Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a93f339-e050-326b-9c60-05a79dce0a6c.roa
File:                     2a93f339-e050-326b-9c60-05a79dce0a6c.roa (raw, json)
Hash identifier:          GNex7Vol1jUBRyw7rnF5aH3dIx0qgbnVYt9HSXhB1QE=
Subject key identifier:   57:AB:38:72:1D:18:19:A8:59:9F:76:5A:4D:70:88:8D:70:17:65:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B765E67AA67AE73B0926E800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a93f339-e050-326b-9c60-05a79dce0a6c.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b7:65:e6:7a:a6:7a:e7:3b:09:26:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=8e693359-0771-41b4-a9f0-4547f6e51854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:5d:1a:bc:8a:c7:31:85:a5:a6:a8:bb:6f:
                    47:74:0b:b5:a1:76:bc:9e:ea:9f:a6:9e:81:9d:e1:
                    ae:8d:12:4b:6a:d8:46:7b:3b:b1:a1:60:73:3b:c9:
                    19:78:74:c7:fd:ce:7b:1f:c7:7b:ba:8d:3b:a5:51:
                    38:fe:47:d8:3f:2f:db:aa:32:9f:43:f0:68:58:2c:
                    35:eb:b9:b1:93:16:0b:f3:c0:15:22:af:22:6b:5b:
                    e6:7f:fa:a4:c5:e3:8a:7d:dc:08:2d:12:ca:04:c8:
                    bb:5c:39:d2:0f:6d:a9:84:eb:c9:3b:eb:1e:ab:51:
                    37:b9:0d:4b:21:dc:9a:65:06:a6:bb:d4:56:cd:eb:
                    cf:13:0f:68:53:c1:7c:f3:eb:5a:aa:34:1f:89:18:
                    66:94:b3:3e:ec:cc:b4:32:8d:bd:0a:2d:72:0b:02:
                    02:e2:43:d5:7c:b2:0c:22:a0:6c:43:f7:36:4c:d1:
                    49:dc:f3:79:f4:7c:f0:63:74:7b:e2:11:d7:cc:c0:
                    b3:46:08:e3:cd:6f:3e:af:f6:11:20:48:0a:13:f5:
                    26:32:07:eb:ff:a9:a7:0c:e4:90:cf:62:42:44:0a:
                    93:88:2f:87:ef:e5:b9:e3:7f:90:48:c0:37:98:0c:
                    30:17:28:54:1a:63:61:da:66:7d:d6:18:eb:2b:90:
                    10:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:38:72:1D:18:19:A8:59:9F:76:5A:4D:70:88:8D:70:17:65:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a93f339-e050-326b-9c60-05a79dce0a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:c6:fa:84:19:4b:b6:ea:83:a0:4c:4e:4c:69:eb:a2:3c:
         34:e3:85:79:64:d7:04:53:4e:77:a2:2b:e5:f7:e6:b1:10:c1:
         8e:cb:67:45:5f:9c:b5:14:cc:e4:64:8a:36:6b:8a:a5:5a:a8:
         64:07:75:29:e0:33:d9:ce:45:4d:fa:31:b5:60:f8:db:a4:0f:
         91:ed:a2:49:99:6a:35:ed:90:1d:e6:75:45:61:07:3a:f3:44:
         51:36:f2:bc:0e:bf:87:bf:46:d6:c6:23:e8:28:9d:06:d2:60:
         b9:3c:9f:21:8a:b0:7d:d5:be:e2:ee:de:bc:44:14:2d:78:68:
         ca:97:a9:01:e5:7d:6d:d9:c3:6b:32:70:9d:7f:ec:0f:3c:84:
         a1:06:37:fa:59:8c:00:51:0f:4b:98:53:69:d2:b3:fb:74:05:
         c2:2a:72:1a:31:c5:78:ea:2e:25:a8:58:d7:5d:ab:c7:61:4b:
         0b:d3:67:73:d6:23:f9:e8:59:dc:9a:2e:40:7f:4b:bc:47:3c:
         9f:2b:ff:45:61:0f:ed:53:13:db:7a:52:73:dc:cf:56:e0:01:
         7e:45:8d:4d:5e:c1:9e:17:67:0d:b7:22:dc:42:51:09:64:26:
         dd:25:05:8e:63:31:6e:57:c1:77:06:d3:fb:0e:12:48:ba:fa:
         67:95:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:21 2025 by rpki-client