Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7d7e082-53f5-3cc8-a8dd-1c78af679df5.roa
File:                     b7d7e082-53f5-3cc8-a8dd-1c78af679df5.roa (raw, json)
Hash identifier:          LBi7yqK2CSg4CW5mG8JSq3UbsgtU1sphuOxevNSlc+s=
Subject key identifier:   35:FB:17:E8:64:6D:29:D0:B5:1C:C7:BF:66:0F:07:B5:10:FF:95:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D51481D727B06A5A118EF5B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7d7e082-53f5-3cc8-a8dd-1c78af679df5.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:48:1d:72:7b:06:a5:a1:18:ef:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=3beffb19-2d33-401b-a6af-db1ca76993bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:a4:89:99:7e:aa:10:8a:03:ca:63:94:92:
                    c4:0f:d4:ac:d1:d5:a4:ad:77:a4:3a:8e:3d:b8:fd:
                    f7:47:2f:b8:85:5e:77:df:20:3d:f6:c9:df:d9:3f:
                    9d:81:63:e6:a3:c1:bd:29:4d:28:ce:a2:77:f6:a5:
                    d0:cb:e0:0f:6a:5d:73:87:c9:89:41:05:95:d6:f0:
                    7e:8d:fe:85:a3:70:d9:0c:ea:01:e4:fa:a3:2b:5f:
                    36:e8:8d:6d:6e:c1:2f:e4:62:0d:f3:4b:53:0c:df:
                    06:1c:4c:fc:16:fb:64:38:f4:d1:ae:a1:08:01:7a:
                    b7:09:aa:0a:04:d2:69:85:57:9f:3b:9f:36:5c:34:
                    d2:b0:7c:ca:09:5a:20:57:ce:7c:bd:a0:4b:94:1e:
                    11:40:c1:31:ae:55:14:ad:de:89:5a:60:cb:ae:a1:
                    92:4a:fd:f1:cd:dc:01:d8:b3:07:2b:67:67:cd:b0:
                    f9:32:d5:82:c2:9b:1f:6f:6e:8b:59:63:4f:61:61:
                    b9:b2:c9:a4:17:cf:d5:9a:d4:ed:8f:21:14:72:fa:
                    40:17:31:25:58:96:b8:a8:cb:ca:13:7e:f0:83:09:
                    d7:a3:62:4c:44:11:a1:a7:73:c9:20:45:3a:3c:ae:
                    be:c5:de:10:f7:97:10:e6:05:d2:1f:61:c9:3b:a5:
                    6f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:17:E8:64:6D:29:D0:B5:1C:C7:BF:66:0F:07:B5:10:FF:95:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7d7e082-53f5-3cc8-a8dd-1c78af679df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:86:cb:3d:94:3f:e7:96:f0:b7:ca:7e:ea:63:c2:b0:76:94:
         f2:c3:37:c5:4c:17:8f:79:2a:d4:81:85:1f:4e:1d:0d:18:23:
         bd:3f:26:6e:3c:9e:c8:88:b6:f3:84:27:8e:26:e1:1e:5d:ce:
         9d:5e:70:25:10:b8:6c:f3:24:e0:08:eb:2d:14:17:d8:02:cc:
         5f:a5:3c:57:f3:59:ca:29:d2:1e:33:92:4f:85:ae:c3:3e:ab:
         7a:19:54:c0:41:1f:6a:f7:29:31:e5:bd:61:e5:a0:c5:27:2b:
         b5:49:2f:5e:67:71:11:46:d8:b1:8f:6f:0f:77:36:73:e0:72:
         da:b5:cb:45:42:54:b6:82:53:6b:10:e1:0f:91:d9:06:93:9a:
         aa:71:f2:df:a6:65:f9:64:e9:4e:be:16:81:ef:8b:12:ee:0d:
         d6:4e:de:02:4d:51:13:81:62:28:d7:13:66:b0:fb:99:76:b7:
         27:80:df:5a:f1:33:57:e2:cd:fc:dc:4b:62:8b:67:9c:4c:a5:
         c8:3f:b8:1b:9c:65:43:ff:14:99:2a:a4:74:7a:b6:6b:a3:d6:
         c8:65:62:e7:e2:5a:73:9f:71:17:59:26:58:53:3a:58:0a:41:
         fc:0a:63:61:57:23:04:91:b2:50:28:1e:78:74:96:88:27:23:
         f3:fa:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:11 2025 by rpki-client