Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/169fcec2-504f-3baf-b505-260e35b97118.roa
File:                     169fcec2-504f-3baf-b505-260e35b97118.roa (raw, json)
Hash identifier:          +VOIRgkbkj7CEcEPksWDi8Gf5ZbuSVy8gVdpngqrXVU=
Subject key identifier:   05:B7:C1:6E:78:04:B1:B3:9C:60:A0:3F:58:71:28:62:57:25:4F:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F53470A040DDBBDEE5043EA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/169fcec2-504f-3baf-b505-260e35b97118.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:47:0a:04:0d:db:bd:ee:50:43:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=088d7f83-49a6-44c0-98f5-89ddce940623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:ba:e2:f2:1d:8c:5a:fb:a1:35:60:e2:f2:
                    d4:1c:97:f4:2e:af:1b:00:31:10:92:cd:72:50:ee:
                    c6:5f:15:f1:02:c6:9a:24:81:a6:f7:52:69:aa:dc:
                    5f:94:7f:62:f1:ec:ff:fa:69:11:4b:3b:7b:85:9f:
                    cd:9a:dc:86:50:dd:d4:bc:20:ea:56:3b:dc:ee:b9:
                    28:8d:91:ef:b0:24:37:25:9a:f8:28:46:90:76:94:
                    47:85:f8:6e:a8:c8:39:84:fe:e6:bf:cb:87:39:ef:
                    8e:1b:81:a0:bd:2d:96:f6:5a:0e:82:69:3a:6c:66:
                    93:c7:04:71:e7:55:a5:87:18:04:ef:8b:b9:a0:af:
                    80:c9:30:9b:93:0f:ac:6e:03:40:f9:d6:68:9b:90:
                    0a:1b:7e:1a:13:12:67:0b:a3:93:11:5d:99:82:15:
                    22:b8:b6:33:3e:9a:bc:c0:6c:89:bd:04:ca:2f:6a:
                    89:f3:f4:84:fa:b4:7f:4e:7e:09:2b:04:23:24:32:
                    1e:4d:ee:f8:be:34:d1:00:02:d3:82:84:4e:69:20:
                    bf:5f:30:87:c8:c2:70:a9:5f:f1:c5:f5:c4:e1:3a:
                    9b:5f:82:c1:b6:66:c0:60:fb:79:74:32:3c:e7:0d:
                    b9:e3:9a:ba:42:1f:aa:b5:f2:60:38:eb:4c:f4:45:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:C1:6E:78:04:B1:B3:9C:60:A0:3F:58:71:28:62:57:25:4F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/169fcec2-504f-3baf-b505-260e35b97118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:55:af:bd:2e:11:02:c8:f0:4b:ec:3f:b6:06:29:8c:53:ea:
         33:e5:17:96:d1:5e:66:ec:98:43:cd:a9:8a:36:cf:04:2f:7a:
         d4:f6:04:24:f7:c9:5a:df:ed:6c:b7:f8:85:f7:26:d1:c5:ff:
         64:d6:25:90:a2:6b:6e:ee:a2:a4:cd:38:31:a1:ac:94:32:c8:
         28:40:4e:5e:6d:72:67:13:61:61:ba:ad:c9:01:3b:85:7b:a4:
         45:5a:97:b8:8a:2d:50:07:60:01:34:f7:61:2f:5e:85:96:3f:
         1d:41:a1:9b:c8:c8:dd:65:f6:bb:e1:dc:51:34:fc:f0:96:52:
         6c:c1:29:c1:0a:7e:68:9d:17:d4:ba:e5:df:fe:e6:9b:44:86:
         f9:2b:fe:08:2b:92:9c:f0:d3:9c:b4:35:86:eb:c4:20:8c:74:
         02:d2:4b:2c:55:09:4e:aa:0b:0d:f7:63:40:1e:b0:30:12:bc:
         54:34:c4:4d:00:d5:6b:2f:88:46:88:83:3d:a5:09:bf:5a:aa:
         7e:c3:da:14:37:d6:6a:82:62:11:93:62:55:87:58:98:f8:ef:
         80:ec:62:a6:1e:ce:17:9f:e7:38:7c:77:2a:3f:5c:f1:d5:2f:
         f8:9f:9a:07:d7:c9:0e:68:28:fd:a0:6a:e9:0e:9d:ef:ec:fc:
         0d:af:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:53:21 2025 by rpki-client