Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe40a0f-d60b-3bee-986e-3536de03491d.roa
File:                     fbe40a0f-d60b-3bee-986e-3536de03491d.roa (raw, json)
Hash identifier:          adFtgqPtG9pFWZCLOgqstbGQyLPIjU827+MOaUwV+Fg=
Subject key identifier:   07:C9:69:C3:7E:72:7C:08:20:05:21:0A:A6:E0:3D:D4:6D:1D:C2:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5A2B6CD8AD862A42CF113600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe40a0f-d60b-3bee-986e-3536de03491d.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        64.252.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:2b:6c:d8:ad:86:2a:42:cf:11:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=5f5bef9f-88f2-414b-a0a7-82eeceabbe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:4b:5b:28:ce:c5:90:6f:92:ca:58:4b:16:
                    34:1f:4b:67:87:30:69:e1:05:b4:83:7f:f5:48:2c:
                    d5:e2:f4:51:01:7f:0b:e7:5b:12:f5:18:94:be:dc:
                    71:39:c1:35:ab:0a:13:8e:58:ad:d7:d0:85:ca:95:
                    c8:2b:03:70:67:0b:18:14:ce:9c:57:0e:73:e6:9f:
                    8a:41:96:eb:b4:f6:f8:5d:a7:0d:38:75:ab:22:f4:
                    52:16:f3:c6:23:8d:9f:25:b6:31:d1:73:e8:3f:27:
                    75:f9:28:e5:1e:02:aa:f3:44:ae:28:f2:ff:55:8b:
                    ec:26:9a:56:cb:74:59:e2:bc:4d:ca:f1:3c:29:e8:
                    ff:b5:7d:d1:44:76:8d:4c:95:5e:1c:9f:e9:82:ad:
                    de:02:e4:29:bd:e0:ec:4e:2a:40:92:66:18:0d:45:
                    92:a9:73:38:d8:f8:3d:40:cc:d7:19:64:cc:04:29:
                    f2:ea:92:14:58:fd:47:2f:47:d8:f2:f5:66:46:d3:
                    42:42:34:12:b0:7f:9a:38:f5:61:b1:6b:13:99:e5:
                    24:37:6e:32:83:1f:3e:97:33:9f:7c:3f:bd:c8:fa:
                    45:70:2b:4c:f0:ed:4b:6d:f9:9a:9d:15:7c:a8:a4:
                    11:07:71:e9:ef:ec:67:e2:fa:7d:98:bc:36:d8:fc:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:69:C3:7E:72:7C:08:20:05:21:0A:A6:E0:3D:D4:6D:1D:C2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe40a0f-d60b-3bee-986e-3536de03491d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.252.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:42:bc:e0:51:2d:a3:ed:e9:d2:9a:56:9f:47:00:52:4a:
         12:65:26:40:10:f9:db:55:3f:14:3f:88:3f:e1:81:3a:92:c9:
         4e:35:f4:82:a1:ee:a2:dc:14:d4:ed:cc:54:eb:7a:6e:b1:9d:
         b9:ff:ee:7e:31:fd:36:f2:b2:15:fa:6c:ce:43:f9:fb:1c:65:
         fc:2c:82:26:c9:16:73:dc:02:bf:74:59:50:50:a0:00:6c:24:
         33:65:ce:b4:d8:f5:be:64:e0:5f:72:b1:d7:04:33:12:a5:ea:
         2c:50:63:f5:53:37:41:bb:7c:a1:42:34:65:3b:61:c9:8d:7d:
         06:25:30:39:5a:38:6f:3e:b9:4d:1d:f2:e7:10:0c:37:8a:1f:
         d5:93:61:6f:89:d5:f5:17:51:90:ca:16:73:a0:f3:fb:e4:ba:
         f1:ef:5b:a9:97:05:90:c4:70:61:9b:45:3e:b6:41:95:32:84:
         a7:79:ae:08:6a:77:0c:a1:91:5f:61:87:25:5f:dc:76:46:97:
         2d:b5:b2:97:17:5b:c7:7e:bd:b5:ca:45:87:d8:15:95:71:4c:
         a4:4f:ad:c6:a7:43:45:89:c4:93:98:e4:37:a9:9c:db:d8:b3:
         ec:29:26:61:00:bb:eb:8e:e5:33:06:c7:97:5e:6c:5c:ec:87:
         a0:0d:70:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:50 2025 by rpki-client