Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9dddb58-40fe-3a1e-8d2b-edec82906700.roa
File:                     c9dddb58-40fe-3a1e-8d2b-edec82906700.roa (raw, json)
Hash identifier:          5pf7nmxZhPNaXB4zsp0xxr7HhGyd4Hp0al5jA5cIftM=
Subject key identifier:   04:E7:3F:32:41:B8:64:D2:85:10:40:85:C7:49:A1:97:EF:94:4C:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEA26093A4C36A5B93CE14610
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9dddb58-40fe-3a1e-8d2b-edec82906700.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        32.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:26:09:3a:4c:36:a5:b9:3c:e1:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=96f8e6ad-fdc9-4156-abe2-ddeae0ba2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:e7:0c:8a:aa:05:bc:49:66:9f:d7:a4:75:
                    c6:94:7c:19:2a:8c:27:db:e6:02:85:6c:5e:be:cc:
                    64:e7:9c:2e:40:94:1c:0b:a1:37:f9:d0:ed:f0:74:
                    71:86:c5:7d:5d:c7:5a:6a:cf:1b:d0:f9:af:a7:81:
                    bb:9f:95:39:15:da:e3:7f:5c:fe:3f:5a:50:c5:79:
                    82:c1:a8:32:78:ca:5f:d1:1f:b8:07:62:a7:93:8c:
                    64:dd:4e:81:39:68:28:c2:36:23:34:10:ea:dd:48:
                    83:e0:7e:9b:92:bf:d2:20:88:80:e1:b9:28:cc:9e:
                    02:82:cd:a9:1b:fb:4f:30:f2:f9:c5:3e:e2:91:d1:
                    b8:2f:53:54:cb:a2:37:61:66:ad:ca:1e:66:10:0f:
                    aa:51:ca:61:a5:8a:f6:1d:e9:ad:70:79:b2:38:1b:
                    96:e1:6e:c4:99:24:89:e8:28:ad:2d:b3:70:fc:de:
                    eb:4b:ab:2c:0c:39:fa:07:dd:46:e4:db:5a:02:80:
                    47:8a:aa:dc:14:0b:55:3f:9e:ce:86:e2:88:51:db:
                    ca:24:c7:70:2b:11:f9:48:82:45:46:92:cb:ba:37:
                    22:dc:3d:d4:69:df:d5:27:55:8b:02:e7:d3:ab:c7:
                    67:08:49:2c:dd:e5:46:1d:e6:23:92:da:43:74:cc:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:3F:32:41:B8:64:D2:85:10:40:85:C7:49:A1:97:EF:94:4C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9dddb58-40fe-3a1e-8d2b-edec82906700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7f:e8:67:e8:aa:a8:89:1a:34:c6:cb:70:22:61:bc:73:57:
         2d:28:65:85:d1:5d:ad:45:d6:ed:d4:f7:f1:a0:50:88:d0:6e:
         58:48:4f:ef:54:af:93:45:9f:96:eb:c1:4e:a5:5d:7c:c2:2c:
         fd:52:22:6c:2f:d3:db:85:17:e4:91:7b:5a:db:45:c2:71:80:
         1a:bc:ec:65:29:2e:7f:62:0a:b8:04:5c:1f:ab:02:4d:51:ab:
         d1:6b:89:0f:a8:66:5e:1b:44:cb:b5:f2:3e:d2:5d:de:44:ee:
         cc:c9:ca:42:99:56:66:86:c9:b6:d0:2a:a2:7c:f5:5b:06:ce:
         16:cd:cf:25:47:70:dc:0c:4b:8c:e9:ec:97:2e:34:44:bd:a3:
         ab:bb:58:09:10:2f:83:6d:be:41:67:4c:7b:b8:61:4c:11:ce:
         c7:9d:fe:45:af:d4:18:fb:1d:aa:38:d5:b4:b8:75:97:1c:20:
         56:4c:6e:b2:d0:fb:93:8f:87:db:7b:bf:ab:d2:20:fc:56:4d:
         b6:69:80:52:b6:16:89:4b:f9:51:1e:b9:9c:1b:32:12:10:db:
         51:d1:f6:3c:9c:a1:69:0f:c0:ee:4c:94:17:da:6a:a1:45:cf:
         77:9d:b3:10:d1:b7:be:66:74:f3:77:4e:18:aa:f7:ed:c9:c7:
         49:a1:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:59 2025 by rpki-client