Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/373bc66f-ab08-3a3f-9d5c-a8c624c7cac5.roa
File:                     373bc66f-ab08-3a3f-9d5c-a8c624c7cac5.roa (raw, json)
Hash identifier:          GUF6weNDFcR0qJj6fdHA2kJL1W0hwj44ogr4LLR1dyQ=
Subject key identifier:   68:96:2B:78:BE:39:3A:14:1D:FF:CD:14:E5:CB:11:EB:A9:99:FF:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401F472567626200939BC9AB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/373bc66f-ab08-3a3f-9d5c-a8c624c7cac5.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:47:25:67:62:62:00:93:9b:c9:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=1b30bcc9-2fea-4af8-b9b8-bcf43e960681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:ed:27:f8:b4:7e:75:c7:94:19:20:08:26:
                    4d:49:24:96:50:0a:df:fa:aa:b9:a5:52:80:3c:e4:
                    6a:79:cd:a9:06:2a:1b:ca:c3:00:e8:37:b5:f0:1b:
                    1f:26:41:6a:c1:3f:1c:bf:c2:24:61:70:8f:77:85:
                    82:0e:49:3a:03:30:7d:45:6f:40:3f:2b:dc:55:2c:
                    4f:82:1a:b9:bb:32:1e:4a:79:34:2b:0a:26:88:d8:
                    47:c2:7e:9a:f1:3c:af:dc:7d:e2:e2:38:db:48:58:
                    43:f6:de:03:39:02:05:f9:54:48:df:ad:b9:ef:4a:
                    0e:95:0c:19:5b:33:96:d1:ad:86:06:42:20:a0:37:
                    81:bc:68:c0:ff:51:a5:4e:d7:90:c4:44:65:d7:f3:
                    b4:16:1b:a8:cf:79:7c:ff:01:99:c7:f8:c2:84:9f:
                    79:02:40:28:a4:6d:14:7b:82:3d:c5:97:87:93:ac:
                    63:65:ae:34:85:9e:31:76:37:44:8a:c1:df:97:99:
                    ad:9a:f0:60:af:a9:26:65:de:c9:80:c4:fd:a6:fb:
                    d9:00:b6:6a:a0:ec:b8:8a:3c:24:53:dd:cf:9d:7e:
                    2e:2f:f4:c8:86:76:c4:60:b0:09:22:7f:2e:4f:b5:
                    04:63:9f:df:f1:f7:d6:40:dc:0f:79:e0:1d:5a:51:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:96:2B:78:BE:39:3A:14:1D:FF:CD:14:E5:CB:11:EB:A9:99:FF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/373bc66f-ab08-3a3f-9d5c-a8c624c7cac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:4d:a8:78:6d:b6:a5:ff:b9:f4:ae:50:76:52:c9:c7:66:
         d3:ac:36:46:b0:93:ab:4f:9b:9d:c5:dd:9c:f1:db:76:1d:9d:
         89:ed:7a:10:38:e8:b2:87:cd:1b:11:4f:df:3c:97:a0:5c:a1:
         9c:5d:e4:e4:06:f9:69:eb:6a:48:d3:c2:5c:ba:d6:37:13:21:
         3e:4f:ee:dc:ed:39:de:3c:4f:0b:09:6d:09:0a:34:88:ae:27:
         cd:a5:88:ff:55:a7:23:48:3c:71:79:fc:95:12:dc:c0:d2:de:
         c6:e2:17:e0:f6:72:af:99:e3:1b:8d:a8:4d:39:d7:90:d5:5c:
         6f:87:e0:8d:37:ff:a5:25:7a:bd:7d:2f:3c:bf:5a:bc:17:f1:
         0b:99:23:d6:e4:b6:65:48:92:a8:b7:58:14:0e:f2:63:79:b6:
         16:70:47:43:9f:52:19:3f:d0:dc:8a:d6:69:0f:71:0f:3f:eb:
         9c:f8:24:80:47:6c:dd:e4:3b:3f:88:98:02:e4:9d:13:a1:ee:
         54:93:61:61:cc:c7:17:cd:30:33:cc:6c:e0:8a:8c:78:2d:3e:
         a4:f1:24:4a:87:d9:d9:ae:57:7e:45:06:b8:2d:5a:c3:29:d5:
         d0:bd:71:c4:12:fa:c6:99:7d:46:6a:ec:7a:da:73:8c:8d:b5:
         28:86:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:05 2025 by rpki-client