Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9137f1e-6f9c-3823-ac03-a05a87b121fc.roa
File:                     d9137f1e-6f9c-3823-ac03-a05a87b121fc.roa (raw, json)
Hash identifier:          P0rXtAbSd93n98cj22+ocVG1FwAKJ4HVQfJZKGuNiAU=
Subject key identifier:   5D:32:90:58:33:7B:17:A2:00:67:5F:94:89:52:15:01:CE:4B:2B:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE2AD6BEA3C9581AEC139B040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9137f1e-6f9c-3823-ac03-a05a87b121fc.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        155.254.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:ad:6b:ea:3c:95:81:ae:c1:39:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=060607e4-f58f-4b4a-87b0-564c7b783810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:80:cb:18:f6:ed:9c:e2:bb:9f:23:c4:01:
                    5c:ca:26:85:22:81:c6:a9:0e:66:4d:13:32:6e:a0:
                    e6:77:1d:91:18:58:32:94:a2:5b:c1:40:7c:f3:ad:
                    10:c0:54:4c:d7:84:c7:c4:af:44:52:34:55:a4:bc:
                    17:ba:93:aa:70:9a:99:cc:b0:b7:96:47:69:6c:af:
                    ad:ab:11:63:4c:22:97:7e:f5:07:14:fa:b4:c6:65:
                    fe:a9:dd:25:0b:f2:d0:6d:cd:e0:4e:84:18:e2:f4:
                    f2:df:18:b6:87:4f:79:a5:ea:6f:42:97:98:da:32:
                    6f:88:de:78:8f:40:ca:27:e4:26:26:74:91:94:ef:
                    1e:b7:c7:0e:35:d6:12:1c:f1:18:95:25:94:45:83:
                    50:81:32:8b:a9:bd:ff:f1:d0:a6:82:61:1d:15:3a:
                    fd:cd:27:36:c5:ef:38:c6:2e:4d:f6:c2:03:78:c2:
                    26:f8:c7:18:c7:1c:fb:bb:8c:79:fb:c8:e5:cf:6a:
                    ea:db:aa:ce:dc:89:23:f1:3f:54:22:14:34:05:6b:
                    f8:0f:4d:2c:89:81:99:26:5d:66:f7:a3:f2:76:50:
                    f2:ad:ef:8b:1f:bc:62:61:0b:aa:f3:c6:03:94:80:
                    29:f3:a1:4a:da:3a:34:f8:e7:c7:f6:aa:fa:74:62:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:32:90:58:33:7B:17:A2:00:67:5F:94:89:52:15:01:CE:4B:2B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9137f1e-6f9c-3823-ac03-a05a87b121fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2c:d9:1f:2b:f4:f2:9b:77:47:15:50:c3:52:7b:14:e5:4f:
         aa:7e:72:4e:58:dc:0c:f9:c5:fe:ab:fe:3e:bc:d1:bc:49:77:
         7e:17:33:7a:04:8f:c5:ac:9d:4d:d0:9e:57:27:b1:3a:e7:a7:
         bb:18:43:83:b5:70:68:93:35:8e:28:03:b1:40:c8:d6:f2:88:
         0f:45:3e:3e:92:af:7d:eb:23:03:20:44:f1:52:4c:77:88:6c:
         93:ef:d2:67:af:da:88:1e:d7:59:97:17:14:14:64:04:52:de:
         a4:e5:c7:f5:2e:24:40:44:83:a1:d4:c1:22:73:56:f7:9a:a9:
         10:5a:44:f2:2f:88:38:6b:57:39:42:35:00:63:15:dd:0a:07:
         16:2d:18:0c:03:25:13:b5:d7:21:bd:5b:97:90:5a:05:3e:59:
         86:41:b7:23:b1:c0:6e:a5:d9:c9:a4:50:50:19:f7:3d:72:f2:
         7a:1a:df:d2:04:9f:bf:e2:aa:41:0d:5c:f5:22:18:75:89:40:
         bc:65:c7:55:ac:0d:cf:19:4e:bd:81:f8:d6:51:4f:34:d3:a2:
         42:32:d6:33:cf:76:67:84:a3:73:8b:a7:62:3d:a9:5e:a4:80:
         eb:5e:38:9a:dc:a8:09:7a:32:5a:34:0b:1d:d2:a3:cb:07:a5:
         39:f8:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:52 2025 by rpki-client