Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16620a3b-c883-3846-b899-75b202a7cd2a.roa
File:                     16620a3b-c883-3846-b899-75b202a7cd2a.roa (raw, json)
Hash identifier:          KdoVj7vxddiNcyaqNVYEfJz9g+wRSQdO/ynLvZ4dvNg=
Subject key identifier:   77:A4:FC:7F:BA:5C:90:DD:4D:66:FD:57:54:DD:86:2B:B0:7B:96:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C79D22BEFFBEAE6211AC57840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16620a3b-c883-3846-b899-75b202a7cd2a.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:d2:2b:ef:fb:ea:e6:21:1a:c5:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=4d977773-ee8b-4d08-a07c-a50e9efea3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:c6:b7:2f:83:93:88:84:e9:92:6c:49:01:
                    7a:4f:23:07:c4:1a:64:e4:81:5c:ee:03:e9:bf:b2:
                    90:40:30:ec:af:12:db:bd:0e:7f:35:55:38:01:bd:
                    84:d3:5b:48:4e:35:bb:30:e9:bc:0d:02:89:66:6f:
                    43:a1:cc:4a:b8:0e:1d:db:01:53:9d:69:5b:32:65:
                    2e:db:13:27:3c:c5:40:7b:3b:13:0a:26:d9:5c:dc:
                    ba:dc:5c:69:6c:39:d8:fa:72:28:a7:df:a1:b4:65:
                    19:16:3d:79:9a:4a:f2:0b:9c:e1:9d:d3:e7:cb:76:
                    92:43:88:e6:02:46:25:96:f0:f3:14:6a:43:c0:bf:
                    7c:95:b8:da:31:6c:e1:5c:60:f4:62:a9:79:d0:51:
                    9b:96:9d:1c:ec:00:3e:97:78:7b:7b:6f:aa:46:ad:
                    8a:57:64:04:8d:b8:59:fa:ec:08:3a:2b:18:b1:8f:
                    d5:66:69:c8:d9:9e:06:1d:f3:67:cf:16:00:e1:1f:
                    58:c8:8b:a2:33:37:e9:02:e4:dd:6c:2e:7f:49:54:
                    cf:3c:c8:73:b5:56:23:82:e8:5e:e6:f6:dd:31:a3:
                    8b:3e:8e:17:47:e6:d1:21:95:45:35:e7:02:15:64:
                    47:8b:4d:84:47:ca:52:ff:e0:a2:83:2b:10:1a:9a:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A4:FC:7F:BA:5C:90:DD:4D:66:FD:57:54:DD:86:2B:B0:7B:96:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16620a3b-c883-3846-b899-75b202a7cd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:a7:c6:68:33:dd:ec:5a:a8:56:42:84:27:7d:b7:14:ca:
         e2:43:23:2f:b2:41:64:0a:cf:fc:95:74:cc:c1:24:1a:a1:0e:
         80:d1:17:9e:0b:f5:df:37:02:c3:74:6c:85:a8:bd:f8:07:dc:
         68:37:8f:50:65:0e:63:4b:18:18:23:1f:30:1d:4d:6b:44:d6:
         59:3c:82:88:b0:82:b6:f0:fd:84:5d:c4:2d:c6:2e:08:73:22:
         2a:22:79:76:79:a4:bf:1e:50:f0:e5:f6:9b:bf:e3:c5:e4:aa:
         d9:53:23:2e:13:19:c5:61:4d:7b:c4:ff:9d:70:ef:d5:39:ee:
         ae:3a:17:00:40:7e:cf:46:6a:1f:84:eb:01:3f:0f:b7:67:4b:
         a5:2b:d6:76:63:8f:30:6c:44:0a:4c:52:1c:08:18:c0:f3:e7:
         38:9f:65:5f:6f:1c:81:1f:6a:cf:dc:29:60:a7:59:f5:a9:45:
         0f:1e:98:5e:39:95:5c:46:3b:36:ff:14:90:e3:cd:69:01:40:
         b7:ec:14:40:b8:ea:84:8a:6b:00:0a:5b:34:0e:78:9a:6c:29:
         c9:62:46:f3:9f:95:07:83:0e:48:5c:d0:85:0b:fb:2b:fb:07:
         66:d8:3f:bf:ab:09:90:90:99:67:27:87:da:ab:90:e8:b8:95:
         0c:78:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:31 2025 by rpki-client