Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9d2f2e3-f6b7-336c-8adf-8c6ef978dffe.roa
File:                     e9d2f2e3-f6b7-336c-8adf-8c6ef978dffe.roa (raw, json)
Hash identifier:          DKlkgUttDRdB854/cEXR97VWmjxc8bIlj8FcPQ3meB8=
Subject key identifier:   F6:04:5C:3D:94:96:B6:41:69:D1:17:14:73:C5:31:E8:B1:3E:16:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D208A4D392FF3235242B58F50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9d2f2e3-f6b7-336c-8adf-8c6ef978dffe.roa
Signing time:             Fri 04 Mar 2022 05:00:00 +0000
ROA not before:           Fri 04 Mar 2022 05:00:00 +0000
ROA not after:            Fri 08 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:20:8a:4d:39:2f:f3:23:52:42:b5:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  4 05:00:00 2022 GMT
            Not After : Apr  8 04:00:00 2022 GMT
        Subject: CN=673e98c6-6d8e-467f-a7b3-a99173495484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:49:35:d7:96:82:0d:c7:03:7c:78:e5:8f:
                    75:6b:06:5f:ba:9d:95:6b:5d:ad:66:6c:75:9f:e1:
                    bb:a2:b9:87:be:cc:83:f6:ba:3b:65:cd:7c:4f:52:
                    14:be:44:ee:a9:f6:06:69:3f:f1:5b:01:65:4b:0d:
                    56:eb:2f:71:89:b7:96:8a:da:3a:cc:18:50:41:70:
                    1b:11:15:fe:df:06:aa:d5:5a:87:88:09:64:3e:2e:
                    56:22:05:9a:91:50:11:ea:19:c4:e8:95:79:29:a4:
                    56:4b:a2:73:81:4e:1b:52:35:6c:a8:22:be:9a:5c:
                    6c:b8:ed:84:c1:ce:c2:24:3f:51:14:38:08:7a:2a:
                    70:1a:a4:21:50:dd:8c:76:54:3b:14:02:84:d7:b7:
                    2d:8b:79:f7:18:a4:58:1f:bf:bf:64:4d:ad:a8:f0:
                    59:38:c0:db:af:25:a0:d3:00:48:0b:95:7f:a0:ce:
                    23:5d:f4:bc:3a:37:d4:78:9e:d8:c9:6a:57:45:c2:
                    52:8d:81:e2:14:a0:8c:bf:aa:f6:ba:81:70:be:c2:
                    92:59:f6:cd:de:9b:ad:0f:56:9d:b0:73:0a:16:b9:
                    24:06:ee:13:63:29:64:86:3f:26:9c:36:46:2d:43:
                    5a:d6:d2:b3:af:4b:d6:da:f5:c6:5b:30:a9:b7:c2:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:5C:3D:94:96:B6:41:69:D1:17:14:73:C5:31:E8:B1:3E:16:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9d2f2e3-f6b7-336c-8adf-8c6ef978dffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:bb:c8:57:f5:ca:80:17:67:27:30:f9:e8:3f:59:16:59:
         3d:67:ed:a2:e4:bc:78:2d:9f:43:10:53:d9:75:af:3f:83:be:
         2f:ce:c0:43:1e:25:c4:4f:c2:33:05:4c:a9:4d:15:1f:1e:f5:
         77:6b:8e:bc:3f:13:0f:8d:7a:3f:7b:2c:39:b9:4c:6c:29:85:
         ff:81:f8:6b:44:af:da:76:9d:37:5b:bd:63:b1:a8:24:ee:23:
         8f:c5:c7:d2:d9:5a:f9:5a:7c:9c:18:9a:7e:fa:63:4f:6f:af:
         0d:d5:24:51:62:4e:64:d7:1c:fb:9f:d3:51:b7:37:ef:9b:7d:
         de:bd:30:bd:ac:c6:d5:5e:d0:db:6f:ab:71:71:11:42:57:4f:
         d9:58:47:e7:ff:12:26:cf:52:65:65:db:7e:b7:67:b3:3e:32:
         57:2f:68:72:2c:ec:ad:cf:7a:07:5b:2f:36:77:d2:e6:3d:e5:
         c2:4a:af:89:af:6b:d0:4b:64:8d:69:4a:90:26:d2:17:df:3d:
         8e:4b:e7:a9:2f:0d:60:bd:6c:8a:f8:a3:6c:97:e6:e4:51:b5:
         f7:b1:8f:ac:1b:d1:ce:53:5d:ab:03:b6:e1:0e:92:cf:71:fe:
         dd:fd:72:b5:3e:a6:ef:01:b3:47:08:4b:74:cd:d0:60:4b:ae:
         6c:18:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:09:15 2025 by rpki-client