Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22f21e5c-648d-3518-bada-46d4844616df.roa
File:                     22f21e5c-648d-3518-bada-46d4844616df.roa (raw, json)
Hash identifier:          BEjGigWOMO1AGXPbzsP9g49cDj9M5WE3fgzxjKjWdRQ=
Subject key identifier:   57:D5:71:29:D0:57:33:64:A2:37:94:62:94:A9:69:4E:AC:B7:A7:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8BA4CE4BCD193F4C3D607500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22f21e5c-648d-3518-bada-46d4844616df.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Tue 17 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:a4:ce:4b:cd:19:3f:4c:3d:60:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : May 17 04:00:00 2022 GMT
        Subject: CN=bfbabdce-9982-4cab-85b1-683383efae2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:71:2a:da:af:42:d1:a5:ed:de:e6:e8:e8:
                    4a:1e:32:fa:35:94:41:e6:83:eb:e6:c0:71:ab:07:
                    fd:ed:13:96:ad:68:b7:c7:ad:ca:08:13:22:b3:c6:
                    c4:2a:8c:af:7c:cb:69:32:e0:3c:89:39:4d:de:ef:
                    ad:f7:28:32:ea:7b:cd:91:6c:53:03:54:ab:e0:a8:
                    91:35:ef:b5:ca:8f:4f:d4:79:f4:f1:cb:45:0e:0e:
                    52:9c:8d:b0:52:b6:b3:b0:ee:1c:88:3b:cb:7f:6c:
                    56:af:0f:98:49:8f:e1:c4:d9:38:fa:da:fa:8f:82:
                    58:90:0a:85:2c:6b:39:55:ff:8d:3a:b6:81:e4:4b:
                    10:92:fb:e4:ab:ed:a0:73:d4:89:44:4f:60:00:6b:
                    ea:ea:8a:dd:ae:25:01:a0:73:7a:be:3a:07:b7:0a:
                    60:92:1d:7b:a9:be:66:ec:c4:bf:65:08:60:2a:78:
                    4b:eb:cb:1f:63:2d:ac:30:d6:69:52:bb:61:99:c1:
                    25:44:b7:f0:2c:2f:3d:3c:f0:0e:7f:1d:97:47:df:
                    56:62:58:73:b5:9c:c8:6b:19:a0:86:8e:c9:f6:d9:
                    94:e2:85:74:24:4b:dd:e1:6b:2a:18:f8:7e:9d:8d:
                    6e:5f:be:29:4b:f8:2a:25:f3:82:3c:bd:22:af:9d:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D5:71:29:D0:57:33:64:A2:37:94:62:94:A9:69:4E:AC:B7:A7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22f21e5c-648d-3518-bada-46d4844616df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:80:4a:b6:9e:13:ab:4b:7f:ff:a6:7c:d1:0b:0a:c2:f8:56:
         b8:1a:bb:f1:fe:f3:09:af:b2:98:17:84:1b:83:90:96:14:59:
         01:9c:7f:76:ef:6b:8a:6c:bd:8d:a9:49:2c:f1:9f:8f:59:a4:
         27:7e:bf:0d:69:aa:24:25:90:e8:91:db:33:60:27:19:db:8a:
         3a:32:ac:01:b6:b5:89:38:1f:5d:f6:41:dc:c3:5a:16:15:a6:
         0c:be:5c:bc:37:cd:96:26:62:54:e8:dc:10:2a:29:d8:d0:41:
         57:a5:4f:95:21:12:3d:b6:e5:bb:9f:cd:94:57:fd:29:f7:6d:
         ef:a5:c6:4d:7d:1b:5d:a1:30:c4:10:8d:71:ea:62:bc:5c:ac:
         0d:ea:86:38:1f:94:c8:fb:79:2e:75:da:89:c8:03:3c:29:eb:
         ae:38:06:77:60:aa:e1:70:43:5b:1d:1b:b7:4c:7c:2f:45:1d:
         a9:50:b1:71:a8:ac:1b:b4:ee:a9:ed:e3:8a:0d:2d:2e:61:f7:
         6f:95:0c:a8:50:f8:52:63:7e:e9:9e:48:91:1d:25:82:2b:06:
         50:90:86:15:10:05:69:47:94:85:3b:bc:8a:59:b4:3f:5d:14:
         40:74:a5:88:e6:65:16:bf:98:b2:58:09:aa:0d:73:38:29:89:
         11:c0:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:24 2025 by rpki-client