Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cc8041-db94-38e1-b093-d235c7381caf.roa
File:                     34cc8041-db94-38e1-b093-d235c7381caf.roa (raw, json)
Hash identifier:          hmJE0/UHXo13xZZQkkx0Dh4Tl0NwN/XCiP5++rSL/F0=
Subject key identifier:   71:07:64:74:F5:94:DF:B4:0F:65:32:63:C0:15:1C:0B:2F:D5:AB:2F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584016A4308F8FEE8B28C83B1B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cc8041-db94-38e1-b093-d235c7381caf.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:a4:30:8f:8f:ee:8b:28:c8:3b:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=8fd00232-fee0-4535-aa31-2f36ac7cc137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:2d:e6:ea:09:20:53:73:32:f0:cf:52:40:
                    99:75:e3:83:3c:21:0a:3e:b7:7d:b6:b4:50:3b:1e:
                    b8:09:d0:9c:65:e9:e2:4e:50:8b:ae:8a:5b:5e:8e:
                    b5:f4:70:f1:d3:fd:88:9c:66:1c:cf:a7:c6:ae:ef:
                    ed:41:39:d5:fa:62:09:8b:9e:65:25:20:d8:88:64:
                    e3:09:ed:f1:94:2a:7e:48:38:8e:1d:0d:d7:fb:ee:
                    39:72:be:97:3b:2b:58:66:30:8d:7d:e0:06:b6:78:
                    f2:ce:c6:75:48:e7:2e:c4:bf:2b:99:2a:f1:32:02:
                    36:96:c1:b9:4c:53:74:b7:23:ff:c8:f7:6e:92:d4:
                    f8:a9:5c:7b:99:6f:e6:ff:b0:dd:53:c0:83:cc:f0:
                    a0:28:08:bf:b0:01:8b:ab:5b:42:1f:3f:b3:d5:1a:
                    e9:b1:5b:04:08:f1:3e:91:05:13:c8:0e:a5:d3:b4:
                    e6:14:06:98:54:e1:7e:6d:46:4b:18:50:96:e4:db:
                    e4:9e:d5:dd:0f:54:86:80:b2:b7:c1:a4:a5:f7:50:
                    48:6b:76:fe:c4:3a:37:74:93:be:06:b5:68:da:fc:
                    af:3b:61:2b:92:9c:52:02:be:a5:3a:d1:38:11:92:
                    7b:59:a9:af:38:3d:fe:5c:d0:f6:c3:c1:9e:f2:fc:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:64:74:F5:94:DF:B4:0F:65:32:63:C0:15:1C:0B:2F:D5:AB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cc8041-db94-38e1-b093-d235c7381caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:61:76:b0:dd:e6:28:98:37:d1:0d:6a:ed:fa:c0:e3:7c:a3:
         21:cf:26:70:d6:8b:1e:32:3d:3c:5c:4f:35:8d:ec:62:c4:c1:
         47:f8:12:49:e5:21:38:ca:f1:0b:7b:9c:cd:98:64:af:d2:a1:
         ba:29:04:a2:37:02:b2:23:3d:ec:7b:38:44:ae:c5:70:72:c3:
         82:6f:34:9f:72:43:10:a7:1b:1e:bb:c0:f1:33:d8:ab:b5:d0:
         c0:11:ab:50:7d:5b:80:f4:a3:89:6a:2b:60:a3:1c:b0:ba:8a:
         bc:80:fa:52:59:5c:21:e9:d3:a4:05:55:e6:51:9a:53:41:e0:
         91:f4:93:1b:5c:0e:6a:74:62:e5:78:27:c8:0d:79:10:83:81:
         3d:d2:c3:a8:30:99:59:1d:8f:65:97:66:66:ed:83:e9:9f:e4:
         81:58:5c:38:89:30:8c:78:da:14:14:d9:95:b2:fb:0c:9f:8b:
         da:4f:40:17:2f:e5:61:8b:bc:1f:4a:8b:40:fe:bd:15:8a:2f:
         8a:44:35:3f:de:65:6d:a1:7b:19:02:aa:b4:dc:42:1b:e7:bc:
         b7:0e:a1:78:33:36:2a:cb:be:a7:89:ce:7c:56:13:f3:b2:f7:
         44:58:e6:1c:3f:79:72:6a:02:ae:06:9b:40:63:8a:62:37:4f:
         6e:40:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:21 2025 by rpki-client