Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c6ee1d0-744c-37f3-8a0d-54581a5d450f.roa
File:                     1c6ee1d0-744c-37f3-8a0d-54581a5d450f.roa (raw, json)
Hash identifier:          RMVxIWiiJX08vc3GS5PWVvOeS39Dk7UEFHPd8EtkdFc=
Subject key identifier:   45:11:B3:FB:11:64:A8:EC:FF:57:69:99:F1:86:2C:4C:25:D7:1F:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401AE2F3ADCFC7564B90544080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c6ee1d0-744c-37f3-8a0d-54581a5d450f.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.77.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:e2:f3:ad:cf:c7:56:4b:90:54:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=1adc5488-3a51-42fe-8575-61d413a7b32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:9d:e6:de:a0:12:c0:3c:0f:de:f7:a1:0d:
                    1a:43:9e:54:80:20:75:f0:ba:fc:c6:6b:19:ab:22:
                    b0:bb:2f:c7:bb:1b:b4:de:54:1f:89:4b:3e:90:02:
                    dd:ef:f9:d0:d6:8e:ac:39:15:ab:ea:b1:76:38:61:
                    d2:eb:0e:bc:4c:d1:7d:b1:f2:32:0e:11:6b:b4:14:
                    c3:8d:ff:9b:77:af:f2:6c:9b:4b:70:1f:81:49:25:
                    cf:5f:fb:30:37:5d:36:eb:6c:93:0e:a8:3b:82:3c:
                    cf:cf:c0:dd:f3:ad:d4:9f:9f:af:4a:5f:38:52:69:
                    46:44:b2:0a:04:30:f8:0c:bb:ca:c8:ff:d1:56:00:
                    79:59:ee:eb:11:c8:cf:c4:a7:e8:0b:53:03:fb:21:
                    60:c7:76:17:60:a8:4d:a6:03:59:2f:d5:90:00:78:
                    2a:fd:c9:a9:7f:33:18:31:1a:68:80:34:77:aa:fd:
                    90:0b:89:51:9e:c0:1e:16:fd:af:a7:4a:dc:54:f6:
                    ed:a1:df:61:78:53:f6:c4:51:7a:7e:56:b9:1e:7b:
                    cb:96:cc:5f:98:38:6e:da:59:f6:82:17:e0:0d:17:
                    fa:fe:a8:81:cd:b4:15:fb:53:9d:ba:27:87:15:3a:
                    5e:8b:28:9d:68:5d:07:e9:fa:6d:ab:c3:20:bb:a1:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:11:B3:FB:11:64:A8:EC:FF:57:69:99:F1:86:2C:4C:25:D7:1F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1c6ee1d0-744c-37f3-8a0d-54581a5d450f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.77.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:89:84:a1:d0:81:81:ae:a0:2c:ef:0e:e8:34:cd:a5:d5:6a:
         db:3c:d6:c0:74:75:aa:f1:0d:13:a6:f7:7d:97:a3:a5:bf:6d:
         11:45:16:35:12:ea:55:45:8b:cd:5b:bb:5e:cb:9f:0d:be:61:
         87:5a:a0:66:0d:9a:1a:76:01:8f:34:0d:a3:23:7c:f7:5f:2d:
         4e:ff:6a:4a:cb:fb:8e:17:a1:75:6c:44:e4:b0:9b:05:55:b1:
         ea:83:4d:c9:a7:a6:3d:17:84:75:10:e6:42:da:b6:0d:66:53:
         de:6a:40:ac:52:72:c5:6c:27:e6:9f:47:97:41:17:53:e4:e9:
         3e:25:65:60:c2:7b:26:07:46:62:c7:56:ef:56:48:17:ed:77:
         d4:ff:cc:a9:2b:2a:ec:49:f1:cd:ad:25:a4:ca:65:4b:6c:0e:
         97:22:f5:01:18:80:c3:39:73:ab:fe:f3:3e:86:cc:f0:ef:1d:
         1e:72:cc:e5:9c:49:c5:a4:db:a4:f5:b3:61:dd:ec:37:a8:bc:
         eb:54:38:3a:e3:99:d8:09:1b:17:e8:fe:55:72:99:48:01:04:
         b4:25:c6:b1:36:1b:15:72:0c:91:1d:94:32:fb:c7:96:bf:51:
         33:4d:db:6c:c7:8d:9f:7b:dd:c6:e1:af:52:ee:3e:6b:8c:56:
         88:6b:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:54 2025 by rpki-client