Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ece6015-35b4-3347-8fa4-3530ed927345.roa
File:                     0ece6015-35b4-3347-8fa4-3530ed927345.roa (raw, json)
Hash identifier:          pkkuG1kKr/qJtlFwxfnjHzFjRASmPOIOV+88y9GyrSY=
Subject key identifier:   67:AC:DF:78:E0:97:8C:BB:2A:F2:F0:D0:82:70:3C:B2:B8:77:E3:87
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA5D68EBD700989910F73A540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ece6015-35b4-3347-8fa4-3530ed927345.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:d6:8e:bd:70:09:89:91:0f:73:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=858b8396-0191-4faa-967b-9325b89ea94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:0b:60:51:01:01:9b:81:b1:73:d6:50:1f:
                    55:a3:e5:7a:ec:45:15:e7:16:85:71:59:62:89:93:
                    88:40:60:04:45:5f:34:5e:3b:28:0a:9d:51:51:31:
                    1a:a3:1e:ad:a6:e4:91:d0:2c:17:66:69:6f:83:71:
                    48:3b:21:f1:96:29:d0:04:30:37:38:67:53:37:63:
                    44:69:df:7e:73:6d:21:4d:b5:53:5f:61:c7:99:bc:
                    44:ba:6c:cb:c5:af:e0:7d:b6:00:b0:3f:b5:54:a0:
                    90:57:4a:05:e0:9d:29:f0:1d:3d:26:c8:81:e5:47:
                    80:fc:e8:94:26:44:f5:93:7b:10:03:ab:1f:06:4b:
                    19:ea:24:1e:87:f0:c0:15:4c:d8:8f:85:20:95:8e:
                    f2:e6:f3:46:fc:40:08:6a:d6:2b:56:6e:e2:66:cc:
                    49:29:ed:85:b0:fa:5a:1f:c4:2e:ca:45:fb:4d:ec:
                    48:16:8e:a1:58:76:17:d9:3e:a4:16:55:35:27:fa:
                    ec:41:ad:d4:a3:fa:e9:02:40:56:c1:c4:ee:72:91:
                    e7:8e:2f:0e:6c:a7:b3:0d:d8:08:9a:66:cf:52:97:
                    93:d9:b8:c2:6a:e5:1a:fa:91:4a:7f:fd:60:61:30:
                    0e:ff:7c:63:55:3a:32:61:e0:4b:d7:4a:3e:09:9c:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:DF:78:E0:97:8C:BB:2A:F2:F0:D0:82:70:3C:B2:B8:77:E3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0ece6015-35b4-3347-8fa4-3530ed927345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:84:45:34:51:e3:9a:18:22:5a:9a:6e:12:0a:8c:c0:63:
         cf:65:8c:63:ad:01:8c:9c:eb:e6:01:f1:af:85:24:cd:52:a5:
         3c:bc:62:54:6d:d3:76:5d:ee:59:f1:69:a3:a7:2a:da:1f:17:
         d6:9b:b9:7b:af:03:b9:52:81:83:e8:22:9b:3e:23:b9:c0:8b:
         7d:e0:b4:88:f9:6c:b2:72:d2:3d:32:84:bb:ea:c5:10:11:00:
         c0:13:a2:33:4d:db:29:57:e2:49:80:59:67:34:10:a0:fd:7f:
         e6:c0:a9:82:2b:ad:ca:a1:3d:fe:d3:9c:ad:ea:f8:20:53:46:
         82:2c:71:e3:5e:bd:54:fb:db:1a:1d:e1:fe:6e:14:fa:12:35:
         e8:0c:63:9a:6b:4f:79:18:02:f9:89:a6:fd:ed:63:f6:d3:b2:
         39:4c:fd:95:b8:46:bb:58:2a:c0:fa:4f:ad:7f:af:33:37:8d:
         ad:cd:04:6e:8c:b0:e7:a3:6f:be:1a:2e:3a:cb:9c:67:3a:1c:
         8e:e0:fe:08:a9:08:b2:a2:1a:5e:ad:a5:15:59:2e:90:77:49:
         7e:07:80:7d:e3:a5:b7:5f:00:e1:d1:4e:4a:59:d4:7e:40:81:
         3c:7c:57:41:72:b6:c9:52:70:42:59:bd:65:ea:98:b7:af:c4:
         4e:8a:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:18 2025 by rpki-client