Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bba7744-d71b-35cc-accc-2d0f24b36216.roa
File:                     0bba7744-d71b-35cc-accc-2d0f24b36216.roa (raw, json)
Hash identifier:          NXt05y3KvKoee4hKJ7Rete2wHWpqWoow8I8N9TUinJc=
Subject key identifier:   74:50:5E:41:E0:84:3A:78:0B:E7:A6:2C:25:B4:18:8A:B2:65:C1:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403D9BDD17C0FD437FFC40E480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bba7744-d71b-35cc-accc-2d0f24b36216.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.95.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:9b:dd:17:c0:fd:43:7f:fc:40:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=a584bf26-e5e1-4e18-9e69-8507533dd138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:1f:bb:2d:e7:47:71:54:93:51:57:28:da:
                    8d:c4:bc:23:27:fe:b0:77:be:5a:cb:c9:91:07:8b:
                    08:9f:43:c3:c1:59:28:6f:6d:f2:32:d4:a7:8c:8c:
                    89:9e:33:0c:ad:ae:ac:59:07:83:83:db:21:70:72:
                    25:e0:1c:b6:f7:7f:d8:07:42:78:50:1e:75:8c:c2:
                    34:5b:b3:37:ef:7a:67:a7:0a:f3:86:16:46:45:43:
                    33:2f:d4:da:e4:41:97:7b:03:88:35:55:23:60:e8:
                    cf:61:5d:c1:11:32:7b:5d:9f:d0:76:e3:a0:6c:fa:
                    70:6b:90:b5:1c:31:e5:14:0c:12:81:63:ab:58:dd:
                    f0:eb:5d:53:78:2c:0c:e3:fb:5b:d2:d9:26:9e:d8:
                    bd:11:6c:18:5b:d7:fd:55:8a:05:48:9b:51:b8:07:
                    fd:bc:21:8f:c7:2a:68:a3:ac:e4:70:3c:84:98:53:
                    92:cc:71:d5:28:b3:7c:c9:a7:eb:e7:8c:7a:72:33:
                    cf:93:5f:3c:c6:1f:b6:31:48:c7:cc:f4:d1:d7:f9:
                    8d:cc:59:54:52:62:df:75:77:6d:94:e3:da:94:c4:
                    ae:c5:4b:65:24:a1:aa:51:73:03:e4:b7:08:e5:ee:
                    86:18:5b:22:81:13:7b:d3:51:bb:00:3c:c0:44:56:
                    9e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:5E:41:E0:84:3A:78:0B:E7:A6:2C:25:B4:18:8A:B2:65:C1:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0bba7744-d71b-35cc-accc-2d0f24b36216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3e:af:74:55:d9:99:5a:11:bf:33:37:9d:33:db:63:8b:a8:
         dd:e9:04:17:de:28:f0:51:ba:db:7d:68:b3:60:1b:55:e2:b8:
         bd:18:b1:25:95:b9:e8:af:b0:e9:a6:da:80:39:c9:22:ce:b4:
         07:d1:41:a1:c3:7f:bf:51:fa:92:dd:3d:8c:0a:75:2b:66:8c:
         56:7f:90:81:16:ac:d5:f6:c4:d0:0c:38:3c:6a:a5:b6:2f:8e:
         84:1e:f6:fe:3a:8f:34:8d:da:a5:c7:cc:0c:6d:54:23:f0:c9:
         b3:0c:20:85:75:22:4e:51:76:80:e0:5f:8a:cb:53:20:f3:1c:
         b6:0f:1c:45:5f:2e:8e:ff:5b:38:57:70:aa:a3:ae:21:aa:d8:
         fd:17:b6:f5:b2:59:76:f9:2b:45:f1:32:7e:ee:b5:d5:ff:dc:
         ff:7f:90:22:d0:d7:8b:e0:f5:ef:34:9a:20:b6:6b:66:88:e3:
         75:32:6c:6e:67:cb:b4:45:78:be:a8:6d:ef:09:a6:f7:4d:5b:
         73:37:e3:4d:49:c3:c1:02:0e:8b:a0:58:6f:f9:8b:e8:0e:bc:
         06:e8:93:91:c5:0f:f8:56:f0:ae:12:10:1b:0f:96:18:fb:3c:
         13:0a:75:ab:01:1f:85:81:10:21:cd:8e:12:30:99:f1:2e:4f:
         d0:32:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:20 2025 by rpki-client