Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0148c427-0ecd-3a83-a5cb-bfcef3b18145.roa
File:                     0148c427-0ecd-3a83-a5cb-bfcef3b18145.roa (raw, json)
Hash identifier:          ufY7jGNHcj1BdzjFzJ7WuuSSbqdQtv4FzH0vjMQ+3uw=
Subject key identifier:   12:57:DE:A7:EC:78:AC:99:29:22:D6:BB:C9:2F:96:24:85:08:EF:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC96F944FB61D6C675D319200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0148c427-0ecd-3a83-a5cb-bfcef3b18145.roa
Signing time:             Tue 02 Aug 2022 12:00:00 +0000
ROA not before:           Tue 02 Aug 2022 12:00:00 +0000
ROA not after:            Wed 07 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.155.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c9:6f:94:4f:b6:1d:6c:67:5d:31:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  2 12:00:00 2022 GMT
            Not After : Sep  7 04:00:00 2022 GMT
        Subject: CN=9407ac3c-aa07-4884-91b3-ebb87cc912b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:96:2a:ab:ca:ae:93:b6:4f:eb:43:35:48:
                    d1:fd:61:77:5d:2a:14:47:8a:78:e8:f5:57:97:34:
                    16:a3:05:af:36:3f:cc:a5:c8:3b:20:e4:6c:4a:ab:
                    0f:47:a1:61:12:8e:e7:7d:4f:f8:e0:04:77:11:53:
                    21:8d:8f:63:e3:c6:5d:f9:63:9d:c2:66:59:f7:a5:
                    06:aa:c0:b3:e4:67:e8:7f:54:1f:8f:12:52:89:5e:
                    fe:9f:f6:df:fa:0c:2c:c7:5c:91:bb:1f:69:c0:e2:
                    61:21:cb:ca:6d:9e:7f:10:27:bc:af:8a:00:bd:57:
                    39:5c:c8:fd:f7:28:dc:4b:13:ed:d9:1d:24:4e:07:
                    fc:24:fa:bb:ef:37:31:f2:37:58:56:ae:9f:f5:ff:
                    dc:59:94:da:1c:fd:7d:8a:49:4b:48:41:8e:ac:bb:
                    92:45:13:56:80:0f:cc:30:6b:39:4e:b0:dc:48:14:
                    1c:96:6b:fc:b3:58:77:59:5c:bf:51:36:34:98:dc:
                    2f:db:be:cb:1a:8b:19:78:19:92:00:e6:7a:ec:22:
                    df:38:bc:12:44:7b:72:45:a5:82:b9:51:89:a9:85:
                    9e:74:73:9d:1f:44:73:a6:22:12:0f:0b:a7:2f:ad:
                    a9:b1:63:c7:83:00:40:43:6a:51:df:d2:f5:4a:e4:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:DE:A7:EC:78:AC:99:29:22:D6:BB:C9:2F:96:24:85:08:EF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0148c427-0ecd-3a83-a5cb-bfcef3b18145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.155.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:78:d3:2f:50:80:89:b5:35:bf:31:d7:26:c9:f9:82:c9:
         0c:5f:03:44:d8:95:62:14:53:2c:fa:d4:9a:ad:aa:e6:94:8f:
         2c:c0:fb:8c:32:3f:8d:53:dc:f3:5a:73:b3:1d:d2:c7:2d:dd:
         06:b1:a4:2c:b3:00:b3:74:7f:d8:cf:d7:43:40:af:3b:5c:9e:
         f1:77:3d:95:01:dc:32:a5:9c:86:c1:e5:03:02:51:9c:dc:1f:
         a6:fc:ff:0e:cd:1e:21:09:f4:3c:bd:8b:4a:cb:c9:ec:1f:a3:
         8a:e4:30:c7:06:16:f7:c3:56:d7:91:c2:cb:18:67:41:9b:e6:
         4b:a4:d2:e6:8e:36:b1:d6:b0:0b:e6:29:a7:9a:a3:d1:6b:ef:
         b7:cc:79:91:1d:99:94:7b:90:33:a2:00:e6:1a:1f:e3:71:13:
         59:5d:95:20:b2:9a:f7:f2:d4:25:85:25:fd:83:c8:44:7c:ff:
         22:06:65:cc:08:0b:cc:c7:dc:53:83:43:df:98:2d:dc:04:32:
         5a:f9:8a:2f:71:24:28:e3:6b:9d:e7:44:10:aa:db:f0:80:91:
         b1:9d:c9:00:64:0e:e0:ce:2a:9c:10:91:df:2d:a6:6c:d1:95:
         df:c2:5b:4a:3e:96:5c:e7:63:ed:24:05:65:94:ec:f5:a3:51:
         ab:68:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:44 2025 by rpki-client