Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a7dc20-0816-389d-b598-d87e5e637145.roa
File:                     d2a7dc20-0816-389d-b598-d87e5e637145.roa (raw, json)
Hash identifier:          ZQvoiTuoTZZVPFXZA9+LhLYy+7sAo8mfapESwYhmlmA=
Subject key identifier:   56:3F:07:0D:0E:2B:0E:EB:A7:D8:1F:40:A2:BF:C7:A3:F8:D7:D3:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E46C6F5A3C6BDA1CF96AD36C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a7dc20-0816-389d-b598-d87e5e637145.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        173.246.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:c6:f5:a3:c6:bd:a1:cf:96:ad:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=1ca42ff2-a6e0-4fad-9469-1f26e68005c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:df:48:e3:56:df:43:3d:31:85:80:cf:ca:
                    cd:47:87:71:c0:88:7e:fe:e0:33:24:b3:55:ab:09:
                    76:f5:d8:e0:fb:8e:aa:3a:a1:c9:36:aa:f4:ca:39:
                    f7:ac:87:97:be:f5:e3:6c:b3:70:44:ae:17:64:91:
                    ec:5f:38:45:a5:4c:75:50:17:0d:4e:70:f8:cf:01:
                    34:27:e6:94:61:53:90:64:5b:26:3a:33:4e:4b:cb:
                    18:be:74:7c:69:54:f9:03:61:25:c1:59:04:0f:85:
                    a7:95:ea:ec:e9:95:6b:7a:c7:37:54:a3:bb:30:fd:
                    29:66:df:10:b9:4e:03:7b:f4:dc:1e:a1:6b:dc:a9:
                    2b:31:ee:2e:37:de:7d:03:e5:90:14:82:9a:73:d8:
                    ce:96:fe:41:8b:0e:2d:45:92:fd:d7:40:29:54:8f:
                    3b:34:7a:45:21:1b:13:36:d9:da:61:10:53:7d:9a:
                    1b:af:80:85:5c:d6:3a:f5:2e:8f:c2:ad:b9:5a:27:
                    e5:a2:56:48:6a:45:d5:ef:d4:81:7b:b4:cd:78:90:
                    8b:9f:9b:6a:52:15:ec:07:48:22:68:39:40:56:b5:
                    65:cc:0a:b5:53:47:cd:d8:bf:9c:d3:ba:24:4d:e3:
                    2b:77:f8:d3:a3:a8:0f:cd:32:89:ad:95:d1:3b:0a:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3F:07:0D:0E:2B:0E:EB:A7:D8:1F:40:A2:BF:C7:A3:F8:D7:D3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a7dc20-0816-389d-b598-d87e5e637145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:47:45:fa:f0:0d:62:31:73:59:cf:f6:7b:2f:95:47:b5:
         54:3f:17:fd:6e:8e:1e:c5:8a:10:8f:85:e4:e6:82:e9:e5:6f:
         26:df:51:dd:fb:b8:ad:e9:9b:2d:e9:93:ce:26:9f:1d:c8:db:
         26:31:66:d4:9d:5c:37:dd:c8:a3:fa:95:40:2f:1e:2a:07:22:
         45:5a:a9:f3:29:e7:65:c5:ca:8b:99:d7:c7:37:56:a8:ff:1f:
         11:a9:b5:54:37:ed:48:e0:50:e4:97:00:38:65:15:5c:d2:4b:
         0d:78:b0:08:05:7b:7e:74:5f:48:f0:bd:e9:81:2d:e1:6a:a5:
         1c:0a:52:96:bc:63:79:25:c1:98:60:fd:77:41:75:65:91:17:
         4f:12:66:ad:e0:5d:ae:3e:e9:53:e0:40:68:32:6e:63:8b:9c:
         b9:35:10:c3:a8:0d:6c:71:ba:3c:b0:7e:79:8b:ea:76:23:b2:
         00:19:16:3c:4f:a4:40:5e:75:12:94:04:fd:b3:ec:aa:13:03:
         fb:83:ab:97:40:b9:c6:49:85:bb:f5:c6:c0:16:65:e1:72:7e:
         8f:20:33:47:d3:4b:68:bd:d0:0f:e1:fb:27:e2:ee:df:fd:e0:
         ba:82:9e:11:73:f3:cc:73:24:47:9a:1d:69:9f:38:7c:08:c1:
         6c:52:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:16 2025 by rpki-client