Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22ccd65f-1fed-32ae-9ece-b9f831ad3b2b.roa
File:                     22ccd65f-1fed-32ae-9ece-b9f831ad3b2b.roa (raw, json)
Hash identifier:          OfRBM/BoBFd0BiuCe+fQjbnH5zcPfh+PoY5fghsycAQ=
Subject key identifier:   9E:B9:CA:B2:D0:0D:42:1C:2D:C3:4A:5D:5D:92:8F:8D:F9:2D:9C:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8BA528403D559F9222D14C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22ccd65f-1fed-32ae-9ece-b9f831ad3b2b.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Tue 17 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:a5:28:40:3d:55:9f:92:22:d1:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : May 17 04:00:00 2022 GMT
        Subject: CN=3a427f83-1ecc-44a8-8917-647140c20b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:26:70:e4:73:9a:82:d7:16:91:c3:34:5e:
                    7f:fd:8d:e8:24:7e:8a:03:50:f8:cd:a4:05:84:19:
                    d3:b0:31:b5:56:8e:d5:28:c6:dc:5c:c9:82:57:b7:
                    6a:e7:f8:00:62:21:4d:23:c6:09:24:53:d1:32:2e:
                    ab:24:60:0e:42:01:22:1d:7f:50:d4:f3:3c:06:6a:
                    8a:2f:e8:47:dd:3b:69:fc:cd:57:53:02:76:a6:a6:
                    f5:ef:b4:06:d1:6c:b0:a5:16:e9:03:5a:0a:37:15:
                    73:8e:1e:30:7b:3c:01:92:bf:33:5c:e6:74:e4:0c:
                    4a:f9:de:13:54:fc:cb:40:48:c1:e8:81:e5:0a:8c:
                    a2:08:93:f0:18:cf:ae:81:44:10:e5:3f:98:1a:3c:
                    94:f4:bf:36:2f:7c:f7:9b:99:4f:e2:d8:6f:de:24:
                    63:28:2b:81:40:c9:2f:c5:64:22:d7:71:f0:52:78:
                    f1:8e:1c:36:35:25:64:a8:df:3b:a9:a6:6a:ec:20:
                    7f:4b:9e:4a:75:de:40:fe:9d:fa:e2:93:d9:e4:03:
                    de:e8:c4:93:48:02:fb:13:6b:9c:3f:62:59:a3:b1:
                    30:1d:96:ee:f8:d6:f6:cd:1d:4e:8d:bf:0e:ac:52:
                    46:c1:71:af:61:c7:f6:4f:cf:db:dc:8b:2b:c4:16:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:CA:B2:D0:0D:42:1C:2D:C3:4A:5D:5D:92:8F:8D:F9:2D:9C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22ccd65f-1fed-32ae-9ece-b9f831ad3b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:79:52:5e:ce:92:21:80:06:ad:e0:2d:1d:b5:11:8e:17:76:
         ca:ba:64:02:86:c4:e3:33:f9:c6:7d:ba:d6:57:d7:e5:7a:12:
         18:ee:08:39:87:52:8b:15:f0:5e:e3:8e:b8:04:82:d5:20:e8:
         82:ef:f5:69:ed:b7:f1:c0:9c:f8:ef:4b:bc:b3:2b:4d:44:8d:
         1c:1d:b4:19:af:7f:a5:35:85:75:c3:53:83:ca:27:5b:e0:ed:
         ff:29:a6:c5:7d:6a:ef:b6:14:a5:2f:a3:f0:7d:72:be:9f:8a:
         5f:73:5e:1f:0b:a8:cc:44:70:04:ff:62:45:62:a6:8d:55:a1:
         9e:16:69:66:5d:61:d5:7d:0c:07:69:bf:ac:82:d2:24:08:ec:
         f9:9f:4c:e6:b7:e1:e0:ff:07:c6:8a:40:ed:e6:ce:66:ac:fe:
         5e:fd:67:c4:90:24:44:0c:46:00:98:eb:b0:90:f5:fb:ea:3f:
         bf:58:14:32:d1:37:16:64:a2:d8:ba:cc:33:21:f6:97:68:14:
         9a:12:13:fa:d0:1c:30:db:3d:d6:e5:6c:08:3f:85:42:56:9e:
         fd:ca:c6:67:81:14:8d:3a:6e:63:6e:b5:08:b0:89:2c:22:28:
         92:73:26:81:7f:de:63:57:f9:4b:34:dd:6a:53:21:e5:a9:14:
         f3:24:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:18 2025 by rpki-client