Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9e48269-1278-3c37-b84d-79a510de929a.roa
File:                     b9e48269-1278-3c37-b84d-79a510de929a.roa (raw, json)
Hash identifier:          GbokcO53yjwf+0jwNBjug0uJ0/cDadWvr4bssSfkE5I=
Subject key identifier:   7E:80:55:65:8E:4E:A1:58:A9:6B:BD:AC:AF:7E:2B:06:F8:68:F9:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4C064D2AD48E8690D577C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9e48269-1278-3c37-b84d-79a510de929a.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        108.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:c0:64:d2:ad:48:e8:69:0d:57:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=3b0f6e39-eadb-4875-8bfb-0957bce7d4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:b8:97:1b:a8:16:95:a6:88:16:10:cf:75:
                    89:b7:ec:23:1b:3f:4f:fe:b3:d4:47:30:67:f8:9c:
                    2c:a1:e5:2f:97:5d:93:d5:2c:9c:a9:92:65:7a:fe:
                    4d:69:46:fa:ea:d8:0d:11:4d:86:1a:ac:d5:a4:dc:
                    f2:f8:4a:4f:c3:06:20:b3:98:f8:c5:df:5f:2c:a9:
                    e1:f5:03:ca:f7:35:58:17:5a:6e:cf:89:bc:49:61:
                    10:0e:05:6e:dc:bc:91:ec:8c:4c:6c:d4:d3:95:34:
                    57:9a:ed:d0:68:24:bf:ac:76:6e:5a:e4:ae:86:3b:
                    02:a4:74:d9:7e:5d:dd:ce:bc:9e:5b:d9:f5:c4:dc:
                    6e:bc:85:ca:d5:32:96:64:88:2d:30:ea:68:cc:01:
                    1e:1d:87:57:e5:14:3e:a0:61:e6:94:37:9f:c5:ef:
                    4b:a1:84:5b:6b:dd:60:69:50:fd:f8:29:dc:65:95:
                    fe:75:7b:89:53:ea:0b:db:1e:c6:d0:79:37:4a:f4:
                    20:ee:a1:df:27:9f:4f:5d:86:bd:dc:ec:f1:d2:67:
                    66:95:11:30:a9:3d:82:99:ec:5e:9a:5f:01:4b:80:
                    0e:d7:e6:ab:e5:bc:d2:9a:f3:0a:9b:a7:a8:1d:ee:
                    44:60:3e:9c:7b:70:52:d9:1c:7c:1c:d2:94:79:17:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:55:65:8E:4E:A1:58:A9:6B:BD:AC:AF:7E:2B:06:F8:68:F9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9e48269-1278-3c37-b84d-79a510de929a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:ac:3b:62:eb:b5:58:19:f7:0f:d9:5b:8c:43:a3:8b:1e:
         2f:9b:c7:67:36:10:10:89:61:47:4e:44:63:d1:a7:29:8d:d9:
         05:e5:a8:fd:3b:22:05:1f:3d:fa:0d:44:c2:6a:5e:f3:d0:ba:
         c4:f9:b9:3e:c1:0d:67:69:13:f7:8b:4f:cc:11:7b:96:6c:6c:
         ab:5f:e5:df:7c:c3:fc:ec:b0:d3:29:78:08:5f:20:ff:25:7f:
         15:a8:e1:dd:5f:cc:5c:5e:21:f2:81:e3:4e:10:73:a0:f0:b6:
         81:63:8c:a1:99:23:30:12:d6:95:7f:ed:e4:8d:42:a2:4d:08:
         41:be:b4:9f:1f:a7:67:c2:88:24:68:1c:9f:b0:3d:70:04:53:
         e5:53:3f:4e:f3:7e:aa:d6:74:f1:6c:c6:65:e3:aa:ab:76:0a:
         ed:1a:e8:58:6b:66:9c:8c:92:2c:c2:50:0f:95:3c:8c:f3:6c:
         04:ac:f1:0d:43:d4:5a:a9:97:f6:f9:3e:49:b1:7a:c5:28:6b:
         42:d3:06:22:02:e7:6e:6b:22:5d:f8:5d:87:b5:43:3a:f9:45:
         a6:53:12:07:58:e9:50:b9:42:3b:0b:c9:fb:7d:5e:ab:a5:5c:
         b8:99:9f:0d:3b:2d:c7:81:0c:b4:22:cb:cb:66:75:5a:51:03:
         8b:b9:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:50 2025 by rpki-client