Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/309b1a73-c0b1-3080-95b0-178db8adf60a.roa
File:                     309b1a73-c0b1-3080-95b0-178db8adf60a.roa (raw, json)
Hash identifier:          Qck4VjS9PrmJq/50pSNiSUiWnq2+uGUuXeJ/fsfF/p8=
Subject key identifier:   BC:83:F1:EC:CE:C5:92:7E:D3:0A:D7:BD:7B:FE:C4:28:BD:3F:90:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404B55AD0471182CAE13039280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/309b1a73-c0b1-3080-95b0-178db8adf60a.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:55:ad:04:71:18:2c:ae:13:03:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=c7cc4633-9102-406f-8720-ef92052b1fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:29:d4:3f:38:5d:7d:ed:a4:35:e0:bc:e3:
                    79:f9:43:4b:81:eb:0b:9e:b4:5b:db:b4:8a:fe:8c:
                    74:9b:e3:19:60:d1:f6:ec:b9:5d:39:b3:83:89:d3:
                    2a:e7:0f:97:ba:c7:d9:e7:da:1b:df:d8:8d:04:b2:
                    d3:d3:51:91:55:5f:03:90:9f:9d:82:59:24:68:2d:
                    42:c5:c7:e3:81:61:6e:f1:aa:7e:d4:b0:e3:97:bf:
                    cb:c4:4e:b4:34:cb:50:2d:8b:0b:0d:4f:e1:8a:68:
                    a0:4c:43:22:f9:c8:a3:53:0d:24:14:c5:6e:91:1c:
                    30:3f:4e:a8:01:fa:16:54:68:7c:4f:ce:c6:24:30:
                    f1:01:4c:a6:b0:77:93:35:68:ec:50:a9:62:3e:8d:
                    fe:d5:1f:d3:8d:d0:15:3a:7b:ca:df:64:cc:b9:61:
                    6a:bf:e9:54:5b:39:5a:70:84:26:15:bf:13:e3:e6:
                    17:70:a5:6a:3c:bb:a9:10:7c:d1:28:1a:fb:5b:df:
                    84:93:32:60:5c:7d:53:09:ac:09:4f:90:7a:4f:31:
                    64:f2:f4:8e:05:78:c1:d5:cd:8e:0f:2e:3e:2d:a3:
                    1b:d0:40:3a:0b:5b:fe:14:d0:fd:22:45:6c:5a:79:
                    c4:3e:88:ce:a0:aa:b9:32:0d:82:0c:92:03:7f:d2:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:F1:EC:CE:C5:92:7E:D3:0A:D7:BD:7B:FE:C4:28:BD:3F:90:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/309b1a73-c0b1-3080-95b0-178db8adf60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:f6:8a:31:c3:5a:d9:b6:36:d9:75:18:11:f0:9a:b2:53:
         92:0d:d0:72:2c:81:6e:a0:87:82:50:f9:8f:b9:e7:2b:03:df:
         25:8c:d8:30:2e:7e:79:04:a7:22:80:7a:6b:2a:81:ec:5c:0e:
         dc:50:86:c1:d6:09:71:96:ab:d0:d0:83:16:d8:ea:52:6c:90:
         6e:41:04:78:0a:d1:a5:a6:e4:57:43:bc:03:cd:98:bc:82:ae:
         bd:29:28:aa:ae:bf:ed:e1:9d:d3:1e:65:5e:a2:19:77:4e:27:
         13:5a:ac:27:d0:dd:0e:74:be:f8:ae:e6:1a:0d:fe:bb:ea:38:
         f8:d2:01:27:c8:b3:ab:cf:b8:dd:23:25:8b:37:47:91:5d:e6:
         7d:9b:e4:cb:89:0f:3f:7f:5b:f5:46:57:9e:33:e1:f8:5f:13:
         7c:ff:ac:42:e5:0a:4e:cc:a2:3f:a8:2f:d9:c2:f9:cd:71:0c:
         d7:27:6b:aa:45:02:68:bc:3c:d5:b2:f6:7c:1f:c9:bb:ad:00:
         e0:3f:12:1e:fd:85:71:df:a0:96:9a:67:f0:b6:83:a5:5a:cf:
         37:b2:82:76:33:19:c5:07:40:91:dc:8e:bc:1a:95:c7:49:e8:
         25:37:18:a5:3f:30:15:53:eb:f9:45:9a:77:81:fd:fc:00:92:
         9d:f0:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:47 2025 by rpki-client