Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39031d6-0a67-3456-92e9-ddde94ef9dbf.roa
File:                     e39031d6-0a67-3456-92e9-ddde94ef9dbf.roa (raw, json)
Hash identifier:          9Sbn8AwbYkjZbO9DVFhQ+hXtCYICx5goMd5LEOnpOiU=
Subject key identifier:   D0:76:86:85:7B:27:08:5B:4A:68:06:99:3E:58:EF:09:BF:26:B9:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA73BB34F1E856C21CDCF5100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39031d6-0a67-3456-92e9-ddde94ef9dbf.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:3b:b3:4f:1e:85:6c:21:cd:cf:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=909fe324-b75c-411b-a42b-72249be06299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:91:e1:f5:8b:75:74:8c:b2:95:fe:46:09:
                    cc:80:0a:3f:ee:7d:05:39:c7:4c:56:ef:74:7d:a5:
                    ff:6f:07:a1:74:e2:21:f7:1c:61:aa:c6:05:7d:fa:
                    9f:c9:64:dc:4d:52:70:c8:7d:ff:c0:81:d5:78:f4:
                    2c:a2:7c:43:4e:07:71:35:1a:40:b1:c1:37:36:d5:
                    c3:d0:95:35:66:2c:bd:b6:08:6f:0b:b0:06:5a:88:
                    61:c1:40:2a:24:a7:b8:2f:6d:8b:24:5b:7f:03:6c:
                    e3:3b:17:b5:66:8f:67:82:8d:ee:77:8b:4c:30:58:
                    77:00:f9:01:d4:a9:2d:4a:bc:19:34:81:49:fe:63:
                    1e:92:f3:c3:45:c8:b5:ea:d1:73:a4:b7:a2:e7:0d:
                    15:41:ce:16:7a:b0:f0:57:04:4c:d8:f0:65:21:2a:
                    2c:b4:3c:9f:3f:4a:e5:19:06:1b:09:ad:9e:d2:79:
                    10:c7:58:8c:aa:e6:0d:09:7f:bd:c7:d8:80:ca:a9:
                    6a:68:72:3b:26:af:66:85:d7:48:5b:f8:1c:26:55:
                    21:5b:1d:eb:55:78:6f:70:bf:f2:37:7b:75:6e:7b:
                    9e:01:51:a7:43:c8:b2:2f:fb:b2:ec:67:23:ab:43:
                    71:63:9c:26:6f:3f:0b:49:e2:15:fa:7c:b6:69:5a:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:76:86:85:7B:27:08:5B:4A:68:06:99:3E:58:EF:09:BF:26:B9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e39031d6-0a67-3456-92e9-ddde94ef9dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:52:fe:ee:d9:48:9f:d8:ca:69:82:1b:74:01:51:75:e5:
         80:1a:ff:35:af:d2:b9:ad:76:12:2e:fa:47:9f:1c:7d:fa:df:
         c5:76:a0:32:59:b4:29:78:10:f3:2f:2f:ca:23:35:d2:5b:c9:
         33:ab:cc:2f:1a:13:37:98:aa:d0:ab:3f:55:68:38:bb:67:d6:
         6d:98:aa:06:ae:da:95:2f:d8:55:d3:a7:6e:f5:77:77:44:0c:
         f5:24:a2:ff:39:eb:da:10:29:df:d6:22:60:5e:12:fa:fc:ba:
         43:7b:b5:3a:9a:3f:17:59:12:1c:69:32:1d:cd:1f:e4:7d:c6:
         12:d9:f4:1e:91:62:65:18:cc:64:a1:4b:d0:d9:ba:14:81:48:
         db:50:87:8a:2e:96:17:8c:19:ae:d8:f5:85:6b:c5:c4:51:58:
         80:58:ff:c9:0f:06:a6:b0:b8:31:1c:a4:b1:f3:1a:00:df:94:
         a0:9d:02:d8:92:7c:b5:03:91:7f:61:c4:cc:36:e2:41:b6:c8:
         3c:f3:ee:d0:b1:fd:78:49:1b:e0:aa:2a:55:80:10:87:4f:7b:
         df:ec:9e:4e:9d:40:05:7e:5a:b8:e7:34:09:67:5e:42:31:38:
         33:1a:54:32:b9:6b:68:2a:f3:56:f3:3a:79:60:40:70:a7:92:
         ee:47:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:11 2025 by rpki-client