Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db52dd7a-325a-3251-b4cf-c870b72f7fd2.roa
File:                     db52dd7a-325a-3251-b4cf-c870b72f7fd2.roa (raw, json)
Hash identifier:          x7uwU6cdhNKLsH7hP++S4lrZqtAfNCoDKMFXaWdkLuQ=
Subject key identifier:   AE:0D:AB:47:92:3D:C9:40:25:5F:43:DC:4B:CA:CD:12:79:4E:A2:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE54D682E6BA1E00EE099F500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db52dd7a-325a-3251-b4cf-c870b72f7fd2.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        156.4.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:4d:68:2e:6b:a1:e0:0e:e0:99:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=9e358a88-3526-4d68-ad95-04eceb470e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:d2:9c:f5:d6:e9:1a:5e:ae:f6:bf:d2:77:
                    a7:91:79:a8:6e:d7:95:69:6c:9c:dd:10:69:07:76:
                    a8:72:4d:0a:2f:ca:3d:da:f6:b3:fb:e0:66:3f:a3:
                    b1:8f:bb:fe:b2:d9:da:35:65:dc:08:dc:f0:da:34:
                    18:6c:49:09:94:c1:46:a8:d0:24:d5:64:67:a1:d6:
                    5b:92:d0:5e:06:d8:d9:fd:70:bf:10:bb:33:93:09:
                    41:bd:05:76:0f:b3:bc:83:ff:97:46:13:9e:8e:40:
                    99:98:0d:5c:2c:45:56:7b:00:b9:c1:f4:9c:6a:bb:
                    52:41:a7:e4:98:de:1f:03:07:0a:6f:b4:2b:30:01:
                    3a:db:b4:65:d2:17:7e:86:4a:55:52:a9:ee:05:41:
                    3a:f9:14:f1:f5:61:2e:43:c3:52:25:d9:71:e3:86:
                    0f:e9:94:4c:66:4f:c5:33:cf:bb:e4:d1:f7:2b:5d:
                    89:85:d5:3a:4e:1e:e6:eb:12:1a:bd:d8:4c:cc:f7:
                    dc:67:3f:83:a7:24:15:43:8f:57:4f:02:ff:03:84:
                    02:79:00:51:1d:91:71:25:6f:22:2e:d7:39:be:0d:
                    7d:58:31:b3:3e:4e:12:7b:f6:88:12:ee:78:33:31:
                    3c:74:01:9a:76:7d:a2:23:e7:33:b6:be:9e:25:47:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:AB:47:92:3D:C9:40:25:5F:43:DC:4B:CA:CD:12:79:4E:A2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db52dd7a-325a-3251-b4cf-c870b72f7fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ea:c6:91:97:e6:c9:84:3a:01:e9:94:82:e6:13:5a:d0:e0:
         8a:04:c2:93:f0:f4:91:88:85:ce:28:b1:d4:3e:62:9a:d6:75:
         75:a9:84:d3:20:e0:6f:23:e2:73:b5:96:8c:43:09:04:29:d1:
         ac:9c:06:40:cc:29:c4:27:eb:09:fc:fe:41:11:35:9b:b0:18:
         75:f8:d3:6b:75:5e:7b:fe:ae:e9:54:8c:41:3c:0f:96:b1:f9:
         4d:0a:43:c3:6b:ee:a4:04:b1:99:8b:75:7b:6e:a5:a0:1a:89:
         91:8c:4c:93:6f:6b:cd:dd:c5:9a:72:a2:14:77:44:2a:d2:3c:
         44:3e:65:dc:a9:bd:61:ee:c6:45:7a:0a:ee:ab:03:fb:1e:8f:
         02:37:42:83:61:41:06:46:05:f1:e4:00:bc:b4:fd:f8:99:cf:
         5e:37:c1:6f:d0:d1:2b:e7:27:95:6b:80:33:42:2d:b0:31:49:
         22:21:1a:79:df:95:9f:c4:ab:0f:1a:f2:1f:37:cf:c4:dc:4f:
         6e:d9:ca:0e:29:62:b3:64:bd:92:8e:78:aa:7d:14:99:1a:2a:
         ec:09:54:55:d5:02:d9:0f:b3:6d:5d:3b:d5:97:13:8a:3a:c3:
         86:32:ac:27:59:43:fe:79:b5:a1:e1:c0:00:b2:6e:25:44:fe:
         c2:e7:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:47 2025 by rpki-client