Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35ad4c1f-4e82-3be5-bd2b-f74ad1beb37b.roa
File:                     35ad4c1f-4e82-3be5-bd2b-f74ad1beb37b.roa (raw, json)
Hash identifier:          YrpCpO2G1t/pmpFSYCPbs4eAcLaFwkR9grZJe5uInpk=
Subject key identifier:   63:8F:01:42:55:30:06:79:28:5F:09:97:43:F9:54:52:4F:40:BF:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F54442EB9BFBAC3D2497154F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35ad4c1f-4e82-3be5-bd2b-f74ad1beb37b.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:44:2e:b9:bf:ba:c3:d2:49:71:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=8a358993-5132-461f-9a06-30e64dc224dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:b1:5a:7e:34:e2:46:60:cd:03:99:fb:b8:
                    d1:ba:93:9f:25:79:d5:55:b8:98:49:95:87:e2:f2:
                    7f:32:d8:c2:60:64:84:34:9d:74:b8:20:7a:9f:61:
                    09:e5:c4:45:a0:d9:dc:36:ed:ee:a0:a2:f8:43:e7:
                    35:46:49:0a:1f:db:fb:9a:2e:24:35:4d:39:48:17:
                    2f:63:e6:51:01:85:f7:11:0a:e5:e3:af:06:ed:e3:
                    38:02:91:79:88:25:26:a1:1f:43:f4:a9:7c:98:55:
                    18:27:46:04:40:f2:35:8a:d2:c8:17:e8:87:e3:d2:
                    05:08:a7:65:f0:df:a4:29:e4:0b:21:8f:81:71:4b:
                    3a:86:1b:ec:46:12:9e:99:de:5d:ec:58:5b:ec:29:
                    db:1d:bd:9c:6c:1a:4c:31:77:eb:22:3b:75:b0:f3:
                    85:80:b8:ef:85:ca:80:7d:5a:38:24:da:f9:da:1d:
                    96:ea:de:d5:3f:4b:5d:d2:fd:53:c2:31:d2:0e:8d:
                    d1:93:03:ef:3b:b1:49:f0:c8:53:50:60:ba:6f:40:
                    2e:ab:dd:e6:4f:9e:87:fc:0f:dd:b5:f0:ee:48:2f:
                    cd:75:be:29:53:9d:1b:44:87:03:54:95:f1:91:9a:
                    c9:06:16:9a:5e:4c:c1:97:25:c4:70:af:22:8c:67:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:01:42:55:30:06:79:28:5F:09:97:43:F9:54:52:4F:40:BF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35ad4c1f-4e82-3be5-bd2b-f74ad1beb37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:ed:fb:42:59:12:12:31:f6:80:d1:f7:e7:00:5e:24:2b:
         c4:84:b8:2d:c0:9c:40:41:1e:63:03:34:0f:16:de:53:d1:dd:
         02:39:eb:f3:3e:c8:f8:53:58:63:66:9d:85:05:77:6a:f4:fd:
         18:bb:4f:91:56:b5:d3:d6:54:b1:58:c7:64:e7:89:6d:a8:c1:
         38:b6:6c:d2:6c:dc:bb:a2:75:0f:c2:ae:aa:21:da:fc:dc:ae:
         41:cb:38:22:af:45:ce:41:0f:56:ab:d1:7d:17:4f:2d:21:37:
         73:33:c6:68:76:3c:d0:07:09:82:75:be:e2:16:85:c5:74:52:
         40:fe:99:0e:86:78:78:b6:ca:1a:43:a4:9b:00:37:5c:5f:d8:
         5d:9a:e0:c7:27:8f:0f:c2:41:9e:9b:9e:42:db:46:dc:4b:97:
         db:cd:dd:10:3c:75:ad:9f:d5:f8:14:d5:88:6b:aa:2f:f2:fb:
         1a:bc:0e:de:8b:93:41:cf:6d:a1:ca:36:20:ce:df:26:8b:be:
         77:a7:22:64:82:ac:b5:c8:33:fc:4b:1c:43:69:32:4c:7a:49:
         11:e9:1d:ae:05:29:29:33:eb:b5:57:a8:c7:27:a2:7a:d5:05:
         75:51:5f:bd:85:b5:72:42:7b:97:96:f5:4e:1a:52:73:32:9d:
         d0:fd:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:24:49 2025 by rpki-client