Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16a394d6-a72c-3d76-b1a2-888d94d7bb2f.roa
File:                     16a394d6-a72c-3d76-b1a2-888d94d7bb2f.roa (raw, json)
Hash identifier:          6c7S/9E0kp8z2uGseA+DfXsErBR4YabJTiG3okLh+vU=
Subject key identifier:   2D:7B:78:C3:AE:05:BB:42:91:00:C7:F1:D4:EF:57:A1:C4:9A:3F:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF673229858F71BE265B89D30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16a394d6-a72c-3d76-b1a2-888d94d7bb2f.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        76.241.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:73:22:98:58:f7:1b:e2:65:b8:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=ec668e3f-3869-4bb1-accf-51ca46d28afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:04:e2:39:71:45:ca:c3:b4:39:ae:b8:42:
                    9d:8b:b9:6a:07:df:28:44:09:3f:19:a9:e5:42:fc:
                    a2:f4:0c:06:9f:4f:03:eb:58:e7:4d:f7:88:b2:ca:
                    83:23:4f:1c:bd:15:35:5a:9d:02:d8:51:8a:1c:8d:
                    01:ee:f8:ec:e2:40:a5:95:5f:73:75:cf:0c:dd:10:
                    67:39:f7:8e:de:be:07:0f:81:81:02:31:6a:a0:55:
                    9f:d3:17:6e:e2:49:9e:10:bc:7d:90:20:ca:f7:85:
                    12:53:0e:38:78:0f:d3:6a:36:cf:88:07:1e:19:d9:
                    80:c5:d3:0a:0d:83:6c:87:7c:48:87:0d:62:4a:a3:
                    5b:ea:55:18:cb:80:02:c6:9b:8d:03:68:25:f6:76:
                    44:97:af:d5:ae:ef:0c:9c:ce:83:09:75:0e:15:0a:
                    d0:69:f6:c9:6d:18:3a:99:1b:9b:74:ed:f5:61:9f:
                    a9:9b:7e:30:93:a0:ea:03:f9:b7:e5:cd:40:01:32:
                    b9:48:13:75:38:b5:8a:d0:d9:9d:f2:6c:5d:1b:39:
                    86:26:0c:46:52:b1:01:4c:38:e9:06:0c:98:54:45:
                    aa:aa:7a:91:52:34:bf:5a:7d:27:80:17:85:d5:cf:
                    93:2b:22:e5:0f:ce:f8:86:03:fd:8f:64:52:f9:d7:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7B:78:C3:AE:05:BB:42:91:00:C7:F1:D4:EF:57:A1:C4:9A:3F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16a394d6-a72c-3d76-b1a2-888d94d7bb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.241.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:f5:38:b9:31:46:7e:ac:85:4d:22:78:5f:1d:54:37:8e:
         ed:84:7b:d1:e3:70:de:e3:24:6b:f7:e5:25:44:ad:7d:64:83:
         e4:6c:1c:d6:b8:9a:6e:9d:2d:45:00:81:37:0e:ff:69:79:6a:
         d8:50:5b:3e:fa:ec:c6:20:20:37:9b:60:c7:86:9a:0f:1b:a2:
         f5:9d:ee:90:9c:e3:02:a8:dd:67:20:68:58:4f:ef:2d:da:0e:
         c2:b4:7f:19:12:60:50:39:83:a5:63:96:a7:f6:cf:c1:ec:10:
         3e:d4:e1:70:06:c6:a7:a6:6c:43:f8:65:7e:57:c2:d6:f8:fc:
         9c:e7:f8:c6:26:5a:ca:54:8d:99:3c:a0:a6:6d:bd:41:e6:48:
         33:f8:21:e1:58:95:f0:dc:d3:a9:0e:d4:d6:a5:35:e0:fc:ee:
         57:33:11:2f:db:02:f9:96:a8:f9:77:5a:f2:d1:2c:94:b6:1a:
         74:dc:f9:fb:47:1d:b8:25:e4:9c:92:ee:04:25:82:e4:9c:00:
         5e:ac:11:58:06:90:d1:9e:4b:95:5f:bc:30:ad:c5:94:fe:f4:
         26:0a:dd:e2:04:fd:f3:2d:5c:04:70:68:cb:8e:3f:98:e6:f8:
         73:a3:18:2a:24:e1:d2:4a:60:df:df:0e:9a:5d:61:9c:d0:31:
         11:2c:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:43 2025 by rpki-client