Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb790b25-bde2-38c6-b445-b13224d81ff9.roa
File:                     cb790b25-bde2-38c6-b445-b13224d81ff9.roa (raw, json)
Hash identifier:          okd9pajNueQ2VOTWy+/uf2SVc2IHgSZ3UynuWiMWuDs=
Subject key identifier:   F9:BD:20:D7:F4:33:B5:65:DC:2A:EA:85:70:2E:A8:59:BC:2F:1A:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4D8D68D0056F7DC9EC268A70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb790b25-bde2-38c6-b445-b13224d81ff9.roa
Signing time:             Sun 19 Jun 2022 12:00:00 +0000
ROA not before:           Sun 19 Jun 2022 12:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        153.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4d:8d:68:d0:05:6f:7d:c9:ec:26:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 19 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=7744bc6b-b786-43d1-8c86-574c820263a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:7d:a8:fe:1d:f6:ac:0f:63:90:73:5e:73:
                    ce:d9:f4:a4:a9:67:8b:1b:e6:11:13:7a:ad:06:22:
                    5c:1a:96:51:c7:56:57:65:ae:ad:02:be:fa:b5:b2:
                    e2:6c:23:b9:a2:79:11:23:37:22:d0:32:f0:90:6c:
                    5c:6e:0d:f9:7c:0d:f6:b5:20:0c:22:96:b3:58:d4:
                    cf:cd:df:95:d8:67:4e:2a:da:38:60:f6:b5:cc:19:
                    bd:47:00:c6:64:bd:36:57:03:cf:47:d0:92:5d:22:
                    be:c9:52:33:d2:94:bd:82:2b:9e:ee:d3:ae:32:82:
                    22:24:10:70:47:20:93:4f:4f:5c:3d:4f:d8:14:f2:
                    90:f6:1f:90:ef:11:e4:bc:4c:ed:d4:75:74:33:4b:
                    f0:e6:70:2c:d5:48:ab:31:b5:a7:72:b7:28:01:dd:
                    fd:9a:bf:63:57:73:01:3e:9f:6c:3a:2b:aa:ff:15:
                    7c:60:df:ab:65:44:a5:a9:ff:ce:34:3c:f9:a1:0a:
                    b7:4e:26:f8:ab:99:50:8c:c2:97:35:26:80:ab:e0:
                    86:23:7c:d7:9e:b0:0f:43:3b:9c:e1:89:f5:6d:2b:
                    d6:5b:23:30:a5:dd:c9:81:f1:f7:29:94:c7:7d:62:
                    c3:60:1e:ef:90:8b:33:91:eb:48:86:ff:43:39:5e:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:20:D7:F4:33:B5:65:DC:2A:EA:85:70:2E:A8:59:BC:2F:1A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb790b25-bde2-38c6-b445-b13224d81ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:be:0a:bf:31:de:6a:19:b5:4c:7f:99:d8:a1:d1:95:df:
         db:ec:c2:8c:72:8c:fc:b4:67:51:82:3c:18:11:72:8a:14:fa:
         f1:5c:3c:ec:d2:1e:8d:8a:62:92:bb:70:89:3a:76:37:d5:17:
         ea:ca:ea:da:e0:05:94:66:8e:fe:58:6d:db:23:09:1b:7b:fc:
         75:de:0a:22:03:9e:22:46:dc:51:96:f0:92:d8:b1:4d:68:08:
         5e:18:61:23:e1:4e:1e:9f:70:e6:9c:91:31:cf:b4:24:dd:ef:
         8c:70:0a:7e:c3:5b:74:4d:79:5a:75:b4:87:57:d3:38:69:d9:
         dc:72:b8:87:21:0c:87:e6:72:bb:32:09:09:27:d9:57:67:c2:
         80:6d:40:09:30:1c:94:fe:d4:16:9c:85:69:ce:b4:6f:61:d3:
         66:d2:e1:92:83:53:cd:51:88:de:1e:40:3d:1e:ba:77:c2:b8:
         35:1b:c6:e9:c2:59:08:6b:7e:1d:56:ff:42:cc:e5:35:c8:b1:
         ba:1f:a9:74:55:00:d3:89:d3:d9:df:2f:61:f1:be:43:69:30:
         18:fd:d8:07:92:f4:b2:c1:b6:d7:de:af:bb:00:c4:c1:ea:18:
         c6:5b:b3:c1:d8:a4:dc:eb:df:26:81:e5:a2:70:c6:e8:81:bd:
         e1:4d:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:33 2025 by rpki-client