Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c5e71d8-655a-3ed3-8585-fae1f4960284.roa
File:                     0c5e71d8-655a-3ed3-8585-fae1f4960284.roa (raw, json)
Hash identifier:          ddiNUxAp/9mn99N9r/CP/UKrgnPUVl36HBPSu6rGK0c=
Subject key identifier:   85:E2:A3:6B:D0:00:04:A1:F1:FC:AD:34:B3:2F:73:CD:25:35:F6:13
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA1ADB923D185722A158AE580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c5e71d8-655a-3ed3-8585-fae1f4960284.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:ad:b9:23:d1:85:72:2a:15:8a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=58a3becc-4a09-4219-82cc-524ade098bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:e3:c2:dd:49:1c:da:d7:5c:c9:e0:56:43:
                    05:04:0e:cf:ac:64:1a:0b:e6:28:e2:d0:e7:e7:a2:
                    a0:42:ea:a1:8f:3a:a3:0f:26:d6:72:10:2a:04:07:
                    f2:d0:12:d5:a3:af:36:db:e4:9d:0a:08:cb:a0:35:
                    68:5f:65:a0:60:60:df:39:09:ec:77:eb:2c:93:c8:
                    42:72:00:8b:a2:9e:90:86:ed:0d:35:24:37:7d:69:
                    f8:69:95:de:d3:c2:da:40:7c:c9:ad:eb:82:f6:48:
                    08:4a:63:0b:b7:c8:0d:cf:93:51:9c:3d:e0:81:67:
                    aa:6b:ca:87:63:d4:81:3b:c4:7b:ed:cb:8e:1f:a0:
                    0a:27:a5:dd:31:17:d1:18:b8:be:57:79:b2:28:cc:
                    fd:51:1a:81:22:31:42:15:7c:48:62:b3:c4:9f:cb:
                    28:7e:56:aa:a7:da:32:18:99:ff:39:bd:ff:f2:0f:
                    f9:b6:0d:71:eb:96:cf:ff:d5:a8:6b:01:03:8e:b4:
                    cc:2d:e8:46:06:31:5c:33:10:03:46:df:67:5c:7f:
                    bc:aa:12:15:95:8c:62:19:79:ec:2f:a2:8b:4e:45:
                    b1:b0:4c:33:c4:76:45:a1:11:18:71:89:ab:59:a7:
                    5a:7e:a0:cd:66:68:0a:c1:80:e3:e5:6a:ad:fa:34:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E2:A3:6B:D0:00:04:A1:F1:FC:AD:34:B3:2F:73:CD:25:35:F6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c5e71d8-655a-3ed3-8585-fae1f4960284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fd:b3:b1:43:53:f8:8b:81:e5:3e:6a:ac:03:57:86:8a:57:
         c0:72:cf:8a:52:b1:22:3f:a0:47:e5:0f:8a:f4:9d:be:e2:5b:
         69:74:a1:de:d0:99:5f:c1:c3:2a:16:c0:a8:68:99:71:28:b0:
         50:e0:76:80:d4:d6:df:a7:92:29:8f:3a:d5:aa:a3:e3:50:09:
         68:ac:ec:df:6f:32:ee:73:2e:fc:a8:cf:2b:a5:74:99:dd:b4:
         c2:a7:e1:3e:b8:29:7b:9f:e1:6a:3d:66:1b:8f:b9:a9:1d:8e:
         1d:0c:0e:d7:d2:96:c2:05:8c:bf:8b:51:f8:e9:77:26:91:77:
         96:91:e4:a5:4a:68:5c:fd:77:f7:c3:37:f6:a9:9d:14:5f:95:
         c9:13:a9:fe:cc:18:ad:73:fd:25:6e:df:1b:a1:50:ed:cb:04:
         20:d2:02:59:48:8e:2c:5b:fb:d1:ad:ff:22:ea:ae:bd:7a:42:
         7d:3a:88:00:99:07:76:c4:be:84:db:4f:1c:61:46:d8:5e:b8:
         ae:08:54:4e:f9:2e:e4:7f:12:7b:0b:44:80:24:95:0c:10:0a:
         67:17:35:25:b5:a9:a9:2f:cb:73:16:ca:f4:c3:f3:8d:e3:0f:
         f7:8b:86:bf:a9:cc:35:49:1a:d8:70:8a:b4:ca:ef:83:58:98:
         ae:57:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:22:08 2025 by rpki-client