Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf409c33-76e9-3a25-a44b-c793c681abc8.roa
File:                     cf409c33-76e9-3a25-a44b-c793c681abc8.roa (raw, json)
Hash identifier:          Heu0zp2AJRm4hoiBMsDW0zM/6iqofgGJitFidion86M=
Subject key identifier:   68:A1:C2:A7:80:92:AF:EB:41:63:E6:A3:57:0F:1C:7F:0F:04:BF:50
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584005C61CA597116CB462984940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf409c33-76e9-3a25-a44b-c793c681abc8.roa
Signing time:             Thu 24 Nov 2022 12:00:00 +0000
ROA not before:           Thu 24 Nov 2022 12:00:00 +0000
ROA not after:            Fri 30 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        134.31.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:05:c6:1c:a5:97:11:6c:b4:62:98:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 24 12:00:00 2022 GMT
            Not After : Dec 30 05:00:00 2022 GMT
        Subject: CN=bb82903a-1314-4cb7-b4a6-13bef01a9b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:d9:65:ec:0e:c3:a2:91:f5:d2:58:d1:3b:
                    64:3c:ee:10:3d:f1:b4:06:be:7c:58:54:ad:d4:63:
                    56:c0:3c:b5:91:09:f5:09:17:11:0a:6e:91:a0:31:
                    36:13:99:34:40:1b:89:38:0d:87:e2:ca:a8:39:f3:
                    c1:58:28:cd:c6:58:1f:0e:1d:be:b4:10:a1:54:32:
                    7c:89:fb:02:dd:36:11:20:6a:bc:b1:58:b7:3c:3a:
                    e6:8a:f2:ac:43:9d:93:eb:24:73:ea:cb:42:67:8f:
                    bf:fa:6f:ce:a3:da:13:6a:80:37:cd:f3:19:a7:8f:
                    e4:44:4a:36:91:0c:46:52:14:35:4a:6e:3f:2c:82:
                    7a:12:af:ca:b7:cc:b5:76:de:02:77:a9:e0:56:fa:
                    30:a8:66:93:5f:44:6f:2c:f5:3e:72:62:4f:43:13:
                    31:5e:95:51:6e:79:84:54:2c:9a:b4:86:83:bc:81:
                    2b:d6:78:8c:48:92:f7:d1:71:35:67:41:55:3c:9a:
                    84:17:5f:77:fd:64:98:b9:fa:cc:67:7d:59:4d:97:
                    1e:3b:9a:8d:9c:87:29:95:9c:ac:07:09:fe:bc:22:
                    76:3e:16:8f:c2:2b:7c:35:9c:0f:f7:9f:df:cb:c5:
                    3f:18:21:72:c5:b4:45:a0:8f:45:c8:a7:07:06:cc:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:C2:A7:80:92:AF:EB:41:63:E6:A3:57:0F:1C:7F:0F:04:BF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf409c33-76e9-3a25-a44b-c793c681abc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3e:88:6c:30:be:3a:03:2f:a6:c1:7d:f9:cd:ce:9e:3a:6d:
         3d:ca:c9:66:de:e3:46:cb:23:5d:3d:4b:d0:6d:20:3b:94:b1:
         8c:46:7a:3b:82:7a:91:6a:5a:48:4c:5e:80:e3:e6:2e:6e:de:
         75:af:9d:3a:51:f8:00:11:d6:cc:e2:27:db:a0:f8:f3:11:2c:
         f4:8f:8e:b2:30:33:da:f6:2a:fa:7d:f1:76:96:e2:bd:1e:cb:
         d9:e8:ce:1b:64:e9:0d:d9:0e:f0:df:5a:b8:76:2e:fd:a7:d2:
         27:08:52:50:15:79:5b:9e:94:3c:9c:60:e8:fb:64:e7:c3:7a:
         58:98:0e:c6:14:e2:7e:1c:96:5d:24:12:38:cb:e1:84:f9:19:
         b8:cb:30:4e:b9:b9:ff:2b:45:9b:2b:8a:42:b4:f0:2b:6e:17:
         97:80:a1:d6:bb:57:ce:2a:08:5e:5e:33:a0:b6:80:47:50:4a:
         fb:eb:22:f2:14:3f:15:12:fa:69:c3:0c:e1:69:f5:f5:08:a9:
         c9:59:a7:4f:2b:12:1e:f7:0c:43:d9:67:cc:c6:54:c3:69:ad:
         55:a9:58:a1:59:48:c5:67:86:2a:26:2f:f2:e3:6e:75:17:86:
         ad:9e:0b:ff:3e:19:63:c6:1d:17:e2:2d:b3:21:6c:2d:e9:52:
         07:04:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:17 2025 by rpki-client