Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc06fe97-5b99-31d1-a1e9-86098486df61.roa
File:                     bc06fe97-5b99-31d1-a1e9-86098486df61.roa (raw, json)
Hash identifier:          3z8WWJ7OIC8ur2XK5aeC0uxbsfG+UXCKBpAGSHFmXl4=
Subject key identifier:   09:BA:FC:84:FF:40:3A:BD:28:E0:41:F5:23:9B:74:22:EC:2E:D9:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF2E6DBEFC9F6A9F4614E5280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc06fe97-5b99-31d1-a1e9-86098486df61.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:e6:db:ef:c9:f6:a9:f4:61:4e:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=70625f6a-bb25-4756-82b1-33f7c485863a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:52:34:60:85:be:47:c6:94:e1:2f:2a:a2:
                    69:3e:af:f4:7a:38:d8:58:24:80:4b:23:a5:ef:11:
                    c2:87:82:19:0e:a4:40:4d:d5:ec:d0:b5:3b:63:33:
                    ac:76:0b:66:05:38:c1:cc:65:0b:83:41:91:c5:1d:
                    8f:81:18:15:6e:19:fe:23:db:3e:e6:26:57:16:3c:
                    f8:ee:ec:da:55:0c:fb:9f:70:72:f9:62:3c:9f:bc:
                    f3:2e:16:32:ca:d9:80:b6:05:ba:71:68:87:1b:bf:
                    73:4c:0c:11:77:a0:e0:a7:db:72:5d:fc:1a:9f:a0:
                    d9:24:70:c1:6c:05:a0:b7:d2:35:c7:cc:bc:c4:7a:
                    7f:c5:d0:fe:4b:c5:06:d4:1e:c0:50:4d:09:6c:41:
                    0c:88:60:15:54:a7:5f:3d:65:93:80:ac:75:c1:84:
                    ca:2b:2d:fe:63:9d:4d:35:ad:20:aa:3f:2a:8c:3c:
                    73:00:bd:18:31:9c:8f:66:50:51:38:c9:da:fa:cd:
                    d3:01:91:6d:29:03:d2:06:dd:dd:30:12:13:76:69:
                    19:3c:22:97:2e:fb:b3:fa:63:19:4f:7b:54:37:63:
                    0c:2e:1e:f6:4d:73:f4:45:97:78:73:5a:4f:df:f1:
                    0c:f6:c7:f3:20:e6:a4:69:69:7d:db:6f:d1:e9:2c:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:FC:84:FF:40:3A:BD:28:E0:41:F5:23:9B:74:22:EC:2E:D9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc06fe97-5b99-31d1-a1e9-86098486df61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:a5:75:19:c7:e2:69:81:1f:7d:6e:2c:b4:b5:eb:c2:f4:
         ed:80:dd:3a:e7:24:1c:b7:19:54:be:ee:f6:d7:ea:58:10:28:
         3d:4d:dd:e3:a7:38:84:93:26:9c:a6:8f:cd:05:df:dd:bc:71:
         d2:d2:87:82:bb:47:c2:98:2f:0a:9d:92:e8:d3:8f:f7:4b:dc:
         bd:a4:67:f2:42:9b:c4:70:4d:35:60:0a:9d:dd:04:b6:81:1c:
         5b:b3:c0:90:9c:49:f8:d9:73:86:2b:2a:bc:18:e1:a5:eb:90:
         ba:f6:19:34:3d:a0:e5:33:55:d1:7c:88:4a:88:11:82:b0:56:
         86:68:5b:a3:f5:00:f8:bb:18:b8:d2:35:17:67:b3:fa:30:e4:
         1c:38:16:e4:0c:b0:82:13:3e:6c:4f:b5:b2:90:04:62:a8:0d:
         bf:75:a9:17:a4:d8:e3:1e:e8:da:18:5e:29:52:5a:8d:c2:28:
         9a:65:94:3c:ea:38:3d:92:80:ee:86:98:41:7c:fd:a1:2c:d6:
         26:fb:4a:e2:88:f8:3e:89:40:08:c1:9d:90:82:ff:d6:8e:f8:
         08:34:3d:5c:ab:98:94:6a:26:19:50:b5:d2:fa:ae:bd:1a:cc:
         a5:cf:b5:17:5f:f3:81:10:07:f0:a4:fe:ed:81:a9:a8:04:41:
         d2:49:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:49 2025 by rpki-client