9:68:c3:02:46:7a:00:
         29:99:4f:83:57:c1:fd:3a:b6:1b:32:c7:17:ce:75:ac:87:f6:
         ea:82:9a:72:c1:6c:e5:54:47:a4:ff:74:11:f2:e1:54:b8:10:
         03:e7:2a:89:f7:8f:0b:b1:e7:e6:c8:09:9b:52:a9:c0:bf:d6:
         92:c9:df:05:fd:7e:fc:65:97:16:d6:b2:9b:76:8b:7b:fa:8c:
         ba:2b:5f:28:10:dc:86:72:8a:a7:0b:86:85:89:66:c1:62:6b:
         64:10:ef:16:d8:99:c1:91:9f:de:57:b9:9e:e9:e5:de:7b:be:
         01:ca:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:36 2025 by rpki-client