Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e2e7f6b-50f9-3f7d-8021-6d137d890593.roa
File:                     0e2e7f6b-50f9-3f7d-8021-6d137d890593.roa (raw, json)
Hash identifier:          dnxxcVB6WETWteKvLA44qdwXdQ2k/VFkkd+9VZ3b458=
Subject key identifier:   53:3A:52:68:BD:2C:AF:2F:22:30:95:E6:C6:C1:79:0D:78:63:2C:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9F270D819F83973C146084C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e2e7f6b-50f9-3f7d-8021-6d137d890593.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9f:27:0d:81:9f:83:97:3c:14:60:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=6c163c3c-9154-4604-b27e-3f426fab03da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:ec:7d:0f:45:83:9a:74:e0:78:46:57:27:
                    0b:f5:f2:c2:cf:36:12:d3:6f:79:7d:98:49:df:10:
                    49:f4:5a:b1:2b:23:67:e3:0c:e1:21:3b:ec:d2:83:
                    e5:08:5e:cc:fa:92:39:46:6e:47:73:8c:dd:58:50:
                    c4:68:d9:a3:2f:0a:73:04:02:01:14:c6:76:95:22:
                    1a:42:ab:a9:0a:f9:38:67:5c:30:73:87:53:82:03:
                    9f:9d:7a:a5:6b:d0:26:65:2b:ca:21:70:20:ba:31:
                    8d:eb:c4:32:5c:62:64:96:5f:b4:20:92:dc:8d:ae:
                    5a:d5:c9:1a:18:50:bc:c9:c8:f9:c2:75:71:00:86:
                    fe:f1:17:68:ab:aa:94:18:cd:13:72:9b:bf:c8:17:
                    e2:bf:d0:c5:ed:20:91:29:38:72:8a:db:10:1a:f2:
                    24:4c:37:01:e9:95:05:d5:d2:a8:c3:65:60:2e:af:
                    32:04:7b:6a:61:90:a1:a0:cb:64:44:cf:a6:6e:f3:
                    9c:0c:07:d5:e3:fd:3b:e0:6e:6d:53:d4:ef:f1:8a:
                    b4:f3:f1:49:67:1e:96:32:ff:14:b3:38:2a:6c:25:
                    12:f2:de:bf:01:0d:ab:fa:3b:2e:d2:25:29:09:92:
                    76:6f:97:42:2f:f4:6f:4d:46:85:5d:4c:9a:c5:5d:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:52:68:BD:2C:AF:2F:22:30:95:E6:C6:C1:79:0D:78:63:2C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e2e7f6b-50f9-3f7d-8021-6d137d890593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:52:50:20:12:83:85:3e:cd:8a:be:76:76:11:82:b0:ee:7e:
         3e:28:2a:67:e9:3b:6d:26:10:93:36:2c:8e:75:89:9e:91:f3:
         e5:3f:95:23:1c:ac:e5:c3:d3:77:d5:e0:19:2a:81:b5:46:ec:
         1f:44:b8:ee:21:4f:69:ba:6e:9e:93:56:1f:05:45:d1:7d:80:
         d9:ce:9a:aa:90:49:70:10:b7:43:db:f8:5e:ff:c5:d6:8c:d1:
         17:10:ff:4d:7f:72:3a:78:4d:63:75:f4:30:17:06:26:2e:48:
         75:cf:bf:93:bb:12:0b:3c:93:1f:ca:34:60:56:a7:82:1c:52:
         51:aa:96:33:2d:0e:32:dd:2c:86:82:19:01:50:cb:60:93:1e:
         fe:7a:6b:2b:66:18:c5:a9:f2:10:65:9b:8e:b7:33:60:77:71:
         39:42:fb:e3:b6:a7:27:94:9b:61:82:b1:c6:00:27:ee:21:3d:
         8b:06:38:d9:94:66:21:4b:46:ed:a7:a2:3c:23:9e:3a:e4:3b:
         8f:34:29:5f:9d:98:0c:61:a1:fb:52:bf:ca:11:0d:f1:82:f6:
         b2:09:ac:4b:c8:17:c2:c0:22:23:ca:be:63:d5:e7:9f:59:cf:
         31:bd:1d:89:d0:57:ba:f9:db:e5:be:5d:7f:02:6b:6e:9b:cd:
         5c:71:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:37 2025 by rpki-client