Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6b29494-f480-33ea-b881-bb736e86778d.roa
File:                     f6b29494-f480-33ea-b881-bb736e86778d.roa (raw, json)
Hash identifier:          LKRNSLS0+aZWdhPrPaJ4vaUWisk/DNaJLc767Vpty7s=
Subject key identifier:   B5:6E:24:61:6B:B0:38:DF:92:BD:D4:86:0E:F5:FE:90:51:FF:65:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CCB46AC77DC7D7687DD836B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6b29494-f480-33ea-b881-bb736e86778d.roa
Signing time:             Wed 02 Feb 2022 05:00:00 +0000
ROA not before:           Wed 02 Feb 2022 05:00:00 +0000
ROA not after:            Wed 09 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        204.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cb:46:ac:77:dc:7d:76:87:dd:83:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : Mar  9 05:00:00 2022 GMT
        Subject: CN=2da171bb-c1d1-49e6-a68b-0dbcfaec85c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:59:19:08:3d:1c:b5:84:1a:c5:71:77:08:
                    bc:ad:0f:c9:60:8d:d1:0f:96:56:fb:dc:cd:61:05:
                    63:8e:0e:77:a0:85:2f:c5:9f:bc:f5:10:cd:0a:4f:
                    cc:eb:25:31:de:8d:75:37:45:04:23:b3:60:2a:5c:
                    ec:bb:1c:fb:81:b5:0b:af:83:f7:86:e1:c0:1c:bc:
                    7b:98:3d:e5:75:48:1d:ad:d8:13:7b:da:de:07:8e:
                    36:2d:b3:ff:49:33:37:14:51:22:5c:e8:29:0c:62:
                    8b:d5:bb:db:2a:52:a8:bd:6f:f8:a3:db:83:bb:56:
                    14:28:68:0f:22:fc:22:c3:84:c3:ab:3f:dc:d2:de:
                    52:81:4d:7b:15:0d:5b:19:43:5e:f5:04:0a:0b:da:
                    b7:68:02:84:ac:b8:ad:64:32:2b:9d:01:da:70:4e:
                    ed:f8:a3:96:dd:22:b3:b0:dc:69:66:6e:3a:b4:4e:
                    86:37:46:43:81:77:8c:10:e6:20:a3:07:ad:66:1d:
                    17:72:3f:54:02:7c:cd:1b:65:bf:19:43:3f:27:a8:
                    fb:14:e2:ed:3c:df:f9:4c:f1:cb:b1:9a:ce:47:1b:
                    f7:b5:8d:cf:64:d2:75:dc:c0:a5:e3:70:5f:99:a0:
                    10:18:62:73:96:dd:18:86:23:20:91:e8:ca:c0:b5:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6E:24:61:6B:B0:38:DF:92:BD:D4:86:0E:F5:FE:90:51:FF:65:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6b29494-f480-33ea-b881-bb736e86778d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:71:98:21:fe:21:9e:0f:a3:93:1c:e7:03:17:c0:c6:87:df:
         c7:85:f5:86:f0:a0:5b:9f:79:c4:fd:a5:02:57:58:03:8c:41:
         e6:1c:f6:a6:bd:de:be:b9:f5:ec:a5:7f:53:38:14:ab:f0:16:
         96:88:bf:c1:41:73:5e:ae:f2:ef:fe:86:f2:08:e1:52:cd:a2:
         a0:c5:93:0e:37:18:53:45:6c:7b:5e:e9:5c:b6:44:97:d6:47:
         23:f9:1d:c7:9b:41:13:3a:1d:36:ac:cb:6b:a1:b0:2a:4f:7c:
         7c:83:7b:40:6e:bd:f2:8c:be:1a:96:ec:64:5e:0c:ed:4a:39:
         9e:85:76:52:fb:d0:a0:9b:ed:9d:45:40:01:a9:18:39:03:16:
         28:67:5f:f0:73:5f:31:7b:dd:97:81:b9:94:49:bf:8b:06:1a:
         ad:18:96:4a:d1:34:68:6e:0e:4d:b3:d8:9d:21:21:e0:12:2c:
         51:e7:27:1d:18:c9:4c:ed:fb:1d:d7:f6:95:94:63:dc:4d:4c:
         a2:ea:3d:1b:6f:e6:05:f6:de:cc:d1:96:ce:0f:61:49:30:7e:
         17:6f:49:3a:54:6d:bf:60:1b:6a:34:ae:2f:ea:18:78:b0:3f:
         12:da:60:1e:cd:1f:83:9f:3d:e2:50:bf:7a:74:fe:f0:f5:21:
         5e:4a:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:43 2025 by rpki-client