Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b53e00-888b-398f-85b0-e0f8519fb0c6.roa
File:                     23b53e00-888b-398f-85b0-e0f8519fb0c6.roa (raw, json)
Hash identifier:          eWfJayBy0swbNdYI2RiHvwQLrEEb5KdLUmz2szcKTnw=
Subject key identifier:   84:38:CA:18:17:F7:BF:D3:5C:E5:B7:E7:35:01:D2:E4:6F:1D:9D:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB8BE54A889F9D726B79FAA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b53e00-888b-398f-85b0-e0f8519fb0c6.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b8:be:54:a8:89:f9:d7:26:b7:9f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=3ae13ea8-1a77-42b6-82ab-6a465cd6cc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:a4:f5:38:bf:3b:28:60:6c:d8:46:9f:86:
                    c3:81:6d:16:f7:1c:b2:95:47:f4:13:45:27:f4:32:
                    fe:3e:72:ae:cc:22:0a:14:d0:0d:54:3b:96:cc:5e:
                    01:fe:75:69:17:c1:cb:d7:af:d4:61:a9:da:49:5a:
                    1c:19:b1:25:5d:42:54:93:27:18:86:65:4f:43:d6:
                    51:f4:b8:1b:16:98:73:fe:f0:c7:e5:8f:af:31:65:
                    65:75:eb:2b:81:30:c1:22:a4:bb:ad:95:a6:f0:18:
                    fd:66:45:25:aa:07:93:44:6b:32:21:51:29:86:c5:
                    a4:0f:cd:36:2d:d0:5d:ae:2f:2e:fa:6e:50:f1:af:
                    85:22:a7:90:1a:7f:bc:bb:b7:06:7c:2e:69:15:00:
                    d1:4a:f9:c9:3e:f6:5e:a0:b5:d3:b9:53:a9:05:e6:
                    18:db:0f:3d:64:f2:4b:cc:d7:90:9a:ba:d1:53:1f:
                    b4:fd:c1:87:a6:bf:ce:06:e1:39:77:b3:da:76:f8:
                    7c:eb:4e:cb:21:38:5d:93:90:6b:1d:d4:59:cf:e9:
                    39:7b:5a:c1:89:9f:d3:6c:a6:cd:aa:96:3c:0c:7d:
                    10:8d:16:19:b0:82:42:a7:02:81:c8:ff:ab:be:e1:
                    1b:e8:d8:62:ab:1c:af:c3:66:06:d9:b6:4f:1f:ea:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:38:CA:18:17:F7:BF:D3:5C:E5:B7:E7:35:01:D2:E4:6F:1D:9D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23b53e00-888b-398f-85b0-e0f8519fb0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:77:9b:eb:e9:07:42:e3:87:6f:02:a8:e9:42:66:94:f0:
         29:3d:8d:bc:06:d2:c5:24:3e:a4:d1:d0:a6:2d:e7:93:63:08:
         a0:7d:a2:5e:93:43:01:81:c7:27:57:e6:72:ec:1f:08:f7:e7:
         02:85:85:c3:dc:4c:28:9b:d8:95:bc:9a:39:9b:c7:18:fa:0b:
         3a:c7:75:3e:64:6c:82:74:51:9f:55:e1:6e:34:1f:ab:fe:aa:
         be:aa:6b:c4:8b:ff:56:34:84:77:de:a7:61:6c:1c:06:be:61:
         e3:ec:97:83:03:81:5a:29:17:97:c3:11:64:f4:53:c3:71:d3:
         58:6d:40:8a:a9:2d:51:19:db:44:38:32:f9:17:5d:c6:35:c7:
         07:76:52:2f:ab:89:b6:da:1b:5c:f9:f5:41:dc:99:17:77:45:
         25:4f:c5:40:71:83:43:3f:c7:c9:42:23:ca:51:09:66:15:1e:
         52:6d:a2:be:36:db:d5:22:19:cd:60:45:a7:1c:37:fb:a2:4a:
         2a:d9:b1:cc:4b:e8:b1:7b:9c:15:d8:96:5a:f0:9e:46:63:66:
         4f:98:46:41:5d:28:5d:19:be:92:bf:8f:71:a1:99:4f:86:cf:
         c4:59:ed:ca:5b:ae:17:2c:51:12:7f:0a:ee:2a:98:cc:60:70:
         ca:70:c5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:35 2025 by rpki-client