Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1a2f8f-c1cf-300f-898a-4b34a5c1f4cd.roa
File:                     2d1a2f8f-c1cf-300f-898a-4b34a5c1f4cd.roa (raw, json)
Hash identifier:          0QCFh0LkX4+2p/GqIJHZaL2IR65nYmRlNZqhzBBCr7s=
Subject key identifier:   2F:F7:BC:D2:DA:94:8D:12:67:CB:06:68:4C:F0:94:55:95:BA:C8:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C79D3246A1BE374EAE46106B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1a2f8f-c1cf-300f-898a-4b34a5c1f4cd.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.74.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:d3:24:6a:1b:e3:74:ea:e4:61:06:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=5e55fce1-2da5-43eb-b840-19ecd0c59171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:4a:59:08:02:7f:f5:dd:39:a0:52:1e:d6:
                    ba:a0:80:0b:bb:6c:9e:2e:a4:bc:d3:e6:68:42:3b:
                    c3:f0:1d:85:c7:f1:67:a7:80:6d:6c:83:aa:09:a8:
                    f8:79:40:03:1a:91:f4:81:a6:94:b6:ff:5c:2c:b4:
                    55:68:42:2b:06:71:95:47:bc:82:f7:57:27:a0:48:
                    8d:b9:6e:f9:2e:39:e5:0c:0a:18:5e:09:82:4e:b1:
                    11:6f:71:59:22:a8:26:3a:cd:8f:aa:21:e0:6c:08:
                    9a:8f:a1:4b:c6:1b:e3:32:f4:60:7a:14:96:af:9e:
                    1d:7d:ba:b0:5c:9e:f7:31:94:da:2a:af:d2:e6:b9:
                    20:33:8c:7c:b5:92:51:4b:82:9d:6d:1c:34:3a:75:
                    60:d0:07:01:5e:83:9c:b7:74:e4:e2:ab:d5:e0:59:
                    fd:21:44:6c:30:7b:66:dc:ed:98:5f:e7:44:83:d9:
                    0f:4b:f4:a5:7f:dc:d7:64:f8:12:89:a5:79:25:c5:
                    16:6d:44:7d:04:45:11:54:ca:2f:b5:34:58:ec:61:
                    5d:63:6c:f9:c4:64:1f:e0:63:4b:65:ea:af:9a:b2:
                    f6:1c:bb:03:02:61:6a:fa:4d:3f:39:21:8d:9b:af:
                    07:b1:9f:33:77:8f:24:5f:7a:62:95:f5:85:a0:b5:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:BC:D2:DA:94:8D:12:67:CB:06:68:4C:F0:94:55:95:BA:C8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d1a2f8f-c1cf-300f-898a-4b34a5c1f4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:53:36:aa:79:ba:7c:54:19:34:be:87:42:06:17:59:d3:98:
         75:dc:13:72:bd:df:53:c3:cf:d8:9d:d0:32:24:e9:f3:f6:30:
         6c:42:46:e8:24:85:35:6e:38:c0:a4:e4:4d:95:15:68:fb:a8:
         c2:fe:ce:ed:00:b6:f4:6b:55:c3:f7:39:93:32:9b:67:13:60:
         82:b1:a0:ec:a9:07:43:3e:9d:a2:e6:e4:35:76:cc:49:5e:33:
         4e:53:cf:74:62:00:c6:b8:3b:bb:02:a3:88:f2:7f:40:ec:c6:
         b4:c8:ae:b7:0d:f7:b9:d2:fa:6f:c3:eb:cc:53:32:18:bc:ce:
         14:64:b4:56:3b:0a:0a:6e:fb:d0:c0:01:25:23:e9:3a:b2:1f:
         4c:3e:49:8b:1a:9b:74:43:e2:39:e2:84:7c:9f:f5:35:a5:87:
         db:8f:a5:76:3a:19:33:6a:cb:0e:22:fa:01:3d:cc:7c:2d:ec:
         ee:29:b7:95:a1:76:57:2f:cf:00:45:54:74:4f:5f:76:47:2a:
         87:26:1a:c9:3a:73:2b:23:28:a0:80:5e:86:bc:eb:c0:84:2a:
         1f:3b:cc:90:50:2c:09:f0:b4:4f:5f:2f:61:06:8f:7d:dd:ad:
         4c:62:3d:45:08:05:95:79:4a:46:2b:cf:2c:b0:df:80:f5:38:
         2e:c8:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:25 2025 by rpki-client