Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25c87a9-651c-3068-8477-4b24570ca11e.roa
File:                     b25c87a9-651c-3068-8477-4b24570ca11e.roa (raw, json)
Hash identifier:          piv4ri9FdiGart1CEeP8t5AJi1+Ap1ex/TutUu+SzKw=
Subject key identifier:   80:FF:07:06:DD:BB:48:72:3B:F3:A5:E4:85:C5:4D:86:4A:18:0B:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E58A1EC89BE29B3A1365D8480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25c87a9-651c-3068-8477-4b24570ca11e.roa
Signing time:             Thu 23 Jun 2022 12:00:00 +0000
ROA not before:           Thu 23 Jun 2022 12:00:00 +0000
ROA not after:            Fri 29 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        160.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:58:a1:ec:89:be:29:b3:a1:36:5d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 23 12:00:00 2022 GMT
            Not After : Jul 29 04:00:00 2022 GMT
        Subject: CN=7a2c35b7-1966-4b28-9b70-ff856e3f2ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:62:f8:5d:08:6f:87:de:1f:00:f7:9b:19:
                    1c:82:45:1a:78:ff:eb:92:52:bf:0c:1f:20:eb:f1:
                    87:87:97:b8:a1:b7:d4:11:b5:5d:99:76:06:b1:fb:
                    e9:cd:cd:0b:c7:0d:5d:e3:42:b5:23:3b:2c:26:0d:
                    3f:ab:3d:42:c2:9e:c4:73:95:fd:69:a2:fd:36:4e:
                    a6:28:9c:57:d4:cd:90:bb:45:40:f5:8b:af:3a:e0:
                    e3:9c:69:65:b0:50:1d:58:de:d7:13:5e:14:3b:ef:
                    e8:c9:f6:a7:e0:98:0b:e0:c2:bf:8d:1a:78:0c:a4:
                    d6:89:8d:5b:d7:6c:7a:67:a0:52:4e:0f:ff:fd:74:
                    9a:f8:55:2f:7e:30:b2:e1:6c:25:73:85:97:f4:0b:
                    b9:d2:a8:2e:e6:06:ab:96:93:c5:e0:a1:30:c5:f2:
                    0f:a0:aa:1e:09:12:7f:0f:26:42:fa:d2:28:0e:b3:
                    c1:48:1e:03:25:53:d0:54:5d:31:09:ce:fa:68:95:
                    70:7d:27:04:ea:9e:9b:c4:dd:f1:ea:c2:86:ce:0f:
                    f0:ef:49:59:ea:8c:8a:c1:4d:d7:42:1d:ed:d1:49:
                    37:d7:d9:03:1f:91:c9:82:3a:f5:55:1e:08:93:1c:
                    d0:e5:0c:e9:64:ce:7e:ab:93:93:10:a3:98:87:90:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:07:06:DD:BB:48:72:3B:F3:A5:E4:85:C5:4D:86:4A:18:0B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b25c87a9-651c-3068-8477-4b24570ca11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:47:1c:48:5e:db:2a:aa:44:48:7c:c8:4b:5d:3e:b5:37:
         12:38:96:8b:a7:2a:35:7d:ae:fe:c6:e6:2f:dd:bb:f9:15:7c:
         04:c0:a0:57:b9:b9:42:ef:05:6b:f7:53:34:3c:88:76:41:42:
         2c:b2:7b:0e:97:54:5c:83:be:e7:34:43:83:78:1a:c9:20:39:
         4d:4a:27:9e:42:62:8b:f0:94:9b:fb:f3:e2:a9:ad:60:15:42:
         4b:4b:23:c5:f3:0a:93:69:01:c9:17:59:b6:c2:1f:48:00:24:
         81:17:52:dc:ad:bc:9e:a3:4e:24:5c:e8:c7:62:59:40:33:45:
         fc:30:6b:70:3b:bd:e8:6a:0a:67:72:1a:1c:18:3b:24:5c:53:
         c9:1f:e5:09:7f:f6:ba:de:7d:28:b7:da:31:af:9c:16:14:cd:
         a8:51:0a:d7:3d:6d:53:ec:77:e7:2e:5d:77:7c:94:84:80:98:
         94:59:75:ce:f5:3f:95:f0:7d:e1:98:49:f0:c9:be:49:2d:1c:
         55:80:77:84:e3:b2:0c:dc:89:ad:d0:55:ab:c8:73:32:0a:48:
         80:d9:06:63:9c:44:08:d6:ff:08:cb:ef:d6:e0:40:22:df:58:
         b8:70:06:06:a0:8a:5b:66:72:6d:43:03:dd:44:25:7b:bf:fa:
         aa:32:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:39 2025 by rpki-client