Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf3cc9d7-f63a-327b-997d-d23d3bc43ab8.roa
File:                     bf3cc9d7-f63a-327b-997d-d23d3bc43ab8.roa (raw, json)
Hash identifier:          HDS+ns46c8vYxE63EWLh4gr5NEi63HqTgGbkvj6Dehg=
Subject key identifier:   36:99:95:A0:0B:49:36:B9:AF:69:67:D6:37:24:F1:08:E3:56:EE:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4EA11E6902D4164614D18C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf3cc9d7-f63a-327b-997d-d23d3bc43ab8.roa
Signing time:             Mon 20 Jun 2022 12:00:00 +0000
ROA not before:           Mon 20 Jun 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.179.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4e:a1:1e:69:02:d4:16:46:14:d1:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 20 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=81b73c6a-fc5c-47f4-84ea-2cdd8026f8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:e6:cf:1e:70:cb:4e:d4:01:97:6e:3d:c1:
                    bb:9e:e8:31:be:cd:d5:30:11:7d:b1:ec:2c:d6:5c:
                    fe:0a:85:b8:b9:ef:56:33:a7:00:f4:d0:6a:d1:2c:
                    77:c9:42:c3:9d:93:4b:cd:34:ae:1c:9a:39:5e:71:
                    de:90:66:0b:56:53:f5:da:3c:4c:f5:a9:43:c1:5b:
                    ee:1b:be:c8:1f:a6:81:90:f9:24:d4:95:87:42:1f:
                    90:f3:cf:93:a6:df:c6:7a:d4:41:86:b4:db:8d:c6:
                    b1:54:1f:5c:d1:e2:f8:0e:f6:4a:dd:f5:ec:cd:09:
                    f1:bb:e3:26:01:6a:bc:77:c7:16:7c:e5:88:1b:02:
                    c3:36:f3:f7:83:15:23:55:d1:e4:e5:68:4c:f7:80:
                    a1:9d:26:53:d3:8c:d7:ee:a6:b8:b7:4c:bc:96:ce:
                    56:fb:06:32:9c:4a:71:68:81:b6:63:78:f3:1a:d3:
                    47:9e:2a:a2:dc:71:7d:ee:b5:e4:d7:40:5e:13:7b:
                    45:c3:e9:32:3e:b1:20:b4:9a:52:85:ae:c1:b7:12:
                    aa:63:b4:a6:45:43:3c:2c:81:96:78:47:8f:ef:e1:
                    9d:65:28:7b:94:98:34:3e:9b:31:b9:e1:0c:98:e5:
                    9c:ae:36:d7:db:c3:49:4e:ae:85:1b:38:d8:e8:7e:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:95:A0:0B:49:36:B9:AF:69:67:D6:37:24:F1:08:E3:56:EE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf3cc9d7-f63a-327b-997d-d23d3bc43ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:40:d4:72:a4:8d:75:12:5e:49:39:2f:e6:cb:5b:4a:aa:
         01:03:2b:30:d2:00:6a:2c:67:4d:c8:94:84:74:8c:f2:56:c2:
         c5:26:67:c7:f4:15:ee:10:d3:7e:8d:70:27:54:c2:b9:3f:4a:
         de:10:e3:ba:5c:03:93:6e:93:d9:2f:68:b6:b7:d1:90:71:b2:
         b6:3b:51:56:0a:f9:92:e5:e7:25:04:0f:f3:43:4c:21:c9:75:
         69:65:6c:7c:04:5b:12:f7:98:9d:ec:24:a1:93:7f:f6:26:56:
         be:8b:7d:58:03:a3:bd:7a:d9:6d:7b:a6:01:43:3d:4b:21:31:
         a3:af:41:ad:0a:71:08:39:2a:ba:83:94:2f:91:16:1d:c5:b5:
         5e:fb:09:69:f2:ad:8b:1c:2d:7b:1c:b9:28:1f:13:0e:0b:f4:
         b2:ac:bf:f7:9c:37:5c:78:96:e8:2a:af:22:31:f9:dd:b5:17:
         83:7a:8f:d2:2f:8c:93:d9:15:30:39:e0:ba:cc:ef:6f:33:83:
         77:76:26:0f:9d:73:b3:7b:0e:c9:1d:ea:d0:44:fb:d5:67:4b:
         9f:f1:25:cb:c7:ba:74:4d:7e:e2:39:e0:52:14:ee:cb:84:dd:
         4f:07:ba:db:7b:32:93:e7:8d:63:ce:b2:bf:26:e3:88:5b:ef:
         ec:31:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:16 2025 by rpki-client