Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2e58305-0b47-3842-8830-63105ac6f914.roa
File:                     d2e58305-0b47-3842-8830-63105ac6f914.roa (raw, json)
Hash identifier:          sT2mAnRAVoVZpfPEGN4LRirX/1xandSKpoUOikhWWj8=
Subject key identifier:   64:CD:6F:AD:BB:15:A6:42:FA:47:27:72:F5:31:28:22:1F:B2:0F:1E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBA23AAC766E35B9456F1FD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2e58305-0b47-3842-8830-63105ac6f914.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.197.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:23:aa:c7:66:e3:5b:94:56:f1:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=e92c0043-8a20-4e9c-b4b2-8eb19c611852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:f1:06:2c:a2:98:b9:e2:67:1f:22:a4:df:
                    ce:9d:7a:07:10:54:0b:7a:ec:ff:da:5c:4c:8b:89:
                    36:24:87:dd:2e:f3:1b:d8:18:2b:e6:0f:76:c9:51:
                    a3:c8:52:ca:96:7a:73:99:b3:0a:20:d4:19:86:6c:
                    b3:c8:aa:60:13:f6:bd:ec:05:51:c3:0b:9d:df:e8:
                    87:8e:9b:61:bc:8a:a8:a5:03:f1:97:e8:2b:1b:36:
                    27:39:c9:50:bb:e9:c9:20:df:b4:17:af:66:8d:64:
                    4d:7f:96:3c:c9:64:b4:bf:2f:79:7e:c0:58:44:0e:
                    22:75:14:2b:ec:4a:6b:c6:c5:4d:14:ac:22:e0:51:
                    63:76:73:8b:af:f7:76:c6:d6:f0:2a:c7:67:90:e3:
                    c2:fb:8b:24:2d:9c:18:30:6d:a9:a6:88:24:cb:84:
                    49:81:92:4a:cd:75:de:c0:15:ed:78:d7:cd:8c:db:
                    fe:c0:b9:8d:4e:63:9d:51:52:dc:f3:5c:b9:fb:4b:
                    2f:eb:51:74:11:a4:dc:72:04:ce:8e:db:62:0c:74:
                    a2:28:94:71:67:61:88:a1:60:a6:e7:78:e1:e6:86:
                    9a:68:88:22:07:34:28:08:a6:d6:c4:1c:28:bf:be:
                    5e:05:82:85:aa:00:23:11:c6:7e:11:e2:d1:f7:df:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CD:6F:AD:BB:15:A6:42:FA:47:27:72:F5:31:28:22:1F:B2:0F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2e58305-0b47-3842-8830-63105ac6f914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.197.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:3d:e9:97:34:64:66:5d:ae:1c:f1:d3:05:fd:d2:42:0f:
         d1:10:a7:93:1d:74:29:4e:7a:d7:ba:a4:87:a6:25:e9:b0:cf:
         eb:8a:bd:aa:6e:4b:f3:8e:d7:32:8f:94:05:7f:d6:41:ed:99:
         58:93:2b:aa:3d:30:d8:fc:b0:53:dc:2c:60:f4:bf:4e:eb:93:
         17:1f:e6:cd:aa:da:ea:7e:36:61:7f:7f:f8:59:2c:2d:83:e2:
         b7:59:f2:d2:6a:1e:ea:ac:65:64:e4:04:b3:37:dd:3d:91:1b:
         19:0a:6a:56:aa:b0:1e:dc:64:09:39:b6:f1:45:94:5a:a8:50:
         dd:f6:f7:ad:fb:70:08:23:e1:20:aa:8a:5e:0a:62:6f:57:3e:
         62:7e:f0:c0:28:7b:5d:97:92:53:54:df:c3:0e:5e:bf:4e:81:
         a7:13:56:e8:62:88:4d:4f:13:04:53:dd:c5:66:fa:10:61:13:
         52:2c:e6:5b:8e:7a:d4:af:9b:92:a7:c3:7f:51:75:52:7d:6a:
         6c:59:79:08:e6:6d:1b:ab:44:4c:e2:b8:86:2a:73:6a:70:7b:
         9c:4a:5f:6c:76:f9:b6:17:1e:a5:a1:d0:0a:d1:27:bf:b9:bd:
         e8:d9:12:ee:16:b7:5e:e9:a2:60:cd:53:cc:7f:fd:c5:2e:1f:
         ed:99:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:54 2025 by rpki-client