Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30e0295b-bc04-3f59-8820-017bff119fea.roa
File:                     30e0295b-bc04-3f59-8820-017bff119fea.roa (raw, json)
Hash identifier:          hxvhcBWJOW+oKtLY9jKoJIdlF+AriRZJXfQTqH/7nWs=
Subject key identifier:   65:54:B2:02:33:2B:84:B6:0A:6C:70:3A:62:62:E2:9A:4D:DD:87:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C92EB624D51DABE73B5A14E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30e0295b-bc04-3f59-8820-017bff119fea.roa
Signing time:             Thu 13 Jan 2022 05:00:00 +0000
ROA not before:           Thu 13 Jan 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.24.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:92:eb:62:4d:51:da:be:73:b5:a1:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2022 GMT
        Subject: CN=a76b3e39-152c-455e-b0f4-bd969351fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:6c:ef:95:89:69:bc:54:20:7f:1d:f3:7b:
                    d7:2e:93:84:b5:5e:51:66:2b:2c:64:88:b2:d0:e1:
                    7d:1a:77:d3:8e:0d:e6:77:16:75:d4:83:13:36:6c:
                    e4:71:d3:97:ee:34:70:e8:db:35:d5:e0:03:6f:01:
                    0d:a7:7d:30:ea:3d:27:77:18:0e:d2:df:7c:e1:34:
                    cf:48:75:bb:49:96:9b:a6:37:f9:51:bb:9e:1e:cc:
                    f7:06:ee:4e:31:4a:72:1a:dc:a9:06:fd:1c:15:35:
                    c9:63:1f:4e:23:49:4e:d3:4f:74:ce:d8:f3:a0:14:
                    63:ca:0f:c9:4d:bd:4b:3d:9c:6e:8f:c5:43:94:13:
                    91:73:2e:02:8c:d0:66:ae:44:22:62:bb:74:06:15:
                    85:98:1f:c5:97:8c:29:3a:63:12:f9:8d:4e:38:7b:
                    a8:42:b4:46:9c:f8:44:f3:8a:20:df:06:1a:76:da:
                    ef:f5:70:57:da:80:55:bd:37:36:8a:9d:e8:ca:1e:
                    fb:05:ad:2d:14:d8:78:60:5a:30:5d:a3:49:94:b7:
                    6d:0a:34:02:fe:31:1b:5b:28:86:02:ac:6f:e5:19:
                    15:44:62:f1:83:2d:05:34:3b:81:d7:06:f2:1b:41:
                    09:39:c6:c5:af:87:f4:2d:d3:4c:86:92:9f:7c:22:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:B2:02:33:2B:84:B6:0A:6C:70:3A:62:62:E2:9A:4D:DD:87:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/30e0295b-bc04-3f59-8820-017bff119fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:64:33:87:d4:f4:0c:49:84:01:31:17:76:a2:88:38:69:87:
         18:eb:2d:10:4b:66:78:de:68:7c:e7:1c:26:17:3f:8c:1c:6f:
         de:2c:75:95:a3:2f:f8:60:f4:ca:41:ba:47:6e:06:aa:ec:50:
         42:cd:ca:e7:11:bf:31:d3:11:02:78:60:5c:ba:d6:74:b7:80:
         6e:90:54:7e:81:0c:22:f8:94:54:02:db:27:47:3f:dd:7b:37:
         1d:e4:54:34:cd:0f:58:05:b4:67:75:08:e7:c5:ff:b1:45:fd:
         ab:64:0b:4b:ff:32:71:1e:2d:61:af:10:a2:b8:eb:33:b0:df:
         ff:d1:b2:96:03:28:28:4b:b8:c0:f2:4b:a1:36:8a:70:6c:43:
         31:9f:73:de:74:3a:64:c3:99:24:af:f0:ea:48:b4:e4:b6:3d:
         15:85:22:e2:b8:3c:e0:dd:1f:15:f2:3d:22:58:33:ae:45:bc:
         36:7c:22:49:83:d4:80:8a:28:5b:d5:8e:5c:7f:50:f9:5d:d4:
         0f:ed:9f:fb:71:22:41:ee:5f:d4:d9:38:ae:9a:05:3b:45:40:
         16:7c:39:8b:02:f3:6a:b3:b3:7d:93:8c:af:f5:3c:fa:8b:06:
         63:12:a9:ec:02:0a:2c:04:73:a9:e8:f5:14:a3:7f:97:fe:01:
         73:01:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:56 2025 by rpki-client