Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffe970e4-d13b-3495-a478-ffca9f47dcbb.roa
File:                     ffe970e4-d13b-3495-a478-ffca9f47dcbb.roa (raw, json)
Hash identifier:          D5Cderblmwcz0ngIIJ5XyWWqBvI6K3soEB4RDdvJxBM=
Subject key identifier:   12:D1:DF:EF:50:84:A0:99:F7:53:65:71:B5:04:C6:47:DA:B3:2A:49
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F63B5675BFDE6CB9DAD443E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffe970e4-d13b-3495-a478-ffca9f47dcbb.roa
Signing time:             Tue 27 Sep 2022 17:27:07 +0000
ROA not before:           Tue 27 Sep 2022 17:27:07 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        170.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:63:b5:67:5b:fd:e6:cb:9d:ad:44:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 27 17:27:07 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=b79fa590-c384-4f48-bc58-3c79d5d34358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:59:ed:3b:f5:f3:a8:1b:76:82:22:57:f6:
                    62:a9:c6:58:1c:ba:2c:15:4e:49:77:63:4b:51:33:
                    f9:fb:fb:82:ab:c9:5f:b9:a3:eb:6d:fb:de:b8:d7:
                    a6:9e:dc:1e:d4:cf:f8:87:09:ca:4d:20:18:d4:3f:
                    d2:f5:9c:7d:bb:62:49:7e:26:8a:6a:82:1a:cd:aa:
                    16:61:63:41:e9:31:62:70:3e:7f:0a:4f:28:76:8a:
                    6c:c4:47:d3:e3:f7:fa:27:f2:6c:5f:bf:0b:92:9f:
                    9c:19:23:b5:f4:a0:78:2d:38:21:dc:3a:ac:c9:84:
                    2e:e6:34:77:30:88:18:90:d2:45:d3:b7:4f:80:12:
                    32:32:ff:88:76:23:69:8f:82:a4:7a:73:5f:b5:d3:
                    f8:69:f9:56:15:33:33:36:21:6d:c6:e5:d3:f2:d2:
                    2a:6e:79:a2:8b:5f:a2:25:d2:8c:c9:d8:9d:ef:a1:
                    b9:e1:27:ab:7f:a0:35:92:29:fb:2c:ad:d5:4a:25:
                    06:37:f0:0e:c4:bd:b4:7d:db:41:7a:76:fb:71:32:
                    e5:32:38:18:42:76:ab:9f:f9:29:de:be:4e:2f:31:
                    32:8e:26:03:2b:dc:c3:92:78:aa:6a:3c:dc:60:5e:
                    03:0c:50:4f:6c:75:6e:0b:5e:c2:7e:35:86:ba:24:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:DF:EF:50:84:A0:99:F7:53:65:71:B5:04:C6:47:DA:B3:2A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ffe970e4-d13b-3495-a478-ffca9f47dcbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:91:94:c9:05:18:a1:15:08:ea:8d:98:62:11:ac:49:b7:
         c9:9d:03:57:6c:d1:03:79:50:9e:a2:f6:d1:93:e6:b8:b4:91:
         f8:41:13:cb:8f:e2:7f:d5:ae:63:b3:db:ff:3a:27:f1:2f:2e:
         91:38:e9:4a:ae:92:fe:eb:b3:03:e6:0b:4f:39:2a:03:5d:1e:
         58:55:a5:95:8f:0a:81:ff:23:21:59:91:7b:aa:7a:b4:d3:6d:
         dc:ff:3e:9c:18:e3:6a:71:a7:3a:97:ad:b8:db:63:1b:51:90:
         ce:17:08:4c:52:c1:b1:d2:11:f6:ee:eb:0e:2b:02:59:f0:cb:
         95:ad:6c:c0:69:92:be:5e:e9:e9:45:65:63:08:62:1c:3f:00:
         70:3a:e9:bf:f3:0c:35:d8:8c:a3:62:5d:1c:df:1d:7e:8b:40:
         b7:0d:1d:4c:9f:be:32:df:d7:fd:05:15:a9:1b:1b:d7:8f:f3:
         08:9c:af:12:e7:89:d1:55:c6:c7:42:95:89:c2:17:48:5c:d3:
         a2:2b:b7:2e:58:b0:51:b6:fd:cc:3f:aa:5e:50:37:90:82:43:
         f5:66:6b:f2:f7:01:30:71:20:ea:6e:f9:d6:8d:35:2e:bf:aa:
         8c:29:6d:51:cd:cf:60:63:2a:47:46:d1:b1:01:bf:d8:91:55:
         7f:01:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:00:55 2025 by rpki-client