Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06898cb3-018b-36fd-95a7-ca5e1818cada.roa
File:                     06898cb3-018b-36fd-95a7-ca5e1818cada.roa (raw, json)
Hash identifier:          Er3/FKwEoNpHrINDxNfImkgyoBjPkG1L7RMJoJSHcDI=
Subject key identifier:   C0:F6:ED:8E:D4:C0:41:3C:01:62:66:9B:9B:04:14:45:A3:FD:C3:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA197A7552E2C0316B34B5680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06898cb3-018b-36fd-95a7-ca5e1818cada.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:97:a7:55:2e:2c:03:16:b3:4b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=35738c6c-7aee-430d-8ff3-c79f98a451ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:d9:50:a3:81:42:58:6d:40:c0:f6:75:38:
                    43:4f:b6:01:a1:91:a2:76:0f:83:35:9a:f8:b5:96:
                    3c:96:63:62:9d:6a:20:fc:9c:66:24:11:c8:30:95:
                    d2:4a:ce:e5:b2:b1:c6:fa:57:d2:39:6f:64:cd:e4:
                    a6:1c:63:9b:fc:80:ef:da:b0:90:1c:e4:4e:de:58:
                    c8:31:c3:5d:d3:53:a4:c5:7f:a2:95:d7:12:12:18:
                    88:99:03:e6:e7:6f:d8:20:ac:db:5e:9d:79:1c:80:
                    14:c1:e2:b6:4f:c7:07:06:6c:61:04:ef:4e:ed:27:
                    35:45:a2:31:8a:c9:a1:95:24:b2:82:a1:c0:61:26:
                    66:42:24:91:09:43:76:1f:c7:6c:72:5b:5c:89:33:
                    ed:d3:47:08:8c:8f:46:fd:e8:15:d9:2b:58:23:6c:
                    c1:32:7d:2c:70:04:2e:0b:8e:4f:da:8e:af:dd:72:
                    b4:c9:f9:87:69:6d:6a:fe:f5:3d:ac:c3:ef:ad:20:
                    cc:47:2f:b0:9d:18:f0:f1:25:80:3c:de:df:d4:41:
                    8e:aa:c9:62:3e:6d:d3:52:66:eb:15:04:d3:4b:a5:
                    f9:de:8c:42:aa:dd:ed:19:6d:23:06:81:80:59:a7:
                    bf:25:08:34:70:98:02:d6:45:dd:8a:f2:10:e9:1d:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:ED:8E:D4:C0:41:3C:01:62:66:9B:9B:04:14:45:A3:FD:C3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06898cb3-018b-36fd-95a7-ca5e1818cada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:f5:02:6e:58:a4:03:a5:c3:88:b3:57:c6:d9:7e:49:79:
         26:7a:26:ce:0c:bf:3b:78:e6:ac:33:08:1a:46:55:91:35:3f:
         f8:be:c8:e0:ec:e6:f6:eb:1b:1b:d5:25:36:d5:e8:c1:7e:38:
         5a:6c:33:ed:55:9e:61:53:f7:fb:c3:a6:fa:a2:0f:85:85:74:
         2a:09:c6:ad:ce:03:23:3e:07:ad:e8:0e:07:57:cb:b4:85:3a:
         b0:5b:a6:3f:3c:92:2a:89:b4:18:ba:91:c7:91:c9:f5:17:e1:
         22:1f:f6:d9:43:8c:82:f2:e9:8e:b9:0c:68:15:26:9e:2e:49:
         2a:24:0d:6d:da:02:1d:39:36:4f:4a:07:30:aa:10:90:1a:44:
         54:65:c4:13:48:23:e9:cb:66:14:bd:c7:cc:40:c6:43:5e:bb:
         36:dd:ad:a2:9c:90:f9:8e:dc:4b:20:70:06:99:c0:d8:95:48:
         8c:07:36:b3:38:61:a6:d9:c1:3d:3a:c8:fe:76:74:0d:69:ac:
         dd:00:34:8d:57:2c:15:5d:b6:4a:52:54:77:bf:04:c1:5f:66:
         36:bd:6e:46:d8:3b:1a:80:78:bd:e7:8b:a3:4a:a1:2c:38:3d:
         cb:44:03:c1:4d:f0:9c:d1:c0:72:77:73:f3:7f:fe:95:90:a1:
         0a:ac:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:39 2025 by rpki-client