Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbd9a863-3f00-3549-a4a7-4c5f6d2c8693.roa
File:                     dbd9a863-3f00-3549-a4a7-4c5f6d2c8693.roa (raw, json)
Hash identifier:          7AbmngI5J5UeiJ0qBbyug4g4ZkABmn/cKPSmK6m/Bgw=
Subject key identifier:   1D:54:11:9F:14:E2:EB:D1:FA:67:96:11:F9:12:F2:D4:AE:BE:CF:C2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6D6CF54691AE3FE73C19E840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbd9a863-3f00-3549-a4a7-4c5f6d2c8693.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        216.39.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:6c:f5:46:91:ae:3f:e7:3c:19:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=a9350248-561e-4b50-bb62-2a59b186ae84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:be:17:93:fb:43:d2:40:19:33:34:43:09:
                    7e:df:b7:92:e7:27:8e:be:2d:9e:31:91:60:cd:11:
                    5a:16:fb:ac:cb:8b:01:57:2f:35:da:df:a4:79:7d:
                    4f:be:8c:35:2b:30:b7:fb:c4:fb:59:09:f5:eb:24:
                    dc:19:e1:a8:32:2e:14:28:a3:6b:fe:c5:7b:b4:cd:
                    71:d1:66:94:e3:23:c1:06:0d:a8:c1:53:76:37:13:
                    ba:e9:63:b5:15:08:b1:7e:f4:d8:04:19:4a:16:ad:
                    88:77:69:4e:72:98:7d:c3:88:42:bd:3c:27:9e:6b:
                    20:26:cc:80:bd:89:32:ba:81:f7:13:f9:81:8f:6a:
                    8f:2c:72:69:1a:96:37:89:37:c8:e6:02:58:cb:29:
                    c9:49:bf:76:96:70:92:d9:6c:39:4b:81:a5:0d:8d:
                    82:3c:bd:d4:53:aa:58:10:f5:78:2c:ac:f1:27:36:
                    d5:2e:6e:b7:af:cb:77:07:87:cc:22:2e:61:9c:2d:
                    ad:21:1f:9c:ac:28:88:b4:3a:04:c4:44:75:a7:5d:
                    77:d6:8b:35:e0:a9:14:f6:33:06:2c:ef:58:3b:48:
                    3a:1c:93:e1:7e:a4:5e:71:e5:fb:5d:8a:93:f8:12:
                    4b:05:e7:6e:82:20:57:1d:80:74:1a:4c:57:bc:65:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:11:9F:14:E2:EB:D1:FA:67:96:11:F9:12:F2:D4:AE:BE:CF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbd9a863-3f00-3549-a4a7-4c5f6d2c8693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:ba:15:dc:6e:96:02:c5:b1:2e:74:01:eb:12:ba:48:58:
         51:eb:0f:f0:f7:01:4e:14:29:04:46:12:26:d6:fd:84:b6:c3:
         32:58:ac:14:da:78:81:fd:dd:5a:62:0e:ce:a9:a4:8a:cd:1b:
         c1:8c:37:23:26:e2:af:8a:43:03:fa:11:8c:d7:e2:e0:9f:64:
         08:80:a8:10:30:83:46:9f:12:8e:91:22:c6:a3:de:52:ff:fb:
         67:8b:76:7c:fb:16:65:a2:41:b2:b9:dc:12:69:5b:43:a4:9a:
         b0:d2:e3:8f:c2:50:91:ee:44:00:43:d7:d8:7a:0a:f1:52:ae:
         5e:73:94:4e:41:0b:0e:01:0d:26:b0:b7:77:1d:d0:2a:c4:b8:
         44:e0:3a:05:36:c9:e3:3e:15:76:4d:6d:34:ee:56:78:a5:ad:
         90:91:05:f6:8b:63:82:71:5d:d3:3e:5b:93:90:3f:d1:53:b7:
         f6:3f:a9:75:9f:e1:d7:92:89:d8:3f:35:ff:e4:6f:1a:59:6b:
         75:3c:f4:b1:35:6a:30:9a:35:cf:f0:5b:8b:12:49:43:ff:50:
         52:e8:40:af:82:72:da:6f:28:16:82:b4:f9:b5:00:b3:1b:10:
         1a:1a:c5:72:14:d6:89:32:1e:7b:1f:9b:0d:d5:05:80:28:48:
         20:5e:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:44 2025 by rpki-client