Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef180f4d-5265-365e-b138-2ea1d82e3526.roa
File:                     ef180f4d-5265-365e-b138-2ea1d82e3526.roa (raw, json)
Hash identifier:          TmQojCqoQmjPAAF8Hi4PlOVZAjmEDgqa+Wp/MJQ+tyg=
Subject key identifier:   AD:75:A5:93:6E:FB:05:B5:DD:BE:09:48:5E:B7:6A:AF:89:84:46:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC26C604F745334F5438FA300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef180f4d-5265-365e-b138-2ea1d82e3526.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        78.12.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c2:6c:60:4f:74:53:34:f5:43:8f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=2da198a2-663b-4165-9f30-5d68ff7a1f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:cc:11:97:0f:5e:c8:ac:cc:e1:4d:c6:47:
                    bc:ba:10:e1:31:df:9c:b4:a3:46:8a:6d:89:56:0c:
                    52:0c:d7:bb:48:8e:b2:34:ed:c2:cf:af:ac:6d:20:
                    3f:50:26:e0:96:43:f1:aa:a7:92:14:b4:94:21:49:
                    7e:4d:57:3e:1b:cb:77:e6:1f:e3:48:e2:0e:9e:b8:
                    bf:bc:30:f7:34:70:8b:ef:f8:4c:2b:8e:1a:15:6e:
                    84:bd:81:0e:ab:4e:70:d7:c6:66:bb:2b:39:12:b1:
                    42:94:ac:dc:d8:6f:87:c8:49:38:52:52:a7:b1:ca:
                    1a:eb:6f:43:22:7e:53:82:0b:b7:74:76:b6:97:c0:
                    02:7d:8b:eb:0b:64:cc:3e:43:22:b2:21:f2:82:56:
                    98:b3:9a:f4:9a:e9:f6:a2:d2:46:d3:9b:f5:d5:0b:
                    3c:c2:57:db:d4:d1:a4:3a:cb:8d:09:0f:5f:8f:4b:
                    08:50:23:f2:e1:75:db:ad:f6:ca:d7:4d:a8:99:bf:
                    50:be:e4:5d:0b:7c:ac:97:8c:80:ed:9e:55:bc:fb:
                    32:c2:a2:45:99:38:30:bb:09:4b:c9:c7:d5:c9:d6:
                    90:20:83:f0:ba:2c:4f:93:0d:94:9f:81:26:3c:c5:
                    4c:27:7e:01:d4:8e:2f:b1:f1:2c:fd:36:d6:e9:74:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:A5:93:6E:FB:05:B5:DD:BE:09:48:5E:B7:6A:AF:89:84:46:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef180f4d-5265-365e-b138-2ea1d82e3526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.12.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:08:5d:85:4b:60:20:5a:7d:cc:a4:0b:c9:78:f5:c7:9c:
         38:9b:32:f2:a5:98:e2:d0:d6:9a:9f:53:ec:29:a4:90:c7:bc:
         fc:9a:c3:94:88:12:65:ce:11:77:f4:bc:ea:8a:d6:06:7c:09:
         f8:17:f5:d5:9e:fd:94:fa:96:3e:68:3d:25:d9:dd:d7:bd:cf:
         66:1a:a4:a4:9a:ee:a0:e9:ed:6d:83:8a:f3:20:66:95:a2:dc:
         28:a1:6e:99:6e:a0:2c:02:51:44:c9:67:e7:b6:00:5d:be:f1:
         1c:85:b4:6a:ee:56:33:a5:a5:fd:e8:53:da:ef:29:bb:61:72:
         cf:46:f1:7c:c1:05:4e:20:c8:db:2c:85:d1:25:2d:57:cb:14:
         01:c6:e3:47:cb:4e:95:ab:d5:93:91:82:f8:b5:69:fa:b5:27:
         8e:96:7a:b6:69:c0:14:81:d8:60:2c:f8:eb:ae:49:a2:c5:0a:
         20:32:67:8b:2b:b0:90:89:e2:3e:4c:1a:51:6d:8d:97:f2:02:
         f7:56:3a:6f:45:55:7d:75:ab:0b:95:94:a5:84:ee:98:6a:04:
         cc:49:91:62:25:e2:7d:42:ac:7f:c1:1f:f4:d0:bc:44:ff:dc:
         2b:b0:64:b4:05:ce:ab:84:44:2f:50:47:8c:c8:ec:0e:06:5a:
         b7:1a:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:16 2025 by rpki-client