Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/348222ac-d690-3434-9bce-271bf2f05b89.roa
File:                     348222ac-d690-3434-9bce-271bf2f05b89.roa (raw, json)
Hash identifier:          81aRJI8aPXQRU5+WCwRRGwHjU931fL92XEo0dgcechg=
Subject key identifier:   8E:38:90:1A:D8:49:56:F0:01:9C:BE:64:BF:2E:8F:1C:1E:4C:D5:FD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E0C359BF82573B2C1BE021400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/348222ac-d690-3434-9bce-271bf2f05b89.roa
Signing time:             Fri 27 May 2022 21:27:08 +0000
ROA not before:           Fri 27 May 2022 21:27:08 +0000
ROA not after:            Sat 02 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0c:35:9b:f8:25:73:b2:c1:be:02:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 27 21:27:08 2022 GMT
            Not After : Jul  2 04:00:00 2022 GMT
        Subject: CN=2f5d6a7a-7cad-4c74-a552-71e6783646af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:56:c2:d8:86:98:58:51:2b:2d:86:46:65:
                    0f:d2:48:a5:b9:2e:52:21:fe:f0:8e:27:b3:db:e0:
                    97:3d:0d:c3:05:b5:a2:df:db:75:e1:75:0e:7c:7c:
                    73:86:32:b4:58:39:ce:62:6d:88:e2:df:a9:e3:69:
                    4d:1a:a6:0e:b6:cf:b7:cf:d3:ef:01:4b:d0:29:55:
                    cb:15:ce:64:8d:17:ed:31:ac:e0:5b:08:3f:45:e5:
                    d0:bd:53:c5:c5:c6:95:20:76:e2:82:b6:67:26:05:
                    1e:10:66:11:16:8a:e7:5a:2f:b8:f3:31:94:d4:cf:
                    b0:f0:d9:6a:c3:c0:af:fb:bf:ba:74:95:93:88:c2:
                    07:7a:df:74:13:4c:1e:e7:9c:2b:50:fb:d6:0d:57:
                    03:41:18:27:c6:6a:fb:57:b3:99:61:e5:47:fb:62:
                    f8:90:f3:67:37:26:f5:f2:0b:43:73:fc:1c:a9:4a:
                    06:98:b9:28:09:ba:1a:9b:b4:36:60:48:4d:d9:52:
                    8a:f2:6f:69:f0:37:ed:c9:26:f9:4f:8a:ec:eb:d5:
                    6a:82:60:8f:4d:46:7f:18:43:4a:bb:fe:f5:bc:e9:
                    87:7c:02:61:a7:fa:40:77:12:33:77:04:6c:20:ff:
                    52:87:9c:c7:4e:22:48:be:55:68:4b:4f:19:b7:cc:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:90:1A:D8:49:56:F0:01:9C:BE:64:BF:2E:8F:1C:1E:4C:D5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/348222ac-d690-3434-9bce-271bf2f05b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:16:2c:87:00:16:4f:d3:e7:eb:a6:38:4c:f2:57:60:00:ba:
         62:7d:08:e0:c0:9a:a8:19:e4:40:57:21:ce:88:96:08:0f:e9:
         ae:6e:3a:eb:df:2b:2a:9d:bf:da:30:48:08:5b:6c:3a:42:ee:
         6e:0d:a2:f0:fd:14:a8:87:21:0a:b5:b2:fe:f5:3c:4c:71:27:
         09:40:36:4a:e5:9a:e8:60:fe:c1:10:b7:b8:df:b2:0f:0b:ee:
         73:52:46:31:d8:74:6f:8e:27:ae:36:a0:74:15:03:3d:c2:61:
         29:7f:60:bd:9f:6b:38:8a:2e:7d:84:78:5d:c1:1d:3a:41:f2:
         28:72:cf:0a:37:67:7d:54:49:87:68:63:58:61:e3:09:5b:bc:
         72:88:f0:c6:03:07:c1:ec:05:54:c9:13:23:a9:09:8a:68:08:
         5c:c7:c5:a1:bd:65:e3:e1:22:e0:44:05:5a:e7:c0:f4:8c:aa:
         09:ce:4c:ff:33:06:da:f8:c8:05:2e:0f:30:d2:26:5a:98:00:
         f1:b8:3f:65:68:f6:fc:b1:84:26:44:55:09:03:56:65:c7:9e:
         d3:31:bf:9b:67:c4:80:0e:d5:2f:a8:53:e6:f3:88:26:8e:cb:
         6d:44:31:31:62:fd:db:75:e6:0a:a2:eb:0c:51:41:f7:43:6f:
         28:6d:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:37 2025 by rpki-client