Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f7940e-96d3-38d2-957d-9e4ebc374b40.roa
File:                     34f7940e-96d3-38d2-957d-9e4ebc374b40.roa (raw, json)
Hash identifier:          oilVzsLB68ynoCysv77omXQy04cUXPTADzhXGq3Yq/s=
Subject key identifier:   8F:03:D4:3C:82:B3:6A:56:EA:14:1B:CB:6F:5D:88:8E:5F:E6:4D:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CEF5694FED865BE77D86BF1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f7940e-96d3-38d2-957d-9e4ebc374b40.roa
Signing time:             Tue 15 Feb 2022 05:00:00 +0000
ROA not before:           Tue 15 Feb 2022 05:00:00 +0000
ROA not after:            Tue 22 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ef:56:94:fe:d8:65:be:77:d8:6b:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 15 05:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2022 GMT
        Subject: CN=a39e3895-c9bc-41a1-9525-5505637afa18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:e8:65:28:d1:fa:53:c1:40:9b:06:55:aa:
                    ba:e9:cf:f0:46:df:fc:d8:e1:a8:d1:94:14:48:85:
                    30:3e:f4:79:df:37:23:1b:7b:6d:64:cc:28:3e:da:
                    20:7d:64:4e:8b:80:94:a3:8c:49:2e:72:41:59:3c:
                    cc:20:4d:91:da:d6:72:39:23:e3:10:fb:02:c3:37:
                    f9:ac:c0:03:bf:2f:6d:12:af:a4:c1:8c:c0:20:0b:
                    f0:68:be:4c:f3:a3:f4:5f:4a:59:e6:b0:69:1c:67:
                    a2:a9:78:7d:f6:83:1a:68:d1:5e:0a:b3:ac:c0:8a:
                    ae:26:a1:c2:48:2d:29:e2:1c:84:3a:5d:0c:14:4e:
                    0a:e5:fd:31:c5:b4:13:31:da:35:12:96:f6:31:83:
                    67:ae:ff:2b:b6:ff:99:b9:0b:85:49:b9:27:38:c6:
                    42:1c:ed:84:88:ee:c7:83:00:72:4e:60:86:72:62:
                    a0:ff:9b:f9:ad:c9:04:5a:e6:a8:80:19:a8:88:4d:
                    18:b3:3b:9b:87:3d:08:b9:98:45:8b:06:a3:a3:4e:
                    b9:a8:dc:73:1a:dc:8b:c8:a4:57:55:2a:c3:a2:df:
                    d9:f0:80:c6:43:b9:fb:d5:cb:c9:2f:26:f7:40:ee:
                    fc:ad:21:8c:ac:0c:b8:8b:94:39:ef:7d:35:08:67:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:D4:3C:82:B3:6A:56:EA:14:1B:CB:6F:5D:88:8E:5F:E6:4D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34f7940e-96d3-38d2-957d-9e4ebc374b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:08:bd:30:57:1e:68:91:04:93:72:94:0f:03:82:4e:fa:
         37:4c:d6:21:48:cf:c2:0c:8d:93:d7:4d:f2:9c:e0:b4:17:8a:
         3d:01:18:24:a6:50:73:11:a0:49:01:19:a6:77:94:75:a8:72:
         99:a0:00:b1:21:3a:7a:f4:71:9d:96:01:49:4d:d1:0f:2a:84:
         40:6a:2c:67:ae:8c:ac:59:71:bf:c1:22:f4:44:34:40:9a:ff:
         d7:46:f3:c5:e4:17:06:aa:f5:b5:6d:89:95:dc:35:b7:a6:b1:
         cb:fe:b4:70:ac:06:67:81:67:76:f7:b4:48:21:f1:f9:07:12:
         8f:0c:f3:08:4f:fe:a7:37:eb:0e:bd:23:e4:c0:e7:bd:ed:96:
         39:b8:10:93:40:a9:96:7f:10:90:aa:77:54:01:89:c2:c6:b1:
         84:ff:fd:d5:d6:03:6c:e8:20:d6:f1:7a:7c:4c:59:b0:f7:a6:
         c8:05:ca:bb:e9:18:09:f7:db:b9:9f:f6:05:8d:80:4a:82:0e:
         8b:40:cd:67:47:40:c5:26:95:7a:0c:1b:7f:31:95:06:22:58:
         46:cc:2c:e6:4f:85:c6:93:37:39:15:0c:51:eb:94:4e:85:bf:
         4d:b8:ac:f4:70:81:fa:6d:88:04:5d:97:b9:6e:6a:be:80:4e:
         ad:90:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:19 2025 by rpki-client