Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd978bdf-ee7e-3df2-a9b2-ad40119a5c38.roa
File:                     fd978bdf-ee7e-3df2-a9b2-ad40119a5c38.roa (raw, json)
Hash identifier:          vdlFWkGVantH1MzPK1OKgeDyzGDWInY6QA1vsBWT/oY=
Subject key identifier:   44:B4:76:8F:23:84:BE:75:0B:BC:FA:74:C2:17:1A:C7:47:8E:4D:31
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B0460559B057A9BD83540B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd978bdf-ee7e-3df2-a9b2-ad40119a5c38.roa
Signing time:             Tue 24 Jan 2023 12:00:00 +0000
ROA not before:           Tue 24 Jan 2023 12:00:00 +0000
ROA not after:            Wed 01 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        129.239.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b0:46:05:59:b0:57:a9:bd:83:54:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 24 12:00:00 2023 GMT
            Not After : Mar  1 05:00:00 2023 GMT
        Subject: CN=6d24ebab-7fc6-4f43-a9c7-f92e24a85b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:6e:12:56:be:8e:7c:7e:87:db:d1:03:ff:
                    d9:3d:cd:37:17:58:ff:e9:54:b8:52:4f:08:9e:53:
                    28:dc:c8:0d:c7:be:9e:58:73:e7:c0:1d:95:66:82:
                    00:67:c7:2d:57:21:81:fb:fe:eb:24:9b:22:f3:e3:
                    ba:ef:85:cc:6c:09:89:19:02:05:66:f0:2a:92:de:
                    ab:1f:1e:dd:e6:92:df:20:d4:31:ed:6f:2a:17:58:
                    f2:d1:d8:ff:aa:34:72:44:3e:f3:cb:63:7d:78:02:
                    53:b9:c6:c5:43:27:35:aa:c0:68:36:e5:8e:bb:23:
                    1e:e9:51:2e:f7:96:82:7e:5b:15:74:28:3d:24:74:
                    14:11:84:76:f9:76:63:11:6a:97:cc:cb:46:b3:76:
                    31:ab:6d:e2:65:ba:9f:67:5b:30:62:81:90:10:31:
                    44:77:03:43:47:a2:71:23:e9:59:b5:29:17:59:5b:
                    1f:b8:30:91:33:47:65:ec:0a:ae:85:d3:3c:0d:2a:
                    02:d2:c7:3e:80:b3:ab:0e:be:7a:1f:64:7c:b0:71:
                    08:d6:47:c7:d6:83:62:56:6e:05:64:f6:2c:f2:53:
                    2c:f1:27:6b:d9:83:9a:a9:5e:29:96:57:ff:dd:b3:
                    19:b0:f4:46:26:21:e2:56:45:01:48:ff:a8:09:01:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:76:8F:23:84:BE:75:0B:BC:FA:74:C2:17:1A:C7:47:8E:4D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd978bdf-ee7e-3df2-a9b2-ad40119a5c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.239.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:9b:0b:78:2f:8f:77:8a:aa:72:1c:54:c3:e5:fe:6d:ac:
         af:63:fa:de:39:14:8d:ab:f9:9b:14:bd:63:b5:1e:0d:05:e7:
         13:51:cb:66:d4:b7:cf:1c:c4:0c:58:8e:d6:77:ba:31:ae:94:
         4e:bf:59:24:bd:db:7b:9d:55:26:ea:57:a6:32:62:fc:d5:68:
         45:89:b5:b7:82:e6:63:3a:39:17:3b:7d:b4:4a:72:b8:b5:96:
         85:5c:26:b0:fd:95:a4:15:e3:98:1a:33:b3:fe:da:6c:33:20:
         03:13:be:28:34:27:05:61:b9:7c:c0:74:16:b1:50:ac:71:f4:
         9e:e6:ea:4e:4b:3d:08:f3:e5:b1:f3:92:92:a4:05:11:95:fb:
         f1:01:04:a2:c8:fc:8d:a0:5f:41:da:b5:77:75:42:f0:7c:13:
         81:1b:cd:57:27:a6:7d:ee:58:57:0a:52:b7:89:00:3c:3e:41:
         4e:b3:18:f8:87:50:ea:df:0b:48:6b:2d:dd:47:a4:5e:ac:1d:
         1c:a0:9e:ac:1d:da:a3:d8:df:fc:82:46:4a:cf:79:32:9f:1f:
         e9:53:cf:9f:69:86:b2:3f:76:ce:83:0c:9f:f3:f1:f0:25:ba:
         b0:4f:f7:b1:7f:cf:72:a4:2e:b5:d9:3b:d7:b2:05:16:c0:73:
         be:b5:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:05 2025 by rpki-client