Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b337e5-91e3-39e1-ae2a-94f096c8ef34.roa
File:                     26b337e5-91e3-39e1-ae2a-94f096c8ef34.roa (raw, json)
Hash identifier:          4LU29nzCyQ5p4A8l4yPvqxUhG9s6FWPsB5L6b9dXf00=
Subject key identifier:   45:AA:92:95:95:D7:BF:65:5A:E3:DA:6B:52:DE:BB:CE:45:2E:18:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB94472EDEA29862F579D3B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b337e5-91e3-39e1-ae2a-94f096c8ef34.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.124.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:44:72:ed:ea:29:86:2f:57:9d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=9eb25f3b-4e7c-41d3-9047-cc2d7768cadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:c3:eb:c4:d9:c1:ff:20:04:12:bc:58:db:
                    41:6a:23:69:ca:ff:d8:a1:af:a5:65:fb:13:6f:3a:
                    5e:6a:43:c8:05:7d:18:a9:ce:e9:e8:b6:52:2f:dc:
                    d3:b8:0f:b5:d9:c3:c0:0a:d4:62:ac:47:49:49:d4:
                    09:6e:cb:eb:b1:01:86:41:52:e6:4e:34:d7:b7:b0:
                    db:88:05:28:22:28:b0:7e:53:3a:d5:4b:d5:fc:0a:
                    77:f0:37:6b:fa:86:0b:e5:46:9f:1e:e3:33:f8:70:
                    bc:e4:f9:5a:fb:13:2d:ee:6c:77:67:82:47:21:82:
                    c1:03:27:f2:6d:bc:88:01:6c:29:f1:cb:b3:12:13:
                    79:14:be:0d:d1:d4:0a:b5:29:b8:55:3d:41:de:6c:
                    0e:7b:a5:bc:ec:9a:50:7b:0a:5d:a3:36:60:f0:bb:
                    09:e1:f5:88:0e:98:85:4a:dd:50:9b:a9:39:68:04:
                    ef:f7:9e:b2:89:23:4b:65:63:40:a4:4b:78:0f:70:
                    f8:d5:c4:9b:7b:7b:93:96:ce:33:3b:ba:70:43:97:
                    de:ab:18:e8:7e:f0:af:31:26:70:e5:05:64:a2:7e:
                    f2:43:08:fd:4c:cc:86:07:07:d1:8f:16:bb:03:73:
                    84:08:6b:31:11:28:a7:76:99:f8:13:5c:b1:ba:d1:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AA:92:95:95:D7:BF:65:5A:E3:DA:6B:52:DE:BB:CE:45:2E:18:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26b337e5-91e3-39e1-ae2a-94f096c8ef34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.124.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:07:72:9c:b5:6b:c9:d4:fc:fe:7b:74:72:a6:cf:26:08:ba:
         a4:93:c4:ce:a2:83:4a:76:94:cb:a9:ff:91:d2:fd:5a:61:8b:
         f2:a4:8f:e3:b5:1e:a0:02:a7:a4:24:48:e1:ee:de:a0:2d:00:
         f0:09:40:57:32:d2:bc:56:9f:7c:7b:f1:65:c9:6f:a3:84:72:
         22:0a:e6:53:16:0e:49:33:57:a0:6f:35:94:69:fd:71:4a:a5:
         9f:61:2b:ee:12:82:4f:cd:a5:fc:64:9a:e2:1c:17:27:2d:b8:
         7d:a7:ff:13:f5:dc:cd:fc:85:21:90:5f:d5:fc:5b:69:bd:a6:
         58:4f:cb:ac:74:14:f0:8e:06:1d:56:92:1c:d5:13:1e:a5:67:
         6c:16:8f:97:34:37:52:f5:de:be:30:ec:16:92:ac:a9:1d:e6:
         d5:08:49:bd:5a:86:e1:4c:1d:34:62:da:ef:e8:4d:ef:d4:78:
         32:13:d4:c1:dd:75:5b:50:ed:97:c7:7a:e5:4f:ca:a6:77:89:
         d9:09:55:27:a5:ef:71:3a:1e:47:3c:8c:d1:30:f8:5e:78:96:
         b2:64:56:2a:8b:74:76:4c:34:be:69:ed:0c:5d:de:ad:99:aa:
         2d:08:1e:16:5d:52:d2:20:ab:f1:ae:45:4f:99:21:b2:19:88:
         7e:31:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:27 2025 by rpki-client