Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc2e6c69-c6d9-33c9-b3fe-0987aed9143c.roa
File:                     dc2e6c69-c6d9-33c9-b3fe-0987aed9143c.roa (raw, json)
Hash identifier:          VFhX5vbmMdbV+gkNRiBtn8T3nTyhC/w8lh99j1KJYa8=
Subject key identifier:   E2:05:AD:1E:13:82:87:7C:3B:9E:53:FC:11:3C:92:47:F5:CF:0A:30
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4C09168111D608412ACCD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc2e6c69-c6d9-33c9-b3fe-0987aed9143c.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        72.44.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:c0:91:68:11:1d:60:84:12:ac:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=bf348abc-f7e3-4c30-bec6-b56a13b7f5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:c4:a3:cf:68:d7:d7:c5:5c:3e:2c:e5:6e:
                    65:95:1e:29:b1:de:21:4a:a6:09:a4:46:1b:fb:76:
                    c4:91:b3:da:f3:83:f4:7b:db:71:a0:c3:de:2a:59:
                    57:97:a4:8f:b6:fb:82:98:90:82:fb:68:d5:40:4d:
                    a5:21:c2:e2:d8:9b:63:91:4e:41:00:fd:98:d6:a2:
                    53:7a:f1:6b:08:a1:da:04:07:47:53:51:ce:0c:7e:
                    68:f0:75:41:a7:da:f1:6e:6e:58:be:91:4e:43:77:
                    e7:76:cb:9c:71:56:24:a1:e8:5c:bb:14:10:35:86:
                    6c:2a:bf:24:59:12:d3:55:5a:e4:f9:19:83:fa:80:
                    a0:61:02:39:94:cf:70:fb:3e:3b:a5:b5:b1:66:3b:
                    1d:28:5c:e1:c5:59:4e:29:ae:1c:f0:af:2b:89:00:
                    07:f0:fa:9a:73:23:ee:58:5b:82:9c:a3:d4:c4:8d:
                    7b:5b:86:d1:e1:cc:28:a2:ae:1a:b3:f0:31:e1:81:
                    b0:cf:70:46:32:5e:e2:e4:04:fc:cd:de:d3:a0:2e:
                    fe:71:32:27:f4:74:95:61:23:88:13:60:f9:3e:80:
                    8d:9b:35:21:5a:af:fd:37:bb:1a:fb:3c:8c:4b:8f:
                    75:4d:7f:74:a9:54:66:07:35:34:00:55:0a:52:96:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:AD:1E:13:82:87:7C:3B:9E:53:FC:11:3C:92:47:F5:CF:0A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc2e6c69-c6d9-33c9-b3fe-0987aed9143c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:36:88:99:82:51:49:96:53:26:e3:eb:3c:76:29:34:9d:1f:
         f8:72:75:df:b4:78:e1:e3:e7:36:77:d5:7d:4d:b2:9d:cb:0f:
         08:83:98:08:cf:88:df:1f:30:90:90:ad:48:dc:d6:b3:f8:15:
         5c:da:9a:86:61:ad:89:3f:cb:90:08:16:41:e8:78:1d:1e:ea:
         23:e9:9d:ad:8e:82:f5:e4:8d:63:95:8e:a1:58:1f:7e:a3:6a:
         93:88:0e:fa:5a:22:a4:84:2d:3f:ab:e7:2d:a6:06:18:7e:aa:
         78:cb:73:9e:98:8d:70:76:a8:be:a7:ca:ab:22:8c:68:a2:75:
         0b:ed:54:d7:77:99:c4:82:88:c1:54:24:12:ce:8f:40:d4:bf:
         fa:e5:7b:da:83:17:bc:ff:d0:51:57:c1:69:25:d1:95:d6:f7:
         a8:dc:c3:5b:c9:0d:e9:d9:40:7e:24:08:d3:36:84:0f:c2:12:
         c3:ef:bb:8a:23:05:a7:f4:94:5c:21:65:64:a8:11:63:26:1a:
         e4:fd:d5:26:cb:4f:d8:c9:04:4b:3e:67:9f:02:30:22:03:b3:
         af:cb:c2:7c:3a:96:e2:75:7a:dd:61:66:4b:77:8b:9c:04:e6:
         c7:d4:3f:ab:5f:55:fc:c5:49:97:bb:f6:1a:84:dd:f5:8f:ab:
         de:9d:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:22 2025 by rpki-client