Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14942cfe-9114-3129-a98b-013b5e7c1c08.roa
File:                     14942cfe-9114-3129-a98b-013b5e7c1c08.roa (raw, json)
Hash identifier:          K4JJJ9Am5wUUNPufK801yXBwoNE/A4LEVg73eknHH5E=
Subject key identifier:   C0:9B:99:A5:20:B6:70:AC:A8:8C:72:06:31:41:A7:7F:0C:19:C1:F2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C79D2CB350B836E8BA88E4E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14942cfe-9114-3129-a98b-013b5e7c1c08.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.88.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:d2:cb:35:0b:83:6e:8b:a8:8e:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=67a76611-900a-4147-9337-1dbdd5aa370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1a:bf:67:04:b5:42:22:a1:30:7f:41:6a:a0:
                    8c:3a:2e:c6:65:72:2a:ff:47:98:5b:2f:fc:e8:f4:
                    b5:68:a2:f9:28:1e:1e:f8:63:fc:01:df:96:92:56:
                    1c:82:6f:2b:e7:d8:36:d1:0a:8b:0c:b1:30:41:ba:
                    6c:66:19:29:07:d2:1a:9e:f9:63:fa:79:c4:97:f5:
                    fc:62:05:4a:e4:75:75:7b:cd:7b:b6:a6:e8:80:b7:
                    1b:a7:e7:11:ac:eb:e5:91:a5:03:09:9d:62:4a:0b:
                    46:04:d4:ed:eb:13:a7:1c:d0:61:aa:b0:55:dc:80:
                    19:e5:14:92:90:c5:20:3f:be:9c:cf:2c:7c:50:93:
                    a5:ae:42:18:4b:b2:f3:32:e8:58:4a:44:85:c8:cf:
                    3c:b3:ca:8b:b2:33:17:bc:3a:95:14:de:e9:31:4f:
                    d0:db:0b:60:cf:05:c6:21:2e:b3:4e:90:e2:3a:c5:
                    72:72:43:f0:38:7c:af:3e:82:76:c4:2e:bf:fa:5e:
                    53:18:e9:cb:91:97:92:7f:12:0c:6b:b9:cb:70:27:
                    b8:66:65:81:2a:6a:ed:f4:8c:9a:e3:d7:0f:8e:a2:
                    7e:87:7e:8d:dc:cb:43:52:dc:d7:80:4d:78:7f:68:
                    75:9c:d4:9f:05:0c:87:3b:6b:da:d5:c8:18:44:24:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:99:A5:20:B6:70:AC:A8:8C:72:06:31:41:A7:7F:0C:19:C1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14942cfe-9114-3129-a98b-013b5e7c1c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:de:05:cf:04:3e:8d:1d:ca:3d:e0:8a:68:e8:1c:45:a2:6b:
         be:2d:10:33:74:16:ea:0d:0a:2e:0b:60:ea:22:54:30:49:8c:
         eb:a3:9c:a7:0b:26:cd:ce:95:a2:b6:1b:8c:19:ad:15:c8:02:
         9a:9d:55:6e:fc:2a:a4:db:4d:25:80:54:fe:5d:d4:e1:7c:61:
         4f:d8:a4:09:5b:f2:52:38:c9:3b:4e:48:a3:85:cc:47:61:74:
         14:c3:7b:3d:02:23:67:5d:91:68:9c:a3:54:bb:01:b3:93:d1:
         a3:cd:4d:7e:61:fd:8d:8b:de:13:36:8d:00:92:c1:3a:3d:8d:
         02:d2:25:cd:99:e8:a2:7e:ba:25:21:f4:e1:6f:59:49:2f:59:
         ba:ac:ed:44:a1:27:ef:4a:61:81:cd:3f:a0:51:c0:1b:ba:5f:
         db:10:8b:52:89:38:8d:00:da:c8:49:ee:28:33:ba:62:13:85:
         6c:08:e6:23:4f:71:fc:e4:ba:9b:0a:a6:ce:39:2b:3c:6c:dd:
         39:a8:c4:0c:88:53:9a:14:a5:37:d2:c0:8b:d0:fa:bf:d3:76:
         40:db:26:4f:f9:50:e3:e0:97:35:81:ee:8e:21:03:a4:05:eb:
         55:89:89:6e:5c:68:79:c9:4e:a0:6a:77:47:e7:e3:5c:f9:9b:
         b5:28:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:32 2025 by rpki-client