Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          stQiV32117ZQ8ZraP0NiGVI/Gr9fhKqlT7Zrrjz9jqU=
Subject key identifier:   35:18:F6:BA:CA:6A:80:AF:D5:34:45:C3:AC:5A:9B:E7:A9:DF:8A:56
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       45D6DCFCEC02BAC0103E11D05DEBD5D12094A665
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS16276.roa
Signing time:             Thu 23 Jan 2025 21:44:49 +0000
ROA not before:           Thu 23 Jan 2025 21:39:49 +0000
ROA not after:            Thu 22 Jan 2026 21:44:49 +0000
asID:                     16276
IP address blocks:        104.167.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:dc:fc:ec:02:ba:c0:10:3e:11:d0:5d:eb:d5:d1:20:94:a6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 23 21:39:49 2025 GMT
            Not After : Jan 22 21:44:49 2026 GMT
        Subject: CN=3518F6BACA6A80AFD53445C3AC5A9BE7A9DF8A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:d2:44:7e:b8:76:85:0a:8c:d7:89:e3:78:
                    df:48:ca:94:7f:ca:d9:77:ee:a4:0d:f0:71:df:47:
                    ab:f8:4e:32:93:45:04:35:a1:fe:b3:6a:aa:47:b5:
                    f1:74:36:53:ec:a3:07:e7:e0:36:6a:80:a8:ef:aa:
                    8a:b7:5a:3f:6f:f7:57:9c:e8:4e:b8:dd:83:83:3c:
                    c4:1f:bd:00:91:61:19:37:4f:39:83:8e:ed:bd:6c:
                    60:28:1d:2e:c0:62:80:11:87:5a:87:c7:2d:3f:ec:
                    9f:c0:b4:4e:9d:10:14:55:ff:fe:73:62:ec:85:5d:
                    25:73:2b:50:09:45:6f:4f:d2:ea:06:3a:67:e6:78:
                    c5:79:cb:bf:dd:c0:70:e5:c9:0e:c3:73:3b:38:1e:
                    fb:fa:21:aa:ea:ef:7b:65:fd:b2:71:31:37:57:29:
                    52:23:b8:22:d8:fc:88:b4:3f:32:80:94:bd:b9:91:
                    c7:91:50:41:20:c4:26:2e:d3:14:d4:62:58:69:24:
                    61:c9:84:c9:59:96:64:95:27:2a:18:1c:ad:63:05:
                    ab:8b:1b:2d:a1:8f:d6:c3:6d:d9:5b:1a:61:a8:04:
                    ca:8d:a5:83:4e:1b:31:90:61:96:2f:3f:d1:ec:92:
                    c3:5e:2a:68:81:e9:8a:7f:2a:48:8e:37:cf:31:db:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:F6:BA:CA:6A:80:AF:D5:34:45:C3:AC:5A:9B:E7:A9:DF:8A:56
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:b9:6b:4a:9c:3d:40:6e:32:20:af:11:97:18:05:e3:d5:
         01:f0:cc:8d:18:ad:f1:41:64:1f:f9:ac:26:56:f1:2e:7d:a0:
         e8:79:0e:cc:7c:36:93:4b:d1:ad:2b:96:1d:4f:7e:03:b8:7f:
         c8:9e:c7:75:bb:3e:a3:f3:fe:f4:fc:35:aa:e0:c4:7a:c5:bf:
         77:f5:ea:a6:2b:24:9b:4b:da:34:de:0a:62:61:cc:32:03:16:
         80:f8:6f:c3:cb:18:e3:ed:2e:92:15:9d:67:1f:24:61:a1:02:
         eb:e2:d7:81:6e:e6:d0:87:7c:96:60:2f:5f:96:7d:b7:aa:6f:
         85:66:a0:a7:be:a7:89:5d:e0:02:b1:fa:fd:fe:41:88:c0:27:
         8d:49:c8:c4:2f:d2:a1:7d:b1:2d:d8:da:8f:63:b4:92:ea:66:
         c0:40:7b:b7:08:95:84:33:20:30:a5:e7:e6:5a:46:68:7c:0f:
         44:15:35:79:37:cd:55:ba:1d:b4:88:4e:cd:72:1e:86:e3:a2:
         ef:de:fc:88:62:c6:fa:07:16:83:6b:08:c1:33:42:60:24:c9:
         84:fd:6a:30:4f:54:c3:c2:fd:9c:d1:80:4e:25:68:ee:3e:64:
         59:fc:e7:3e:1f:14:1c:43:01:77:dd:56:57:49:5f:a4:fc:26:
         45:1f:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:23 2025 by rpki-client