Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fdb6f7ee-7765-33c5-b9be-4f1f01baa4de.roa
File:                     fdb6f7ee-7765-33c5-b9be-4f1f01baa4de.roa (raw, json)
Hash identifier:          1fGXlOqPdNOZiaF+CtA77JLXguMt0ac2p0uaf8PqHnY=
Subject key identifier:   AD:36:76:6F:E6:44:47:7F:56:F5:53:BE:D3:B2:0A:9C:D5:C1:3B:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C6ABA655D13A69DBF9EA380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fdb6f7ee-7765-33c5-b9be-4f1f01baa4de.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        161.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:6a:ba:65:5d:13:a6:9d:bf:9e:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=5e2390e8-f48f-4605-aadb-f3dc4f262223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:ba:ae:e6:84:7c:b5:27:8c:56:49:8f:c7:
                    3e:28:8f:4c:0e:54:a0:60:de:a9:4a:9f:47:c1:cb:
                    01:e4:53:4f:26:b3:d3:46:9d:d5:e7:3c:6b:d6:f5:
                    fb:81:28:c4:1a:f8:48:f1:2b:a5:2f:b7:35:8d:2b:
                    8b:3a:89:c3:b4:de:25:60:0d:7e:7f:16:30:ad:de:
                    e6:91:d3:87:29:0a:c5:93:95:ec:7b:ed:66:2f:9a:
                    5f:f8:43:f4:25:33:62:ff:2b:8b:51:2d:24:f1:f8:
                    b2:84:8f:46:15:aa:2a:fb:b2:e2:22:99:07:0e:b9:
                    97:40:8f:3f:ea:b5:44:07:19:62:bd:60:b4:9b:81:
                    55:d2:75:17:22:c6:45:81:5e:e1:be:19:34:aa:e7:
                    5b:b7:e4:1c:d5:22:46:3a:6a:a4:08:e4:5c:30:78:
                    18:ae:48:64:f5:4d:d6:a9:2d:83:4c:af:9e:89:9d:
                    7f:ce:08:b4:89:49:61:bf:68:be:b6:8c:60:50:7c:
                    3c:99:91:52:56:0f:da:f3:49:71:6b:96:37:7c:21:
                    21:33:55:a5:0a:e8:d0:e9:df:d8:af:77:ef:5d:08:
                    20:0e:12:6f:71:b7:37:4d:e0:29:8b:4c:6e:2d:46:
                    8c:7c:3b:bb:81:bb:61:59:40:60:68:9f:e7:e8:86:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:76:6F:E6:44:47:7F:56:F5:53:BE:D3:B2:0A:9C:D5:C1:3B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fdb6f7ee-7765-33c5-b9be-4f1f01baa4de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:10:ee:4a:63:db:fb:56:04:1b:ff:49:8a:cc:f3:25:48:6b:
         a9:b1:7a:d4:f2:3c:70:6d:8f:6a:3b:26:10:9d:7a:9f:8f:bf:
         70:83:d9:b8:49:e9:64:fe:c1:88:a4:db:42:19:e7:1e:7d:e7:
         30:bd:54:dd:b8:6a:3b:c5:bc:83:2e:80:28:18:ca:d3:aa:7d:
         10:c4:5f:d2:86:cf:38:44:3a:d7:64:36:65:70:62:10:bd:5a:
         e4:b8:f9:b2:3c:4f:25:f4:82:ac:da:5b:32:a8:65:cf:07:fe:
         9f:fe:92:d2:79:30:cb:4d:9b:1b:7e:2b:5e:3a:ec:e5:25:80:
         e0:ab:0a:4e:3e:b5:c5:54:4e:59:cf:66:9a:cd:7d:5e:f7:9d:
         08:a7:7a:a7:8d:41:72:6c:5b:be:8e:d4:b4:df:fb:ba:0c:69:
         92:a7:c2:70:fe:3b:99:0b:80:ca:fe:b2:49:b3:55:4d:3d:16:
         8d:67:f1:31:78:05:09:c7:c1:63:c1:4c:78:25:85:3f:8c:bd:
         1b:6d:3f:96:8b:41:4a:8d:3c:e7:8e:dd:13:f5:10:c0:0b:a8:
         02:88:dc:81:73:b6:bb:9a:a9:08:31:f2:64:1a:fe:c9:27:cb:
         69:15:cf:fd:09:55:ec:23:7f:68:17:28:9b:e7:3e:2b:05:32:
         ad:8e:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:09:59 2025 by rpki-client