Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bad58efb-97e9-3496-9802-11603e0f404d.roa
File:                     bad58efb-97e9-3496-9802-11603e0f404d.roa (raw, json)
Hash identifier:          2URPEB4we4BLezDZ1gNOkhTu3yPzlFHLICbXbZ2gNZs=
Subject key identifier:   7C:F5:E1:E0:98:FB:8A:9D:5B:43:29:45:25:E2:0F:2E:EB:DE:61:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB025B45238324D14EC07BE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bad58efb-97e9-3496-9802-11603e0f404d.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        132.223.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:25:b4:52:38:32:4d:14:ec:07:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=ef2850d8-e30b-434c-9284-fdd784b0849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:a8:50:0f:56:9c:15:a5:df:8b:e8:bf:f1:
                    eb:a6:06:3b:fa:c6:95:51:40:d1:70:ea:b8:85:e7:
                    79:f6:e2:3a:b9:c4:b5:38:93:4a:22:24:d5:55:b0:
                    36:21:c9:cd:64:29:b5:06:46:07:70:de:80:11:98:
                    3b:f0:90:79:cc:83:d1:95:a2:de:d1:8f:67:c3:a5:
                    b6:23:60:3b:9b:e2:30:3b:65:b8:7b:7f:2f:83:11:
                    45:91:ca:63:4d:8a:db:4d:5e:39:fa:be:f0:1a:89:
                    26:8a:c3:e6:7e:91:68:5b:10:c3:6f:16:00:f4:3d:
                    09:0e:bc:31:8d:a6:2e:26:76:21:a7:b3:b6:c7:69:
                    0f:2c:45:13:f0:6c:f0:75:f6:36:db:41:20:00:cc:
                    d3:58:79:fa:58:0d:88:02:0c:86:3e:72:01:f5:56:
                    e9:06:ef:18:70:0d:19:be:36:fc:ee:d1:30:1d:90:
                    c0:98:aa:84:a2:c2:4e:56:c5:6f:ac:8e:af:95:4a:
                    6a:0d:43:2e:23:57:b5:74:93:96:c0:72:be:b8:00:
                    23:84:52:8a:22:da:29:e5:bb:66:da:10:37:75:10:
                    ff:99:40:a6:3f:a5:cf:1e:dc:8e:f5:02:2b:2d:93:
                    c8:77:a1:de:8b:22:31:0f:8c:59:b6:c4:a4:c8:be:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:E1:E0:98:FB:8A:9D:5B:43:29:45:25:E2:0F:2E:EB:DE:61:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bad58efb-97e9-3496-9802-11603e0f404d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:d8:ea:cc:b2:07:d1:1a:3c:b5:3b:fe:1c:bc:45:3e:c4:
         8b:5d:25:d3:23:e9:64:7a:d5:fe:51:5a:65:b8:73:ee:a0:1f:
         1a:59:b7:ea:65:c9:5f:35:c6:49:3b:6f:b0:68:49:3c:12:d9:
         53:ad:77:c0:0f:7d:7f:a3:ca:3c:03:dc:ed:72:0f:38:ef:07:
         1c:90:f8:5c:b5:06:12:4a:8e:ae:a8:84:5e:26:be:ea:89:34:
         37:28:bb:72:cb:59:06:99:1a:50:20:be:7e:85:18:1e:f7:73:
         33:7e:f9:88:09:09:38:5b:6e:07:31:12:3f:d4:bc:2c:81:6f:
         3e:18:f6:fe:73:40:bb:e5:d8:ae:05:ed:ce:ae:bc:86:aa:17:
         8b:d7:22:34:e7:3a:6e:0d:de:5a:4d:41:31:6f:30:9d:ee:28:
         35:68:3f:44:5a:af:0d:cf:7c:68:e8:ae:83:9c:1f:a7:25:52:
         ad:84:ef:48:de:0e:9e:3e:7f:32:9b:1f:49:1d:87:7d:82:08:
         e0:31:f5:9f:44:0d:8b:11:00:a5:70:87:01:49:2c:c2:33:11:
         a4:49:d1:56:41:35:4d:4c:c9:81:86:08:96:6d:1e:8f:66:a9:
         9b:ec:19:fb:65:74:b4:e6:bf:e8:00:bd:d9:63:25:bd:5b:39:
         cb:68:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:29 2025 by rpki-client