Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14704bed-18fd-3bea-968f-2a834b346bc6.roa
File:                     14704bed-18fd-3bea-968f-2a834b346bc6.roa (raw, json)
Hash identifier:          DxVEOxpV3vixhPAxeIcppNLD0KQcE5s6Xl32zcCVzXc=
Subject key identifier:   00:07:BD:FA:15:35:17:8A:90:38:A2:CC:05:77:F5:6E:39:69:68:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D567C177D73631C23A4310980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14704bed-18fd-3bea-968f-2a834b346bc6.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:7c:17:7d:73:63:1c:23:a4:31:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=de62a7c9-810a-418b-817f-58a1e7513dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:92:ef:2f:50:7f:0e:bb:95:90:10:30:01:
                    88:d4:85:1a:40:b9:a2:7f:24:fe:6c:26:d1:6f:aa:
                    33:b0:ac:c9:fc:8b:fb:c3:03:94:13:b5:1c:4a:65:
                    84:0a:78:49:e1:33:91:0b:af:f8:d6:fd:10:5f:a5:
                    f3:ca:b2:7f:b5:2c:ba:13:c0:9f:4a:5d:31:43:af:
                    16:b3:44:c9:22:8e:52:72:fe:b9:72:b2:bf:c5:5d:
                    9b:77:c6:f1:71:ce:a8:0e:aa:33:a9:b2:93:ee:53:
                    75:01:5b:a4:88:98:f6:56:df:2f:1c:e6:a7:3e:c6:
                    5f:90:e0:2a:c1:ce:a4:dd:a6:3d:b7:2b:29:74:a7:
                    ab:3c:98:ad:3b:cd:1d:d1:f4:6c:e5:17:ea:07:02:
                    0d:89:84:2f:19:8d:30:13:3d:f0:2d:70:bf:0b:3f:
                    0e:a9:9e:57:e7:3e:8c:45:2f:9f:7d:4a:cc:52:8f:
                    82:ae:6c:f4:d3:ed:71:9f:2c:e1:1d:1c:4d:56:5f:
                    2f:2a:b8:e4:8b:62:82:7a:1d:27:2a:d0:c2:66:5d:
                    d6:30:e9:65:ac:ee:a9:86:5c:8d:76:3d:c4:d8:2d:
                    14:fc:80:95:51:bb:d4:07:8f:07:2e:da:04:65:10:
                    7f:ba:42:38:d5:0e:00:d2:16:39:27:b7:1f:b7:31:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:BD:FA:15:35:17:8A:90:38:A2:CC:05:77:F5:6E:39:69:68:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14704bed-18fd-3bea-968f-2a834b346bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:76:4d:3c:d5:82:5c:06:c9:22:f0:54:85:9f:ce:6b:36:ca:
         a9:9d:74:d4:9a:0a:fe:f6:d6:d2:a9:67:5e:4b:5d:93:de:40:
         26:01:47:aa:5d:8a:2a:3a:c4:1a:1b:a8:bd:cc:43:ef:43:c5:
         79:05:2a:6d:ec:b4:44:95:80:6f:dc:1a:eb:86:cd:8a:7b:ca:
         7a:63:df:7d:f8:21:36:5a:9a:14:df:80:6c:90:b9:e0:55:6a:
         fc:81:d6:3f:6b:74:eb:35:99:d2:d4:26:62:d0:b9:aa:ed:bd:
         1d:c1:35:7f:1d:50:ce:77:14:26:5c:7a:6b:1f:63:d3:7c:56:
         0b:0c:8e:7b:39:3d:dd:c0:9f:34:d1:b6:83:d7:14:00:b0:05:
         a5:c2:67:d9:9a:8b:7d:df:cf:13:97:f0:ae:41:5e:fb:13:e5:
         43:d8:e0:5a:0f:ce:cd:b1:02:6c:12:e9:61:74:93:e8:b4:30:
         75:67:77:ee:eb:de:7e:85:01:07:c5:9e:88:ea:b7:05:27:de:
         ec:b3:d6:70:2a:30:fd:30:d1:57:65:1d:e2:84:60:5a:d0:c6:
         0a:0e:59:d7:64:fc:99:d8:29:4d:92:8f:cd:e9:42:69:df:0a:
         ab:a3:e5:5e:e8:48:a4:05:73:9d:aa:7d:f0:be:b2:67:8b:58:
         75:ae:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:12 2025 by rpki-client