Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3d59ce-126b-3a1f-b8e3-2dcf7a48afb0.roa
File:                     1d3d59ce-126b-3a1f-b8e3-2dcf7a48afb0.roa (raw, json)
Hash identifier:          kdNKRzhYWmhGi8vlfejVN0psT73avG4rPTg18Vk4tWA=
Subject key identifier:   49:7F:23:F0:2A:44:67:4F:62:36:3F:8E:C9:EF:F9:68:CE:E6:C7:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBACED2AF00AB206030D9B580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3d59ce-126b-3a1f-b8e3-2dcf7a48afb0.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.57.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:ce:d2:af:00:ab:20:60:30:d9:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=937d52fe-2f5c-4155-93a0-0b8b5a4d1268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:d5:d2:25:d4:2a:d0:f1:ec:36:9e:01:60:
                    9e:1e:fc:a8:55:16:9f:cd:d3:f7:3b:71:f8:9d:8a:
                    5f:1e:a7:71:00:f2:aa:98:54:b9:cf:50:74:92:19:
                    8e:1b:8b:86:a6:bf:92:71:87:92:f1:0b:37:3f:d0:
                    9e:c9:98:84:5a:ba:43:16:2f:f9:fe:a9:ba:2e:79:
                    2c:4c:40:9f:90:60:51:22:bf:b0:cd:50:a0:dd:55:
                    b1:c5:fc:d4:92:28:1e:10:54:d3:74:0c:16:aa:15:
                    d8:fc:76:e4:3a:db:0e:4d:b1:4a:69:c7:0c:c6:27:
                    23:f3:ee:79:fc:9e:9a:d5:4a:a6:fa:95:3e:ab:84:
                    92:33:09:52:de:fd:1b:38:13:a8:98:50:41:9b:3d:
                    d8:46:a2:88:73:7f:91:99:8f:22:7d:55:bc:1b:4d:
                    52:ed:93:c5:de:9c:9d:f7:05:44:4a:3c:2b:25:e1:
                    65:53:e7:30:75:e6:91:fe:ce:a6:18:4d:df:53:e7:
                    f3:2b:1c:57:8a:66:b2:55:36:91:d6:a4:6a:28:52:
                    32:76:76:13:76:d0:2b:88:d9:85:c1:33:3e:78:39:
                    f4:58:fb:94:ac:cc:c3:ff:de:48:db:9a:d2:f7:8f:
                    29:19:7a:78:48:c6:ca:60:37:7e:e9:b6:ba:0c:5c:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:23:F0:2A:44:67:4F:62:36:3F:8E:C9:EF:F9:68:CE:E6:C7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3d59ce-126b-3a1f-b8e3-2dcf7a48afb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:19:5e:6a:3f:53:cb:9b:4c:9f:da:fa:f7:c5:9d:c9:a2:f9:
         e6:af:6a:b9:7c:f3:b8:9c:29:c5:0a:d0:7f:d6:99:df:73:81:
         7d:75:b7:1f:43:9c:f6:de:90:5a:5c:02:c1:0b:a7:8a:d4:46:
         9b:47:71:c9:7f:eb:90:e0:4b:19:33:f1:b7:41:eb:e3:df:c4:
         05:3b:f8:43:5f:26:54:03:75:e2:87:fc:6d:83:35:da:56:31:
         29:d8:29:63:70:90:bb:6e:fc:c7:44:3a:05:57:39:be:49:a5:
         48:01:16:9d:c0:c3:0b:e4:a7:c6:20:1f:44:fc:ff:ec:ea:de:
         7c:56:96:34:ff:47:1e:70:da:22:90:17:68:ef:a1:74:8f:1d:
         1d:ad:94:5d:b0:2c:70:00:72:93:6a:ed:b1:42:23:e2:a9:c7:
         3d:c7:35:86:6c:3c:90:14:8c:ce:ca:75:fc:f7:7d:44:a5:25:
         63:cb:df:3a:22:f3:cd:27:db:7a:90:c9:9b:61:e6:50:58:73:
         9f:1d:c2:e2:39:e2:70:a3:d7:c9:94:6a:a8:35:0c:32:ce:46:
         84:95:d3:04:c7:dc:2c:60:46:bb:6d:40:23:7d:7f:13:ce:44:
         f6:cd:d0:01:9e:70:78:cb:d3:4a:e4:cd:71:a8:52:a8:9b:65:
         87:d7:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:27 2025 by rpki-client