Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4326509-c1e0-3bb2-91f7-14a4505b417e.roa
File:                     c4326509-c1e0-3bb2-91f7-14a4505b417e.roa (raw, json)
Hash identifier:          Oacri606Kws9oPOUpVt3WY2EBjUzk3jER1emUuSbR1U=
Subject key identifier:   8B:90:6B:F5:EB:A1:01:DE:9D:8F:2D:74:77:F9:B0:33:C3:36:72:85
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D07E13B9468296B87A424B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4326509-c1e0-3bb2-91f7-14a4505b417e.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Wed 30 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.8.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:07:e1:3b:94:68:29:6b:87:a4:24:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Mar 30 04:00:00 2022 GMT
        Subject: CN=8a1971ac-e410-41e7-a032-7b2474f770ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:24:0e:22:cc:04:af:79:d1:26:12:3a:4b:
                    f9:e8:e4:1c:e6:0a:f6:90:c9:c1:61:d1:24:67:4b:
                    97:55:41:63:5c:ad:2d:5d:7a:cf:9c:09:68:85:63:
                    38:8c:f1:e0:ea:f8:4f:69:d9:47:df:90:32:8c:a0:
                    85:5d:03:57:d9:55:a6:c9:2f:29:90:c4:86:48:d2:
                    0b:c8:0c:1a:9b:9f:9b:ee:a6:42:11:80:97:0b:30:
                    37:6d:e4:89:f1:23:93:09:bf:bc:e4:34:01:19:67:
                    30:33:00:16:db:b6:63:d3:04:cb:47:bd:bc:85:c5:
                    98:7f:ae:ed:1c:4a:ab:2c:72:f6:de:3f:e0:d1:b2:
                    06:2c:9c:2f:ef:9f:ad:f6:9c:46:93:ba:48:62:f3:
                    1f:e2:a3:e3:1a:43:3c:0d:02:57:d8:ae:b4:11:f6:
                    e5:c8:1a:9c:32:b5:9f:e3:d2:b7:3b:08:19:4e:cc:
                    01:e5:df:1b:ed:a8:f7:d7:31:bc:02:29:e9:f2:8b:
                    fe:ed:e1:ba:c5:30:88:81:ae:c6:0a:2d:8c:15:6e:
                    d0:9f:f2:21:20:f7:5b:7d:57:ce:83:1d:b4:7f:7e:
                    92:8b:75:ce:0a:af:fc:be:61:60:23:83:1e:76:42:
                    fe:70:39:a3:d3:b7:28:da:46:0a:09:90:57:72:44:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:6B:F5:EB:A1:01:DE:9D:8F:2D:74:77:F9:B0:33:C3:36:72:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4326509-c1e0-3bb2-91f7-14a4505b417e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:fd:dc:fd:d2:03:92:f7:67:d7:20:79:df:3f:28:19:d4:
         2a:d8:16:33:8f:9d:1f:5e:9a:af:49:14:6f:dd:af:ca:66:60:
         ae:d1:82:a1:83:85:c7:da:de:4a:e8:ad:6e:eb:90:89:86:e3:
         e8:1f:36:47:b8:c1:a0:22:87:a8:3f:36:df:b7:a3:8a:b4:df:
         ff:91:f0:1b:e8:8e:15:be:df:29:6e:9e:71:a9:bd:0e:32:a7:
         42:21:4f:00:93:41:85:82:ae:01:30:4b:f3:f4:1b:fb:c5:d0:
         80:ba:23:58:23:19:eb:ec:f4:19:42:ea:0e:2e:82:0f:13:bc:
         eb:e7:cd:20:60:c0:85:9d:05:fb:54:24:d6:42:66:9d:a9:f1:
         f3:72:1b:c0:01:ed:ca:76:6b:e2:ea:07:5e:23:63:2d:39:92:
         2c:2b:e1:ad:ee:b2:73:ac:5b:ab:84:3a:54:a7:cc:84:e3:bd:
         92:d9:31:e5:9f:85:cd:ef:14:88:34:a5:29:17:bf:95:ed:59:
         29:15:f7:c1:52:ce:16:67:ea:ba:b3:ce:71:75:c0:de:b7:d9:
         58:6c:26:d5:da:84:ef:8c:25:fc:eb:8d:1d:7e:9d:ec:74:fa:
         49:81:13:ee:5b:92:19:da:f0:0b:83:2e:cb:d5:e6:bd:91:d3:
         79:f7:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:27 2025 by rpki-client