Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76378c3-0d13-3bfa-914e-455fedfd15fa.roa
File:                     f76378c3-0d13-3bfa-914e-455fedfd15fa.roa (raw, json)
Hash identifier:          OYJtd2yIKsf6jhEH+OJYiP0vuq2geQRU1cOEGj7vZKs=
Subject key identifier:   78:2E:6E:FD:DA:79:36:C2:5B:62:19:C1:E1:0F:C4:01:57:7F:62:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840900D5B4426FD11587EE93D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76378c3-0d13-3bfa-914e-455fedfd15fa.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        45.33.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:90:0d:5b:44:26:fd:11:58:7e:e9:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=a89116c7-baf0-476d-9d8a-6351a735be91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:40:63:74:4c:5e:35:af:f1:f3:af:08:ea:
                    68:74:7e:dc:d1:d4:b6:58:26:c7:2f:3c:f7:73:53:
                    f1:95:e7:49:df:5e:3d:35:10:4c:91:15:c4:e5:dc:
                    41:66:15:ea:63:5b:03:e7:04:40:cc:67:3f:da:20:
                    32:96:b0:e5:f1:a8:92:2b:31:a0:e0:16:70:7e:2c:
                    34:eb:a9:95:05:48:c9:c3:33:69:27:b6:39:65:e4:
                    58:f2:97:21:bc:ab:5c:31:58:c1:b5:ba:02:3a:01:
                    d5:62:61:c6:9e:d3:b6:ce:36:e1:01:b0:81:0c:4b:
                    3f:bb:98:e1:08:52:8f:ae:02:b1:ae:5b:c8:53:49:
                    29:b4:25:99:25:44:23:c9:8c:7c:29:76:7b:8b:29:
                    57:3a:7d:5f:08:75:79:f6:82:6b:0c:6a:82:6f:50:
                    29:3d:39:43:d8:b2:ff:5c:0e:97:12:8c:5c:a0:84:
                    50:5d:db:eb:8b:66:d2:a3:01:19:e6:de:74:c1:ba:
                    be:75:57:fc:b9:95:50:39:71:60:e2:a6:3e:ef:b7:
                    27:a5:fb:47:13:bc:65:b0:6e:32:05:27:22:42:3e:
                    77:c5:42:31:74:3e:cc:86:64:1d:c8:d5:a8:30:5f:
                    31:9a:34:f2:da:48:c6:35:32:61:74:f4:1c:03:d2:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:6E:FD:DA:79:36:C2:5B:62:19:C1:E1:0F:C4:01:57:7F:62:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76378c3-0d13-3bfa-914e-455fedfd15fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:02:8d:18:12:48:41:d3:62:b8:7b:06:1b:9b:a0:02:e2:
         8f:54:3f:a6:84:3b:46:0c:5e:02:1f:08:48:b8:50:a7:14:2a:
         ce:6b:76:29:09:76:ef:7f:6e:11:43:b9:39:6d:4e:dc:0e:3f:
         38:d1:f8:c0:09:da:12:79:90:2f:54:fc:76:30:20:d6:ed:8b:
         9c:2a:8a:0c:f6:24:45:82:17:b7:d9:ed:44:9a:36:af:d4:14:
         57:67:a1:34:6b:76:a1:41:de:de:36:7a:7f:d7:0c:7f:d2:19:
         48:84:50:6b:74:4c:2d:dd:ba:98:50:3f:2d:80:fa:ea:7a:8e:
         32:7e:b1:21:1c:52:d7:15:6c:54:71:95:6a:a2:73:4a:16:a7:
         48:70:97:ce:e6:e4:fc:9e:75:e5:20:00:16:d2:69:a3:52:c3:
         d1:74:38:f3:fc:43:98:39:ca:26:18:c6:7a:8d:61:c7:79:2d:
         4f:33:aa:87:2d:b8:f2:62:6e:43:07:83:c2:48:17:f4:94:10:
         29:b1:2c:bf:2b:3b:46:f1:87:f7:76:5f:a7:99:94:79:e7:13:
         2e:a1:a0:57:5e:9f:d6:a7:1f:5d:bc:8f:90:9a:b1:47:fa:c5:
         08:cb:7d:da:4d:8f:7a:b1:0e:7a:ff:89:7e:22:c0:e3:27:10:
         71:dd:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:56 2025 by rpki-client