Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37867927-767c-3ab8-bd1a-80653c1d7fb4.roa
File:                     37867927-767c-3ab8-bd1a-80653c1d7fb4.roa (raw, json)
Hash identifier:          o8OU2kbZWaGhGk2eTK4OlJOnypISsRcAXxzQtfrrOKE=
Subject key identifier:   35:42:96:89:FB:D0:7B:AC:A1:BB:BE:2F:27:FE:B5:90:F8:F3:39:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584025020F5056EB7CE2E11CAD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37867927-767c-3ab8-bd1a-80653c1d7fb4.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.154.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:25:02:0f:50:56:eb:7c:e2:e1:1c:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=77550730-247f-4732-9c6f-4e3943ef354c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:18:34:d2:57:e2:72:88:61:4e:e2:43:6e:
                    f4:f3:4c:64:fd:fd:14:7d:48:7e:3f:77:d2:54:74:
                    cf:2c:d6:b5:6b:37:af:61:8a:d9:05:8e:20:d6:7a:
                    16:45:41:c9:9b:16:b0:7b:14:d6:d0:71:08:e8:19:
                    89:f0:45:8e:81:e9:ad:56:87:ec:59:69:3c:d5:6d:
                    9d:84:42:24:10:0e:e7:42:3c:58:c8:20:20:0d:69:
                    8a:65:22:26:5c:bb:d9:e7:eb:ea:33:0d:59:30:09:
                    45:af:79:bd:59:ff:2b:29:ea:c3:d9:cd:94:0d:76:
                    17:43:98:07:b0:fd:a5:8c:fe:a6:85:2c:ad:fd:ab:
                    be:de:5e:cc:ce:f8:ff:fa:f9:1a:bc:9b:da:f4:29:
                    61:21:ed:78:bf:9e:97:98:8d:56:3d:2a:ef:7c:9d:
                    a0:a3:0d:c2:16:45:c7:a0:ab:54:bd:98:7e:0f:53:
                    e1:93:63:a9:49:e3:9a:3a:e2:0b:2f:c6:f9:4a:4a:
                    b2:0c:1a:ec:48:82:35:cb:6d:1d:2b:66:4f:7e:62:
                    ef:80:bf:9b:52:30:78:86:a8:ac:45:e4:b3:72:63:
                    8d:53:e2:96:56:8e:e1:7c:e3:3e:17:4e:91:49:cb:
                    a0:79:3f:40:6c:04:e3:6d:37:3e:21:92:3a:50:c4:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:96:89:FB:D0:7B:AC:A1:BB:BE:2F:27:FE:B5:90:F8:F3:39:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37867927-767c-3ab8-bd1a-80653c1d7fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:04:32:16:d4:dd:9e:34:5a:33:28:35:21:5c:31:b0:4f:
         67:1d:11:fd:bc:a8:29:6c:69:b0:91:05:6b:8c:3e:09:c6:7b:
         6c:d3:94:28:01:97:1a:a6:03:d9:b7:e4:14:c8:1f:b5:05:53:
         4a:d8:0e:9e:5a:a4:89:a9:87:4c:be:10:c7:06:64:82:a9:ab:
         0f:27:f9:ea:5b:04:73:da:ef:7f:e5:6c:21:d9:63:f7:a3:65:
         52:90:ab:ca:36:d3:2d:40:10:67:bd:9c:19:db:13:03:b8:69:
         db:75:b9:44:df:88:43:0a:2b:1d:a7:dd:97:66:9e:f0:8f:b9:
         3a:78:95:4c:7c:40:1b:45:d8:62:8b:3e:18:a6:ff:3b:0c:86:
         61:37:09:a8:08:ef:43:7c:36:25:64:ef:82:80:8c:82:a5:3c:
         44:ea:be:68:77:55:36:50:56:ef:3b:a5:05:fa:90:fa:3d:6a:
         d9:b3:f2:83:b4:1c:84:0e:1b:b5:ef:7c:ed:87:05:1b:9f:3c:
         ab:15:85:82:0c:45:92:1a:d1:63:e9:e4:27:11:e4:e5:2f:d3:
         bf:97:ee:da:cd:b6:60:d4:c7:cf:4f:83:47:82:a6:bb:f2:a9:
         f1:8f:30:84:84:03:53:72:b5:8a:a5:70:51:2e:c9:82:a4:2b:
         9d:d1:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:51 2025 by rpki-client