Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05620185-1b94-34aa-90a9-30ea6b81e958.roa
File:                     05620185-1b94-34aa-90a9-30ea6b81e958.roa (raw, json)
Hash identifier:          QcuCwdTqWvd7Mt7+qWCEmYyeox1ip0SA2e2e/iC30CY=
Subject key identifier:   7D:09:E8:84:2E:98:EB:1E:03:98:F6:2C:97:AB:1D:43:CC:FE:14:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5611BF2AE275AC73BF2BA500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05620185-1b94-34aa-90a9-30ea6b81e958.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:11:bf:2a:e2:75:ac:73:bf:2b:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=c868770c-f94b-4910-81c2-5d4c28606400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:1b:fa:a2:33:8f:7d:9e:2c:00:05:85:22:
                    a4:e0:dc:cc:ea:05:db:c7:1a:aa:d2:0b:4a:cf:c3:
                    39:ba:0a:32:16:32:e7:7d:72:a8:bd:65:fe:14:e3:
                    19:70:2a:4c:3f:15:16:71:43:91:9e:59:55:3f:1d:
                    f0:03:f7:73:d2:ea:02:11:f6:f0:94:8e:2b:8c:e9:
                    12:78:23:53:8a:9c:99:05:af:c6:2c:0e:9b:94:3a:
                    3e:23:69:52:92:92:f1:a3:06:08:7c:c7:c5:6d:fb:
                    a5:a9:c5:7f:34:a3:71:78:6f:3f:58:32:0e:1a:da:
                    1e:d4:3a:9b:52:fa:a0:f0:f1:b8:16:58:63:2d:e7:
                    35:4b:16:2e:eb:89:ba:f4:00:6c:07:23:3f:9d:f5:
                    8d:42:8d:43:39:4f:3c:45:3a:1a:d6:49:d9:54:a4:
                    cc:3d:a6:2c:68:94:50:03:2d:2d:d0:31:d8:59:7e:
                    40:73:cf:23:71:83:90:dd:3c:f0:8d:c9:17:9d:0f:
                    31:82:aa:ef:f0:8b:30:a2:83:34:a7:3d:ec:d8:a2:
                    9b:e6:9f:05:2f:15:19:c2:0e:43:65:f5:75:93:e1:
                    9d:f5:45:80:28:c4:51:5e:5a:70:0b:97:ba:14:a9:
                    b1:56:9e:82:75:92:24:0f:80:8b:8f:95:be:6d:ee:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:09:E8:84:2E:98:EB:1E:03:98:F6:2C:97:AB:1D:43:CC:FE:14:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05620185-1b94-34aa-90a9-30ea6b81e958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:5e:0f:06:4e:7a:ba:2e:65:13:68:4e:55:2c:c9:c8:99:
         83:b7:ff:35:0e:49:61:2e:ba:3f:5d:68:a0:84:d4:22:cb:73:
         87:f8:19:72:eb:4e:9e:63:b3:d9:e5:ad:f8:c7:f4:fa:0a:13:
         7f:09:da:f2:ff:23:a4:8d:43:f1:85:d7:79:57:d2:43:9a:a4:
         72:62:dd:10:6e:33:04:6c:a4:03:52:be:32:dd:99:e1:2f:45:
         f7:ae:38:68:62:3b:77:3b:72:60:ce:4f:af:bd:e6:fd:f5:97:
         d4:a6:07:2d:6b:10:fc:eb:8d:ca:06:ac:9c:1d:d2:ac:73:8a:
         b4:df:51:db:42:df:ca:a7:f7:a5:dd:bc:d8:47:22:1b:92:8f:
         d6:dc:4d:0f:57:70:f9:94:9d:b2:cb:30:e6:48:f8:0f:6d:ce:
         b0:40:9b:c6:84:d1:76:6b:e6:73:02:81:60:4b:d3:a9:e9:0b:
         e5:ce:43:f9:85:51:ee:3d:20:cb:32:75:dd:30:f9:b4:a0:d2:
         dc:f6:9d:18:fe:72:1e:7a:2c:4f:76:a2:ef:6d:82:9a:55:29:
         4c:ba:f8:6d:40:58:83:57:0e:98:97:3b:65:50:5e:2b:9c:38:
         16:80:a8:86:08:78:ac:4e:6d:93:f4:ff:91:d7:9b:eb:bb:25:
         3f:d1:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:35 2025 by rpki-client