Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2be2cf2-bf86-3003-8951-d94868575d28.roa
File:                     c2be2cf2-bf86-3003-8951-d94868575d28.roa (raw, json)
Hash identifier:          g+spGPvZLWIAZFMYHf7pT7H+dgCGZPIZGBr6DMPpRPg=
Subject key identifier:   6B:86:52:93:E2:3F:95:02:B5:D6:3A:DB:50:2F:6E:E8:64:6A:55:4D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E454B291DC5DBF034F7DE8D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2be2cf2-bf86-3003-8951-d94868575d28.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        207.207.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:4b:29:1d:c5:db:f0:34:f7:de:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=4103aecc-5cb5-4bf4-ab5a-ae6ec20fbf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:23:4e:d7:0e:93:6e:c8:92:34:ee:74:87:
                    26:ed:8d:b4:0d:e5:25:de:59:10:0e:f2:9f:ca:8c:
                    ef:52:ea:11:53:65:06:42:18:8c:4e:1f:6c:ea:b7:
                    99:93:97:c7:d1:e5:a7:6f:37:75:a4:2f:59:2b:12:
                    89:48:9f:af:f2:b5:b5:0f:01:7e:8a:57:cf:dd:9e:
                    a4:3f:b3:44:d8:7e:4a:4b:01:32:b2:7d:6a:56:64:
                    a9:b6:08:b4:11:2e:3c:ca:58:a5:17:09:a2:8a:15:
                    b9:25:6d:18:a9:67:c6:01:2c:e7:c2:7b:f9:f1:b0:
                    38:f3:d8:fc:ba:1f:ad:fe:45:21:d6:cb:88:04:12:
                    03:86:30:4d:06:c2:fd:6a:bc:65:a2:81:79:03:ab:
                    e6:97:80:4e:d8:39:30:b9:31:5f:c1:ea:a0:54:8f:
                    40:a0:63:25:75:55:5b:42:d3:3a:bd:39:e4:aa:5e:
                    cc:68:2c:a3:b6:96:a0:eb:a0:f5:b8:0c:3a:8c:e7:
                    d2:5f:0c:d9:a4:1d:46:52:60:e5:82:c3:64:99:70:
                    c5:e2:a4:28:45:2a:4c:c1:36:76:e5:2d:03:b0:17:
                    b6:87:7b:a4:ba:7f:69:8c:d0:21:4a:b8:40:98:6d:
                    fe:f3:99:7d:f4:26:d0:8d:a7:25:3c:96:e4:82:56:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:86:52:93:E2:3F:95:02:B5:D6:3A:DB:50:2F:6E:E8:64:6A:55:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2be2cf2-bf86-3003-8951-d94868575d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:06:d0:ac:4e:cb:fc:52:8e:90:95:22:88:85:8b:1e:0b:b3:
         48:28:ea:22:c8:f7:90:bf:e4:78:ef:dd:bd:35:67:3e:08:4f:
         84:1f:2e:b9:bd:99:23:c3:02:56:bb:e6:d3:17:aa:44:bf:cb:
         3c:33:df:6e:7c:df:95:dc:11:3c:86:1b:5d:03:cd:62:29:df:
         8e:73:b9:35:05:ca:f3:67:27:69:b0:00:e3:f8:a3:d9:63:19:
         8b:8f:66:48:ea:82:f5:dd:87:28:b2:2d:45:4b:84:07:a3:45:
         13:91:b1:94:21:27:5d:4c:70:fc:a8:a7:d4:c9:00:a7:4f:18:
         0d:5f:4f:01:e0:ca:c7:a0:8f:56:9c:5a:16:ed:46:64:5f:e3:
         6c:53:b9:df:50:4e:8a:c8:21:f2:85:40:74:52:4c:3e:3b:e2:
         81:06:b8:ec:c4:5b:6a:73:db:87:d3:f0:17:b7:ba:e5:b1:4c:
         56:40:99:03:f1:66:54:2a:be:04:8c:43:80:b2:ad:52:bd:d9:
         b1:55:35:6b:88:cb:3e:f3:b5:c0:46:14:aa:8c:05:8d:8d:4c:
         40:4d:49:84:8b:9e:e5:7b:d2:97:3d:41:51:3e:c9:84:07:64:
         bb:ad:35:ee:d9:3e:31:c7:13:43:31:89:f1:a1:18:00:c9:fd:
         04:88:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:27 2025 by rpki-client