Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca0d1c-949b-3afe-9d24-1b4ba240010b.roa
File:                     baca0d1c-949b-3afe-9d24-1b4ba240010b.roa (raw, json)
Hash identifier:          VBhO/tScRCrDN+A7LyqBam7MgzcJH/R2iO1v71/D+nI=
Subject key identifier:   D8:B3:12:FC:27:2F:1D:2C:B0:42:F7:D3:1C:56:63:AA:AD:51:6D:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6EF74E10B3BDA149D4D68E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca0d1c-949b-3afe-9d24-1b4ba240010b.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        69.107.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:f7:4e:10:b3:bd:a1:49:d4:d6:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=ab1f0c71-5648-4843-932e-9af54b647807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:83:6f:eb:7a:77:c0:f3:58:28:28:73:f4:8a:
                    2e:01:94:55:6f:24:ea:f5:fc:41:7b:70:3d:f3:3d:
                    da:82:46:28:ef:b2:5c:6e:b2:40:a9:54:d5:b3:ef:
                    3e:37:1f:57:ab:c2:90:7c:9e:cf:5f:3a:4c:39:86:
                    4d:3e:af:a9:dc:a4:b5:3f:dc:b0:38:46:24:9b:a5:
                    3c:9d:f7:9f:9d:03:b9:3e:13:e3:34:47:f7:d1:1e:
                    1a:33:c6:09:25:60:df:99:ad:3f:9e:ef:b1:62:af:
                    84:38:33:44:eb:cd:77:b9:a8:62:61:02:78:41:fc:
                    b6:8e:c6:cc:0d:cf:02:9e:f1:74:2f:0a:87:05:94:
                    e2:bb:ba:e8:63:b3:cf:67:e6:70:c5:8a:36:85:28:
                    89:71:f9:1a:c1:16:da:a0:86:ef:1b:21:7a:4e:a5:
                    b9:bc:36:f6:1b:2c:61:a1:ce:0a:08:e0:ef:65:53:
                    97:ed:03:15:7d:af:08:21:1b:72:bd:41:85:70:ec:
                    3a:ea:a0:34:60:7a:0d:1b:26:12:54:8f:fa:e5:a6:
                    8d:89:aa:f6:f1:6a:6b:33:48:95:9d:cc:cc:e7:5f:
                    90:5d:ae:15:a9:ee:b6:f2:dd:18:db:58:1f:5b:ec:
                    f7:e2:42:52:8b:85:85:78:62:f1:1a:da:46:d3:51:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:12:FC:27:2F:1D:2C:B0:42:F7:D3:1C:56:63:AA:AD:51:6D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca0d1c-949b-3afe-9d24-1b4ba240010b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.107.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:de:d4:ec:54:63:88:cc:8f:6b:c0:6d:c9:6a:2a:a3:87:14:
         ae:92:d7:ae:5a:4a:54:94:d3:37:11:66:19:2f:b2:d9:9d:ea:
         d8:16:54:05:4d:b0:ca:59:b1:45:e2:06:c3:2e:85:c2:a1:b6:
         78:e4:68:21:55:32:63:0f:02:96:aa:9b:d7:bd:f4:16:f1:8f:
         2a:e6:07:ba:6f:fc:34:5f:20:4a:3e:ab:d5:f6:ba:96:8c:1e:
         b2:cb:8d:af:d4:24:12:aa:fd:c0:43:f8:66:d1:76:bb:6f:16:
         87:62:70:7c:7f:f7:e3:dd:06:1e:0b:cb:02:94:81:f2:e9:3f:
         11:5b:c9:3b:57:c9:54:8b:da:85:ee:6a:8b:2a:e1:83:07:c8:
         f0:22:fd:d0:8f:af:fc:52:f0:09:b7:7b:dc:59:d4:83:c9:2a:
         00:e0:42:a9:2f:20:a6:ca:97:9d:4f:8b:99:84:37:b3:5a:1a:
         04:74:ee:6e:4c:6e:f1:8f:9e:a1:f2:07:8f:47:20:e8:dc:4a:
         fa:95:2f:39:da:48:6d:7d:c6:ab:a2:3f:f6:e0:92:a4:87:db:
         fa:f3:55:59:be:02:38:cb:2a:d6:bb:d2:dc:fd:eb:69:3f:cc:
         96:77:15:6b:d3:1e:d3:e8:0b:46:a4:d2:cb:1b:10:f4:a5:2a:
         43:3a:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:12 2025 by rpki-client