Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21231fca-d28e-3586-90c8-1b0e498445e8.roa
File:                     21231fca-d28e-3586-90c8-1b0e498445e8.roa (raw, json)
Hash identifier:          A5nX0G7Qko5YC64CTlibVRbfOsVR//rYB75nd0P20F8=
Subject key identifier:   3B:EC:BB:DA:47:E1:FB:6C:53:D3:04:93:F1:71:2F:6C:AB:8B:8E:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDD9E576B98DA9167735F3A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21231fca-d28e-3586-90c8-1b0e498445e8.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.31.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:9e:57:6b:98:da:91:67:73:5f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=0626300e-0324-49a6-bac7-60b56aa9a0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:7a:2d:78:5f:03:c2:ad:67:04:e1:b6:f4:
                    27:56:6c:23:ce:72:40:c7:ff:e4:f9:99:5b:43:8d:
                    6b:fb:02:47:b2:a1:72:36:5f:1f:8f:b2:4e:7e:4e:
                    82:76:6b:e0:01:2d:45:d2:41:5d:3f:ad:61:c3:1f:
                    c6:f7:87:81:f4:4f:af:81:c9:31:5e:c9:70:d8:b1:
                    5d:f3:32:d2:0f:3f:1d:9f:47:81:12:a4:dc:80:12:
                    2b:c8:38:a2:8a:a0:26:4d:4d:15:1e:4a:75:9c:b3:
                    bd:e1:a2:96:86:77:9c:61:02:90:5a:fb:6f:c2:f5:
                    68:45:05:90:40:5c:fa:58:39:7a:b9:8a:a5:79:c4:
                    cb:dd:21:6c:51:bb:1a:49:4b:bd:93:af:01:09:c4:
                    ea:95:4b:ba:e4:96:9d:ce:f5:0a:d4:9a:85:cf:ba:
                    24:5f:8c:f6:53:4d:fd:4a:4b:1b:c7:cc:c5:10:85:
                    13:cb:e9:6d:67:a3:b9:a9:03:f7:86:79:2b:46:06:
                    c7:b0:ca:7d:79:88:fb:3b:2e:07:1e:f0:da:08:99:
                    25:2d:62:46:4c:5b:9c:df:a3:97:c2:ff:24:3c:d9:
                    1a:c3:81:ea:c4:c0:8c:06:b6:97:12:fc:00:1f:50:
                    a7:2e:60:2a:78:02:21:d8:9c:eb:28:d9:4a:7a:3f:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:BB:DA:47:E1:FB:6C:53:D3:04:93:F1:71:2F:6C:AB:8B:8E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21231fca-d28e-3586-90c8-1b0e498445e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:b3:0e:aa:6f:ae:c1:f0:6e:2f:71:bc:61:03:64:9c:87:
         12:46:d2:0c:5f:35:c5:79:65:68:be:ce:ca:e6:e9:f4:2e:22:
         95:df:30:8f:b2:ab:2e:99:26:49:11:8a:c3:7c:22:0e:69:36:
         0b:b3:34:96:aa:7d:0a:13:7b:67:e9:e9:4c:d5:75:73:70:73:
         a4:a0:bb:07:3b:cd:28:54:99:01:53:90:bf:ba:15:c8:9b:07:
         2f:36:a2:d1:c2:5c:5d:2d:84:d0:d1:a1:94:ca:bc:13:12:42:
         4c:1a:78:1a:76:00:d6:41:a6:ca:c7:60:02:1f:72:5c:84:cc:
         9f:ee:d0:ed:2b:f1:33:83:0c:0a:db:49:42:81:4e:ee:b5:10:
         f2:87:a7:3a:01:2c:27:d8:e7:56:35:59:21:f5:de:87:73:d6:
         9f:f8:02:7b:ae:d8:ed:d4:69:fb:48:bf:8f:4c:8b:3a:8e:ed:
         09:83:a4:1d:04:13:46:b3:f4:2a:65:64:e8:f9:6d:77:8b:f5:
         f4:a5:70:94:c3:27:fa:84:01:72:7b:de:09:81:7b:0e:74:e4:
         a5:a1:41:a2:50:20:bd:90:fd:eb:3c:83:2f:a3:27:a5:4d:ec:
         89:97:2f:0a:45:d6:b7:2d:dd:04:7f:8f:62:90:9a:09:6a:65:
         8f:ae:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:16 2025 by rpki-client