Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8839b40-8a53-3722-aca3-c6e9e853258c.roa
File:                     b8839b40-8a53-3722-aca3-c6e9e853258c.roa (raw, json)
Hash identifier:          TrnRgB16MuZHopMo5ceO15fJ+8mte9JExoc34kl8mS8=
Subject key identifier:   20:76:E2:2D:41:94:54:BA:4F:4C:D0:EB:87:D6:C7:10:64:B1:CD:0D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404304A0A57D2B69090951E200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8839b40-8a53-3722-aca3-c6e9e853258c.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        64.187.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:04:a0:a5:7d:2b:69:09:09:51:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=306a57ff-3345-4fc7-ba1c-075222548b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c6:96:31:03:21:6c:2b:ad:00:e5:77:5d:60:
                    63:ec:d7:91:44:2a:1f:8a:22:62:27:06:5a:00:03:
                    a7:c8:e3:1e:7a:fc:1c:32:f9:13:59:79:ea:47:56:
                    84:87:8e:71:38:76:6c:3e:eb:0f:58:45:9e:06:8f:
                    c3:93:12:e9:98:47:39:b8:a3:84:25:7e:60:5b:16:
                    42:e6:81:04:9e:74:8a:ab:dd:2a:d8:1d:e2:00:23:
                    f0:27:7d:a6:ce:f7:12:2b:42:65:e5:16:f3:04:4b:
                    d2:27:36:c9:c5:90:59:88:d8:af:ef:5a:22:d7:fb:
                    ea:df:e0:e8:20:a4:2c:34:76:e5:1c:ca:6a:91:bf:
                    fa:7a:c5:5a:c3:4c:d2:d7:35:3a:a7:ff:c5:de:c7:
                    ce:d9:09:8b:a6:4d:60:45:aa:9c:d6:4d:7b:79:6f:
                    f4:fe:50:b1:d7:47:ae:d2:d8:01:e3:aa:04:7c:91:
                    79:2b:ea:15:3e:bd:77:a3:39:7e:ed:20:cf:fd:f8:
                    76:9c:49:cf:8e:f4:c4:67:ed:62:23:1c:6c:12:f1:
                    aa:30:d4:71:7a:b4:de:91:cb:dd:62:6d:92:a8:99:
                    5c:ce:9d:ca:6c:6c:43:dd:64:17:d9:6e:11:7b:78:
                    6a:1f:1f:1c:9b:d3:bd:94:d2:cc:6b:c7:10:21:07:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:E2:2D:41:94:54:BA:4F:4C:D0:EB:87:D6:C7:10:64:B1:CD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8839b40-8a53-3722-aca3-c6e9e853258c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:37:92:52:86:ec:20:25:1c:df:e9:58:cf:7b:c8:82:a5:f1:
         a3:85:d7:46:e1:8d:a4:27:c1:35:ed:5c:48:f9:e1:17:e4:98:
         d1:d7:8d:0b:16:a9:93:c7:95:41:43:68:f6:8e:19:5f:0a:7f:
         7c:5d:70:cd:f0:e8:18:58:a8:37:f9:8f:6a:1f:48:21:57:6d:
         5d:f5:55:08:d2:4a:f2:b4:05:ff:ba:05:f8:a1:dc:f7:3a:3d:
         fd:57:4b:a0:be:cc:2a:40:61:df:cd:b6:fd:49:3c:45:5e:91:
         c8:c7:65:e2:51:c0:82:20:51:d0:98:b4:a8:11:40:4c:f2:b9:
         9e:ee:80:4a:9f:0b:a1:76:47:63:0d:98:02:c1:fc:35:66:cb:
         a4:8b:a8:c9:7d:0c:a8:0a:a0:ec:fd:a7:ef:a9:3c:f8:29:f6:
         52:ab:b5:1d:f8:8f:dd:1f:97:2f:e7:32:36:dc:a2:12:96:49:
         ff:af:d6:72:59:c6:49:65:7b:a3:b0:93:0a:61:27:bb:fb:ac:
         65:0a:1f:3b:38:73:0d:6b:8b:5d:9a:59:2d:e3:80:4b:3a:64:
         3c:c3:5b:d3:db:ed:ea:45:8c:0b:05:60:c7:6a:a6:2f:a4:1f:
         5c:44:44:20:69:32:a9:82:03:29:ca:b3:82:d9:8f:b8:11:e6:
         45:fe:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:45 2025 by rpki-client