Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf9541da-c830-3a09-ba74-6945c3c1b3ad.roa
File:                     cf9541da-c830-3a09-ba74-6945c3c1b3ad.roa (raw, json)
Hash identifier:          Alew5Nwms1YX9UNVxL1vuRV3YYNk/67qliceHFKb/Yk=
Subject key identifier:   C0:7D:49:6F:67:7D:1E:DA:E6:94:43:8A:84:FA:E1:B5:78:16:76:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAAE0518672454EAEF69893C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf9541da-c830-3a09-ba74-6945c3c1b3ad.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.255.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:e0:51:86:72:45:4e:ae:f6:98:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=3183f081-aa5b-4cf7-b6e6-88b701577055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:fb:65:ed:3d:f9:86:11:ab:d4:6c:93:5b:
                    83:69:f9:8b:12:75:b5:d1:65:02:26:39:8c:61:f9:
                    2c:36:4a:fb:7c:2a:ff:38:66:1c:e2:8f:a9:14:d9:
                    7c:6f:d4:a7:70:53:3c:dd:dd:74:e2:17:c1:24:e0:
                    3c:0c:ee:a5:07:da:32:c5:74:e8:b3:88:47:10:07:
                    15:81:e1:f7:98:56:64:d8:bd:44:d6:35:64:6d:a7:
                    18:af:71:a9:83:e3:ed:91:68:38:fa:48:a0:21:03:
                    bc:58:ad:6c:9a:77:ec:b2:f3:c9:db:ed:00:c6:9d:
                    2f:5d:c8:b6:fd:12:c8:77:70:46:80:6c:31:a2:a4:
                    8b:9c:1f:dc:50:91:33:c9:94:9a:ee:b1:01:db:cd:
                    a9:da:51:07:f0:26:4e:84:a5:14:ed:a4:ff:10:33:
                    b0:70:3d:d9:bf:d9:93:11:25:e9:19:d8:17:eb:55:
                    97:76:2b:ac:45:58:f3:77:52:94:d7:e3:b8:a2:45:
                    11:6b:7e:cf:97:84:42:9a:b0:98:13:0b:9a:0a:6d:
                    07:75:80:fd:3c:58:fc:6a:4b:86:7c:a2:8b:ea:81:
                    96:94:01:83:60:dc:7f:72:68:4b:08:c4:77:81:2d:
                    f1:7a:f9:75:5a:80:16:73:2b:0b:2a:e6:f9:0a:7e:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:49:6F:67:7D:1E:DA:E6:94:43:8A:84:FA:E1:B5:78:16:76:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf9541da-c830-3a09-ba74-6945c3c1b3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.255.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:d1:d0:96:95:eb:9d:3a:7e:92:fb:85:46:b9:5d:8c:13:
         f2:3f:de:2b:5f:8c:69:9c:1f:cf:ec:12:cb:1a:db:6f:73:15:
         d5:47:b7:30:6b:b9:72:ef:73:f5:af:b0:77:38:28:70:24:52:
         d8:46:87:c2:46:3d:05:f8:aa:ff:e2:3e:81:43:4f:7b:82:54:
         57:88:e9:bb:b4:ce:3c:11:27:8b:14:27:e0:15:b5:29:05:16:
         68:f7:b2:a6:7f:3c:b2:ea:25:a0:99:f3:8a:97:6f:9a:dc:3f:
         89:11:55:2d:8e:7d:90:e7:9c:1c:ff:19:0a:7a:09:21:3d:28:
         b1:37:bc:1b:f8:9d:e2:de:8c:b4:4d:dd:b4:1a:49:ff:dd:c5:
         8f:4f:a7:74:00:bc:5c:09:33:b3:43:fd:1a:1a:62:96:36:9d:
         cc:08:e2:1e:d5:a0:4e:0b:2e:bc:7c:ff:32:51:ea:1c:b7:dc:
         3e:c6:c2:04:e4:c3:21:8c:a7:ab:00:92:17:77:78:fc:ac:d3:
         19:3d:d7:bb:04:30:48:5d:7e:16:1c:72:97:7a:ab:54:4e:19:
         78:0b:6d:c0:a1:14:a0:64:c8:47:90:e3:ee:4c:61:85:da:35:
         15:9e:d3:0d:98:a3:59:8e:c8:71:d8:8b:60:b9:47:c6:83:b2:
         b2:3e:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:25 2025 by rpki-client