Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0819e3ca-ac99-32f7-a9c0-5b67a8d39b35.roa
File:                     0819e3ca-ac99-32f7-a9c0-5b67a8d39b35.roa (raw, json)
Hash identifier:          0lbb5uesGhxzAqu/THe1BSVdj5ZaKntASqwRg3hKwHM=
Subject key identifier:   D6:D9:00:34:C4:31:7A:E5:1D:87:19:C4:AB:E4:1C:56:48:9F:1F:EC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CC813C680C851F0F7FFB12D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0819e3ca-ac99-32f7-a9c0-5b67a8d39b35.roa
Signing time:             Tue 01 Feb 2022 05:00:00 +0000
ROA not before:           Tue 01 Feb 2022 05:00:00 +0000
ROA not after:            Tue 08 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c8:13:c6:80:c8:51:f0:f7:ff:b1:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2022 GMT
        Subject: CN=d3d396ee-090d-4c32-aedb-296b010fb109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:2d:f6:89:43:20:62:68:ff:83:c3:15:7e:
                    20:20:43:41:28:98:b7:7b:e7:6c:17:65:f1:43:79:
                    00:41:f5:32:ae:6f:57:4e:33:31:f4:6a:b0:de:15:
                    b6:dc:f7:9d:7c:21:98:59:1a:5b:ab:3a:c3:19:db:
                    a7:34:ba:21:89:57:d1:8c:b0:88:6a:c8:ae:b5:7d:
                    e0:88:05:53:c3:d9:8b:e3:82:77:5d:ad:f2:e4:84:
                    91:d8:d8:6e:fe:b5:15:85:be:63:f7:42:c7:29:ab:
                    6d:8c:a2:71:8e:31:a6:47:08:f8:4f:c5:5f:85:bb:
                    97:6b:11:1d:87:4e:06:6a:38:61:6b:f8:61:de:bb:
                    3a:0e:c8:d0:2b:0b:bb:48:b5:22:2e:fc:39:d2:61:
                    e3:a5:24:58:24:03:4b:93:00:2c:07:0a:95:e0:46:
                    06:84:b8:d4:24:2f:85:2d:60:10:0a:49:1a:cb:25:
                    f2:b0:7c:c1:d3:a8:73:53:5e:98:61:9a:0a:ce:84:
                    95:9c:69:41:cb:bf:b0:64:ed:cf:7a:86:a6:fa:08:
                    db:ad:80:f7:e0:cc:4c:5c:ea:0a:53:74:49:1f:af:
                    69:0d:ac:c4:dc:1b:13:87:60:e6:de:fb:ef:79:6f:
                    8f:ba:55:54:8a:53:de:2b:05:fb:6b:2c:00:70:8c:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:00:34:C4:31:7A:E5:1D:87:19:C4:AB:E4:1C:56:48:9F:1F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0819e3ca-ac99-32f7-a9c0-5b67a8d39b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:da:8a:a2:7d:35:8d:f5:1b:6c:0c:31:f2:3b:5f:4a:6c:01:
         22:fd:1c:8c:4c:1b:45:9e:e5:b6:da:0f:86:42:eb:00:7a:01:
         36:51:09:94:ce:70:eb:ba:90:e8:06:98:51:70:bd:2e:44:b2:
         f7:2a:a6:94:a3:c4:b1:d4:df:9c:f9:8f:d8:c8:cf:67:29:19:
         6f:a5:c1:55:b4:ab:00:a0:de:ff:a1:71:11:7e:fb:1e:83:c0:
         13:2e:c9:31:15:ae:5f:03:53:55:c2:66:cd:17:5c:9d:db:3f:
         f8:39:62:ec:ed:6e:b1:88:69:4d:82:25:95:b8:8d:fe:c2:2f:
         77:5d:e9:e5:fa:6a:fb:8e:d9:a2:a7:12:67:b1:ce:bc:8e:90:
         9f:86:50:d9:a8:cc:67:d7:ec:d8:a8:b6:d8:2a:ab:41:e5:fc:
         6e:84:df:c5:4b:e6:b3:26:34:ad:33:09:6e:79:9b:c0:8d:e2:
         79:97:39:b4:ac:c2:5d:95:94:a6:23:a5:a7:90:09:8b:c4:0f:
         7f:1f:29:8e:d0:d9:37:44:15:7d:30:77:7b:b3:b0:93:6e:62:
         7f:e8:8d:a6:85:dd:e1:a0:14:bc:9b:9b:33:05:11:99:24:8d:
         b6:ca:c2:ab:54:78:4b:6d:d5:91:1c:5d:c9:ba:e7:f0:9d:54:
         61:98:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:52 2025 by rpki-client