Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1958083e-9e05-38b4-a644-7fff7d983b9e.roa
File:                     1958083e-9e05-38b4-a644-7fff7d983b9e.roa (raw, json)
Hash identifier:          MCq4jMMQWg9x2MLXaLE6QVLAAETABy5Fpcp/z4l8m3Q=
Subject key identifier:   76:39:41:E1:E4:23:30:FF:DD:99:B1:29:8D:79:60:A0:32:2D:60:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95AE91FF50513E5F80F44FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1958083e-9e05-38b4-a644-7fff7d983b9e.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:ae:91:ff:50:51:3e:5f:80:f4:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=bbc31197-684e-4731-b6ab-d678e0d4ea31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:ba:03:47:28:75:c3:11:81:60:07:d7:87:
                    39:64:c0:ec:07:9e:dd:b7:c4:35:5a:9e:2d:ce:36:
                    c6:3c:89:8a:d1:c3:d9:35:05:45:99:53:87:d3:2a:
                    3e:ca:43:e8:a0:3c:27:ee:74:87:cf:2a:22:ec:58:
                    26:48:a4:54:fe:14:fb:16:ef:2b:e8:51:c6:f0:e0:
                    ed:b1:b4:ce:e4:5a:e3:dd:a0:f7:75:88:92:a5:68:
                    65:47:45:d9:84:ec:8a:44:14:a5:42:16:67:11:b5:
                    bf:12:0c:21:27:5f:7b:e0:8e:c4:99:9d:d6:43:0b:
                    3d:fe:be:6e:1d:e3:ba:53:b2:63:5c:00:83:0c:d9:
                    b5:04:a2:47:59:32:4f:08:2f:31:e9:dd:08:64:f7:
                    d5:f7:02:0d:c5:cc:5b:8d:00:06:06:33:bf:08:f1:
                    cb:0c:5f:56:ff:e5:0e:d2:86:14:ee:e1:11:f6:0d:
                    59:cc:1b:d5:a4:0a:3d:9d:db:98:91:d2:1e:bf:63:
                    cc:c2:25:ab:1d:33:d7:94:1f:33:c2:14:8a:f1:28:
                    2a:44:60:da:67:45:78:76:cd:84:e8:76:80:73:53:
                    70:3c:c5:e0:3b:bd:44:da:6c:be:df:72:4b:6a:2f:
                    23:20:2a:db:6d:67:90:4f:d7:af:c2:64:0e:8a:c8:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:41:E1:E4:23:30:FF:DD:99:B1:29:8D:79:60:A0:32:2D:60:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1958083e-9e05-38b4-a644-7fff7d983b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.128.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:93:bf:0f:f5:e3:d1:76:c4:3a:6f:ae:c3:ad:9a:fe:6e:af:
         57:ac:5d:74:e5:c8:c1:e2:16:3d:eb:aa:ec:1f:d3:4c:a1:9b:
         34:66:be:b9:01:40:02:b0:5e:56:c4:ef:2e:cd:e5:84:83:75:
         f6:ab:08:02:50:74:fd:0e:6c:4b:01:08:77:a1:92:80:22:73:
         27:39:83:da:ed:27:a7:21:1f:71:0f:e7:3d:97:b6:1a:57:d7:
         44:dc:29:40:8c:f5:d7:94:48:39:c7:7a:2c:cf:0c:c9:df:b5:
         85:a1:e1:c9:ba:e7:16:fd:e9:82:db:4c:69:a6:fb:c7:f1:4e:
         e8:bf:f3:02:5d:84:13:58:5b:de:73:61:dd:5b:95:bf:61:95:
         04:15:0f:7c:31:11:f4:65:cd:21:22:6a:bf:2b:db:48:2d:22:
         d3:80:d9:f9:c1:9c:b8:e0:00:db:30:11:72:bf:24:a4:24:a1:
         e7:f5:9c:59:57:f9:1d:6f:de:4c:2f:3f:4b:c8:88:2c:a2:a6:
         22:f9:1d:84:db:e3:fa:ab:8a:41:bf:76:23:c7:ff:2f:e4:42:
         8a:ee:05:d5:34:0e:0a:f8:75:9e:b2:49:ad:b1:22:47:ed:3c:
         bb:36:fe:0e:d2:00:46:a7:aa:40:44:ef:5e:ca:86:ac:a5:f8:
         5e:c6:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:22 2025 by rpki-client