Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1221993f-c115-3fb2-a621-a8159f961c1e.roa
File:                     1221993f-c115-3fb2-a621-a8159f961c1e.roa (raw, json)
Hash identifier:          pEghEqVnJG9MDHUce3qifJs/+tW8yKo+9wVB5SQo9d4=
Subject key identifier:   3C:B6:32:5A:02:97:FE:AC:80:D5:30:06:FE:DB:E7:45:D0:00:8B:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7A4DCDD77CE6D1FAE5283C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1221993f-c115-3fb2-a621-a8159f961c1e.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:4d:cd:d7:7c:e6:d1:fa:e5:28:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=a59f38e1-dc06-49b4-bee7-ba7b4bba5221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:8c:32:8a:b6:f3:37:75:4a:ef:d3:09:16:
                    f9:ae:d1:6c:43:02:82:92:01:21:ee:04:10:de:8a:
                    31:9e:30:bf:76:65:cc:46:af:0f:55:59:d4:e2:b3:
                    b0:3e:e8:94:a8:1b:15:40:18:33:82:11:07:15:e3:
                    9c:e3:03:50:fd:aa:a6:96:25:f9:af:56:6e:40:bd:
                    48:c1:0c:a8:44:22:b6:16:a5:5c:6a:dc:01:a0:68:
                    83:e0:9a:39:c7:67:6f:47:28:b6:57:4b:a8:fa:81:
                    85:b9:0b:c8:fb:15:96:c7:62:d0:96:c5:bc:4b:53:
                    76:13:3d:d5:55:18:6c:fd:87:62:e6:4b:ab:2c:76:
                    d4:5b:dd:47:93:f8:36:5c:67:52:04:11:38:2b:9a:
                    cd:dc:db:85:c7:22:24:ad:4f:49:02:80:42:96:fc:
                    06:70:7c:b2:db:2c:a6:a5:2b:ff:08:1a:0b:ad:e9:
                    2c:03:7a:32:f0:4e:22:80:b2:e0:d1:98:49:99:0f:
                    37:2f:28:41:44:2a:2e:f6:09:65:f6:77:b5:37:f5:
                    d8:0c:a3:45:34:c4:39:a1:c8:9e:ed:74:b5:98:b7:
                    d0:ad:48:9b:37:fb:7e:0d:2f:fb:0d:28:5e:2d:ae:
                    8e:4b:57:f5:dd:59:78:63:2d:64:0e:3a:34:ce:92:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:32:5A:02:97:FE:AC:80:D5:30:06:FE:DB:E7:45:D0:00:8B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1221993f-c115-3fb2-a621-a8159f961c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c1:28:d1:45:93:b6:30:57:d7:bd:26:a8:a8:75:64:67:cc:
         a9:66:1e:de:44:f1:fb:5e:95:bb:91:4d:c1:7d:5d:f9:94:12:
         72:4f:3c:be:73:93:5a:70:94:61:a8:3a:93:f9:5c:a0:61:d0:
         67:16:e3:5f:72:6a:65:d8:a4:19:f5:c9:eb:43:c9:ef:1c:16:
         e0:4b:61:fa:16:c8:2f:2c:af:8a:d4:86:5f:31:7d:48:6a:8a:
         f5:9c:76:91:72:45:3c:5d:b8:99:cb:d9:f7:d2:72:d5:47:09:
         97:b7:56:12:5b:da:27:b6:44:69:9e:81:fe:2c:04:d3:ac:7c:
         99:5c:e5:bb:53:aa:c9:d0:42:1f:f5:f1:b7:1e:55:5a:94:4f:
         d7:d1:15:78:ae:53:3d:f6:13:8d:9b:63:1c:47:cb:03:70:43:
         da:a6:c8:4e:c5:f5:7e:2a:4c:1e:d8:d3:54:60:e7:45:bd:db:
         1a:b9:15:f8:f1:19:50:0a:02:e3:be:ec:98:7f:ef:4e:0d:cc:
         40:84:f4:4f:13:44:36:cb:f0:18:ce:61:6c:5d:81:5b:06:b5:
         a2:8d:75:4a:66:3a:e5:3c:a4:b0:a8:0b:0e:45:45:26:fe:56:
         93:61:95:ff:ac:b6:b6:96:0d:53:fc:55:c1:cd:44:e4:79:dd:
         b4:f5:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:31 2025 by rpki-client