Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b55002e2-522a-3ab6-b78d-1ccc435b9838.roa
File:                     b55002e2-522a-3ab6-b78d-1ccc435b9838.roa (raw, json)
Hash identifier:          4PY720IhXQ6KeRmx5lrSnKbZLzaAoP7uPYVqf7RuryY=
Subject key identifier:   70:0A:71:4B:15:70:1C:88:B4:01:89:4B:9F:08:B2:89:D7:50:30:50
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D512A8461289DACAFEC145210
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b55002e2-522a-3ab6-b78d-1ccc435b9838.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:2a:84:61:28:9d:ac:af:ec:14:52:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=90da7a0a-3e9c-426c-a68a-b001474eda8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:ad:bd:1a:70:66:86:61:82:0b:bd:eb:b6:
                    1d:a1:b3:29:38:c9:ee:3c:63:9c:79:49:6c:a2:d1:
                    9d:d0:38:7f:8b:70:11:ba:23:7a:e3:1e:e6:c8:5f:
                    9d:80:da:6a:51:45:24:ad:ca:d9:fa:cb:42:9c:7f:
                    63:07:cf:69:76:ce:a4:25:11:0f:95:bb:9d:72:26:
                    66:48:80:4b:1d:ea:0f:38:d8:91:7a:a4:8c:6e:20:
                    79:cb:72:78:e7:77:c0:6f:5e:68:52:43:df:27:af:
                    ea:c7:69:a1:ff:04:ad:2f:e9:86:db:63:cc:5c:e5:
                    3c:6a:6d:df:0b:c1:f9:1c:8f:d9:b4:67:1f:28:28:
                    bc:7a:6d:f6:2c:a0:cb:ae:eb:0c:6b:90:e8:b6:73:
                    69:68:66:41:3c:22:a0:34:bc:a9:b4:e1:27:e8:4f:
                    31:a2:68:83:d4:1c:33:3a:b6:75:82:10:6a:31:93:
                    8c:80:a1:d5:9f:b8:14:be:71:e1:e6:2e:03:3d:80:
                    25:f6:51:99:a9:d0:ab:d1:c0:6b:9c:48:68:14:83:
                    fa:b4:e9:a6:7b:29:bf:50:51:37:85:fb:35:45:8b:
                    7e:ad:2f:91:ec:d9:be:60:d4:dd:81:38:99:35:19:
                    b2:ea:6a:4a:c2:62:88:3d:f1:bf:dc:6f:ca:23:9e:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:71:4B:15:70:1C:88:B4:01:89:4B:9F:08:B2:89:D7:50:30:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b55002e2-522a-3ab6-b78d-1ccc435b9838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:24:fa:fb:aa:3b:36:ac:23:8f:ab:96:3b:b3:98:39:1d:
         9d:ed:ca:d1:72:63:e9:34:18:08:f5:83:38:6d:89:ed:4e:6b:
         d6:2f:f9:91:53:ac:39:7b:fd:8f:d0:fe:f7:f6:7c:23:84:ac:
         c3:a1:72:0d:dc:72:6f:c6:db:b1:56:f8:7a:cb:a7:07:8e:cf:
         8c:a3:c1:19:38:24:ef:7f:31:17:eb:90:5f:f4:af:05:9d:86:
         71:a8:da:4c:63:57:5f:61:8f:6b:f4:9e:0d:e6:45:97:22:57:
         cc:8e:de:cd:94:4c:be:04:2c:13:4e:ea:72:44:a5:9f:6e:1c:
         95:98:c7:19:45:2c:3a:1d:bc:40:ed:53:1a:47:8a:48:68:df:
         9a:b8:5d:d8:60:95:66:0a:cc:e0:39:c8:1b:b5:ab:ec:86:3f:
         82:e8:80:88:4c:bf:6e:c9:65:a9:d0:88:6f:d9:ec:7b:85:61:
         55:e9:6f:bb:7e:d8:df:02:51:71:4c:33:3d:3a:6f:74:fe:78:
         5d:44:ad:72:e7:b8:30:fb:eb:4c:0c:9b:07:df:89:1e:c3:5d:
         78:88:29:6a:a0:bf:a9:74:64:19:8a:0f:0b:57:a9:95:4a:0c:
         21:89:60:35:cc:ed:e2:65:fd:21:f2:45:24:fe:84:b9:de:72:
         69:69:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:00 2025 by rpki-client