Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed489285-5748-3ded-bb1f-7b0986a80888.roa
File:                     ed489285-5748-3ded-bb1f-7b0986a80888.roa (raw, json)
Hash identifier:          P7G0Jy27qsx0BXfuTmLsr0V78Fj9k5nwQUJEU4xiVoI=
Subject key identifier:   AA:8E:1A:67:F5:C8:94:F2:F8:74:DA:77:83:1E:1D:0B:97:0D:54:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEA3D3943EE6B30270EDCAE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed489285-5748-3ded-bb1f-7b0986a80888.roa
Signing time:             Sun 14 Aug 2022 12:00:00 +0000
ROA not before:           Sun 14 Aug 2022 12:00:00 +0000
ROA not after:            Mon 19 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.43.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ea:3d:39:43:ee:6b:30:27:0e:dc:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 14 12:00:00 2022 GMT
            Not After : Sep 19 04:00:00 2022 GMT
        Subject: CN=736d232f-3ff9-4d64-9a82-ae709e4e9e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:39:6c:c1:ec:56:7d:a0:9a:03:7d:fd:6d:
                    03:e2:fb:d4:9b:75:7d:95:f9:21:44:42:f8:3d:82:
                    66:f4:d0:c4:3b:d8:6a:8d:f2:fa:45:2d:59:0e:c9:
                    2a:f7:51:b2:2f:3c:0a:98:45:09:8b:1e:71:38:4c:
                    45:11:61:7f:7a:ae:e5:20:84:7c:c1:d1:d0:be:7a:
                    88:0f:9a:b3:8d:0f:3c:6c:a4:36:27:21:d3:9e:0d:
                    e1:e6:67:f3:3e:19:59:1e:ff:cb:fc:fc:8d:c2:cc:
                    3b:be:2a:40:d6:e4:ee:60:e6:5d:76:c5:04:ae:4a:
                    05:bc:d1:8e:a8:e0:71:55:73:ca:d3:db:3d:cc:e5:
                    46:7a:b7:10:6e:7b:31:ee:a9:1f:61:7e:37:21:d7:
                    aa:a0:53:52:54:83:48:c6:59:58:09:eb:40:c1:5e:
                    da:d4:5a:19:43:22:1c:50:4d:60:66:d3:d6:c2:06:
                    42:f0:96:5d:13:ef:92:7a:ed:47:97:b5:2a:3e:93:
                    c3:3b:df:6f:61:f8:b7:08:f5:67:3c:be:bc:8a:a5:
                    50:15:a6:ba:f3:70:ef:a3:ee:41:59:d5:ce:85:25:
                    77:dc:0a:a3:bd:84:d4:2b:ff:20:c1:07:e1:b5:5d:
                    c2:00:2e:68:07:48:d1:cd:37:fe:e7:d7:c7:13:53:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:1A:67:F5:C8:94:F2:F8:74:DA:77:83:1E:1D:0B:97:0D:54:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed489285-5748-3ded-bb1f-7b0986a80888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:9d:a0:4f:9d:42:52:76:cb:90:fe:47:a2:8a:21:5d:09:
         b3:18:2b:d2:6a:c4:1c:be:24:b3:bd:70:3c:56:18:43:dd:30:
         7e:14:63:bf:90:6c:a7:de:18:e4:22:1f:22:94:12:e6:52:f3:
         07:ee:98:10:14:82:3a:f7:32:19:56:6b:f6:ca:c4:b3:2b:2a:
         15:d0:3c:50:e7:86:c9:fe:3b:a2:ee:5b:ae:76:28:f2:47:d9:
         00:80:b1:4c:c6:e9:91:58:71:0a:e4:99:07:9f:ee:4e:5a:f5:
         c9:f5:32:a6:1b:13:09:19:21:34:ae:06:20:0f:88:3c:da:8a:
         73:8d:cf:f5:7b:c5:14:f7:40:04:13:a6:c2:ef:0e:64:7e:02:
         f4:f3:08:78:a3:41:5e:62:56:f0:e7:6b:06:44:b0:28:e0:b8:
         90:79:3b:b6:4c:ef:95:db:96:2d:c1:12:0f:eb:69:c2:6f:d9:
         a3:47:41:6e:35:97:5e:e4:53:bb:83:fc:e8:dd:96:da:19:9a:
         eb:39:92:30:ae:ff:0d:c3:46:36:63:11:83:65:d5:5a:a3:2f:
         0a:4b:0e:43:12:21:b8:8f:aa:86:62:dc:ef:58:ad:6e:79:ca:
         74:54:70:4c:bd:75:3d:a4:7b:67:cb:69:d1:64:1b:bc:3f:8d:
         58:8e:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:42 2025 by rpki-client