Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30a16de1-a889-3408-a0c8-55e64f061928.roa
File:                     30a16de1-a889-3408-a0c8-55e64f061928.roa (raw, json)
Hash identifier:          gPgx3i9u042QNH6r9anwQ5YSMVMrlwrt+LwgjOOFntY=
Subject key identifier:   D2:07:00:35:66:7B:25:C9:38:B0:DF:74:E2:E7:9E:42:20:D3:17:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403DB9C3F3B1DDBDACB449FC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30a16de1-a889-3408-a0c8-55e64f061928.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:b9:c3:f3:b1:dd:bd:ac:b4:49:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=42be3cce-38e4-4e9c-844b-930228931d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:0c:b3:01:8e:ab:d5:9a:25:19:10:ae:2e:
                    c9:81:81:2e:18:96:77:6a:83:bb:d6:19:a9:4c:1f:
                    0e:6c:54:35:5e:fb:ca:cb:97:d6:fd:cc:8a:73:a5:
                    49:22:a5:4d:50:27:86:18:7a:66:79:bd:a5:17:c7:
                    e2:c1:36:69:13:5f:e7:d6:a1:1f:71:f4:e7:fd:63:
                    99:87:9c:28:e7:49:34:ff:8c:e1:70:9d:e0:ed:cc:
                    61:80:0c:ac:20:ed:14:e6:09:bd:c6:8d:9a:e3:1c:
                    85:bc:c9:26:8f:ce:5e:97:4b:cf:90:92:4c:35:5f:
                    28:5c:b0:00:35:d7:ae:46:12:12:4d:39:ce:83:2b:
                    9d:c8:dd:c5:1e:00:7f:05:de:6d:09:61:f8:a3:6c:
                    ea:a7:15:cf:42:cb:8e:e4:45:2e:e4:aa:1e:e7:b1:
                    a1:22:21:0a:b5:6f:f9:37:ad:be:25:87:6c:0d:c4:
                    d5:11:25:22:e4:6e:4f:27:0e:69:f7:51:64:00:82:
                    20:8f:fb:ac:77:33:2d:91:35:04:60:64:94:a5:0b:
                    a9:e5:88:32:81:e1:fb:7b:d7:ae:be:2e:76:a0:08:
                    e7:e5:a7:32:32:91:6c:c9:92:c6:14:d3:e3:66:4a:
                    d8:85:2c:24:61:e5:81:c1:8e:43:ee:89:30:88:5f:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:00:35:66:7B:25:C9:38:B0:DF:74:E2:E7:9E:42:20:D3:17:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30a16de1-a889-3408-a0c8-55e64f061928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:10:e7:9f:7f:21:05:ce:94:9c:88:a4:63:61:26:05:c1:
         7a:ca:18:ec:c3:f6:72:71:d5:50:c2:6f:f5:5a:ba:b5:2f:7a:
         93:72:1e:80:e5:49:b0:66:70:38:ae:54:74:dd:66:27:11:93:
         d5:c1:2b:2c:60:17:0e:d5:30:30:97:ed:db:69:69:6b:13:8b:
         bd:22:56:40:46:ce:40:4e:a7:01:aa:61:ec:e4:55:46:01:97:
         d4:e2:14:fd:b7:17:b1:00:3d:d0:d1:75:40:a2:02:50:90:76:
         51:1e:63:70:5b:db:b6:eb:29:39:5f:9c:e2:be:fe:56:64:bc:
         a7:3c:96:5c:b8:d9:48:aa:10:5e:7a:b5:e6:0f:38:9e:17:a2:
         cf:dc:29:fc:ff:6f:7c:bf:96:f0:59:56:02:e3:46:33:b8:c3:
         b6:f7:be:66:71:a0:ca:d5:7b:41:34:34:2f:77:f3:39:cd:26:
         2b:17:13:c4:44:8c:be:50:c4:ea:e9:29:9f:a6:14:b2:24:4c:
         14:23:a2:42:0c:c0:50:09:07:15:b9:33:b2:78:a3:a6:53:91:
         c9:a8:f6:03:88:2f:76:12:1d:26:01:6e:55:df:4b:87:98:52:
         91:7d:da:67:ec:99:f7:e8:28:ca:24:5b:e9:97:4b:57:32:32:
         d9:2a:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:30 2025 by rpki-client