Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23138638-2ba9-375c-819d-661688861e94.roa
File:                     23138638-2ba9-375c-819d-661688861e94.roa (raw, json)
Hash identifier:          9mtK0ReARx20PX+Dex184JUUyn/lxOO+XRa/etT0hf4=
Subject key identifier:   EA:38:0C:4B:24:8D:B9:5E:86:F4:23:99:C7:0C:11:FA:92:27:B4:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2F57C833B87A705377745400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23138638-2ba9-375c-819d-661688861e94.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.18.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:57:c8:33:b8:7a:70:53:77:74:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=3c205042-8790-46cb-9148-1d0a7763a463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:b4:6e:dc:f1:4f:7a:e9:05:cc:26:2f:fe:
                    95:2e:49:ed:2f:9b:ea:89:a2:e6:3b:b9:19:01:48:
                    f4:bd:f7:53:50:44:ed:5d:5c:50:31:9b:98:a5:72:
                    1b:4d:bc:90:d8:94:9d:89:52:b1:8c:89:82:9e:68:
                    83:01:82:16:36:b8:21:46:06:ff:cc:f0:50:57:ee:
                    16:5f:fd:5f:c9:66:c5:0c:ab:ec:43:c3:6c:54:d2:
                    4c:e5:25:f2:77:bc:de:8f:f7:f7:2d:86:e5:0b:82:
                    f8:cb:8b:bb:52:59:2e:31:a7:63:7f:f2:2c:5e:d9:
                    93:57:2c:f4:a9:26:73:8c:07:eb:b0:d0:32:5a:ed:
                    51:df:86:87:37:9c:62:84:cc:7c:14:bc:24:3e:b4:
                    e7:38:f9:6a:54:bb:56:cd:fa:27:18:f4:61:49:82:
                    ef:f1:53:44:37:5c:16:71:21:ca:5a:8b:64:00:87:
                    43:67:a6:c3:df:ab:f2:58:15:6a:d4:ab:06:40:dc:
                    cf:13:2e:93:5e:8a:51:45:54:64:3c:46:9f:0d:6e:
                    21:66:14:a4:5f:c9:26:3c:83:8f:ef:3d:b8:ed:fa:
                    cc:52:56:52:d3:2e:11:df:12:46:df:ea:b5:3c:2f:
                    e7:61:44:eb:0e:1a:ca:92:c6:c1:11:8d:33:eb:e1:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:0C:4B:24:8D:B9:5E:86:F4:23:99:C7:0C:11:FA:92:27:B4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23138638-2ba9-375c-819d-661688861e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:d4:26:73:cf:83:18:9f:ad:c2:45:b0:8c:16:41:4d:0c:
         01:d5:a4:4d:7f:1c:f9:5a:80:5b:8a:05:64:1d:1e:06:b6:28:
         94:51:69:83:42:c1:42:e4:a3:36:f2:d0:95:81:d5:21:a1:0d:
         b7:e4:77:66:05:89:58:6c:89:b8:15:94:7d:7a:e1:4c:ce:df:
         b6:a6:95:08:ca:cb:d9:80:97:19:7f:96:d1:06:c7:ed:c5:ef:
         7e:69:de:a5:76:80:17:79:67:68:b6:3e:db:8a:20:71:68:40:
         cf:c9:bf:ba:11:2b:3b:68:11:fc:53:5a:d6:d7:73:ed:11:5f:
         ba:cd:d5:49:00:ab:87:33:67:ae:9b:7e:ca:fb:83:38:ec:b1:
         81:df:aa:03:c6:d5:ab:9e:cd:73:a4:1e:2f:76:ba:a4:4b:d9:
         3f:58:7e:6a:a6:5c:90:a0:95:a8:33:dc:46:57:b4:bd:c8:45:
         88:28:fe:59:7a:d0:d6:af:93:49:83:69:6b:2a:8b:9e:7a:eb:
         0c:4e:8f:5d:e6:cc:c4:f7:38:c0:06:91:84:f0:18:c2:06:9f:
         22:cc:c7:39:b2:f1:e3:11:a5:9d:45:d6:99:15:2a:7a:5b:b4:
         b3:5f:70:08:06:08:0b:8d:77:83:da:4e:ed:36:02:fb:20:f0:
         73:46:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:00 2025 by rpki-client