Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a13b92a-19da-3fce-9b9f-eed21df86aaf.roa
File:                     2a13b92a-19da-3fce-9b9f-eed21df86aaf.roa (raw, json)
Hash identifier:          GcLa9RyEjmQmpZu9OT/4gLQvkasSNfIu0xwOU3hf2KQ=
Subject key identifier:   04:E0:E1:EF:35:FD:12:9F:A2:30:96:11:CC:CB:52:41:BA:7A:17:F5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E411B133151AA60084F2CEDE8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a13b92a-19da-3fce-9b9f-eed21df86aaf.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:1b:13:31:51:aa:60:08:4f:2c:ed:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=e98f417b-fb20-48c0-9434-9cba177ef851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:71:5d:47:28:7a:6b:f8:f9:b6:4d:2b:a5:
                    be:28:c9:f5:93:7a:3c:84:5b:99:06:5d:0b:2b:38:
                    fa:dd:2f:15:4b:6e:42:cb:39:d8:eb:18:7b:27:4e:
                    e1:23:12:4a:1d:15:e4:7e:dc:d6:0d:b8:bf:7d:d9:
                    65:c3:ea:16:a4:8e:f1:94:83:75:cb:38:4e:de:4d:
                    ba:c7:4e:fb:fe:bf:55:9e:14:3a:c0:71:21:d0:05:
                    c7:09:62:5c:30:bb:4c:59:fa:85:b2:38:ad:02:df:
                    ce:be:e1:3a:d3:e5:b8:d2:14:ae:b8:e5:3b:67:e0:
                    f8:f3:09:4e:ad:de:2d:3c:06:ab:f3:79:2b:fb:43:
                    59:15:1f:32:44:e9:95:91:3c:c5:7a:a2:ab:c2:47:
                    4a:d2:69:d8:1d:49:ac:23:a3:98:ff:fb:8d:80:38:
                    19:3a:f6:dc:85:1a:a4:ff:02:fa:8a:87:2b:b9:00:
                    6c:7b:cc:4c:9d:55:56:45:6d:72:d3:4f:c5:02:51:
                    23:98:77:6b:b7:d8:69:ad:26:08:1c:f4:a5:c0:05:
                    03:56:b8:da:37:f7:61:fd:9b:c3:0f:98:76:ec:2f:
                    db:76:8c:a9:b2:14:37:22:72:76:e9:74:47:24:94:
                    b2:f8:bc:97:73:06:86:70:a0:fe:32:a8:70:93:31:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:E1:EF:35:FD:12:9F:A2:30:96:11:CC:CB:52:41:BA:7A:17:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a13b92a-19da-3fce-9b9f-eed21df86aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:f4:a1:0e:c0:72:7a:50:58:02:db:f0:45:d9:7c:12:26:
         d6:73:b3:e6:90:cb:cf:cc:4b:79:80:a5:ed:72:7a:dd:81:cf:
         8a:59:4a:2a:b8:b8:7e:3a:25:cf:ee:7a:ea:c8:4b:fc:51:0f:
         f7:ae:76:aa:98:35:26:0f:17:1e:4f:cc:c2:8b:94:68:01:5c:
         2b:2d:74:b6:2f:b8:0f:0c:c4:2c:b4:f3:67:ea:9e:e5:77:42:
         c0:1b:83:d7:e6:95:c4:e7:77:86:b9:47:fd:e8:13:1c:dc:8e:
         c4:fa:1b:c6:28:29:99:f4:21:44:81:05:be:42:c1:2e:f6:e6:
         67:ea:9b:67:3c:17:e6:42:83:ce:f3:5d:8b:3b:6c:cf:ec:12:
         b6:a7:08:f9:28:a1:e5:7d:e4:ff:26:bf:25:2e:cc:78:8a:9d:
         48:0f:16:29:52:c6:9c:5a:a0:bc:1b:d8:37:01:43:8f:bb:9b:
         58:34:85:58:66:49:73:79:17:b2:58:18:24:0e:a5:6e:00:0f:
         df:9d:af:ab:54:a9:6b:51:ac:e9:2a:20:07:bb:ae:9d:1f:fd:
         e4:bc:d4:d9:9d:9d:4e:91:94:5f:4d:62:be:f1:b4:5f:fa:82:
         11:f9:84:87:b2:ab:a5:b9:0b:f6:bf:32:9e:03:00:ab:d2:27:
         7f:05:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:47 2025 by rpki-client