Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38469bfa-52dc-321e-8568-593cc70dff87.roa
File:                     38469bfa-52dc-321e-8568-593cc70dff87.roa (raw, json)
Hash identifier:          OfHFUDc76KkY86beUfNLAFTZ7Udlnr7uWrZ0g5cRHx8=
Subject key identifier:   B3:5A:08:16:A1:CD:58:18:8A:08:AC:D8:31:1A:69:7E:F3:E7:3C:BD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8324E70D31FC24E689B936C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38469bfa-52dc-321e-8568-593cc70dff87.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.219.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:24:e7:0d:31:fc:24:e6:89:b9:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=3e99f6af-6cdf-4297-b303-299d87f44166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:d1:b3:81:13:7b:a3:84:df:02:0b:c4:b8:
                    a3:2c:7a:3f:1c:10:67:2a:a1:26:bf:d8:2b:6d:81:
                    33:14:66:fe:af:7a:0d:7d:34:7c:dc:7c:d0:a4:f3:
                    b0:60:0f:83:ab:f3:11:14:20:f2:e7:55:ee:48:78:
                    65:8a:bf:79:d1:99:30:3f:e1:b2:d8:43:fd:da:33:
                    f8:5e:6f:3e:ac:64:93:8f:73:db:dd:90:cb:09:68:
                    f9:35:94:ad:0c:76:d1:99:e9:04:82:dc:cc:d9:42:
                    37:a5:c1:0c:1a:9a:f2:43:de:bd:d0:3f:10:45:22:
                    6e:4f:17:e1:db:6e:4f:47:35:34:37:45:46:cd:79:
                    81:c3:7a:df:02:a5:42:b2:fd:2c:6d:eb:5e:e1:5e:
                    7e:93:3d:69:8f:fc:19:22:f4:20:4c:9e:6c:57:ff:
                    db:f2:a2:cc:fa:71:81:f1:e3:32:60:40:87:3e:95:
                    31:f6:2a:e1:67:d6:98:a0:0d:fd:ee:87:48:a2:80:
                    b3:70:3e:3c:c6:66:a3:82:a2:ed:bc:d2:29:4c:a9:
                    72:64:0a:a8:10:d1:65:bd:f0:e5:e1:f2:6d:5f:08:
                    e6:53:24:a4:86:e3:9e:8e:c3:fe:f6:7a:73:c3:17:
                    0a:0d:1f:61:1c:e7:af:35:c2:ef:80:2d:fd:82:ff:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:08:16:A1:CD:58:18:8A:08:AC:D8:31:1A:69:7E:F3:E7:3C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38469bfa-52dc-321e-8568-593cc70dff87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:f3:f5:ac:94:02:aa:fd:3e:fe:dc:f8:bc:8e:1f:d5:96:
         42:40:1f:98:ec:68:28:8e:a2:68:18:d3:81:55:1f:fb:88:fc:
         85:62:c6:67:9f:e8:27:42:fc:02:81:02:64:b1:0e:41:32:b4:
         56:27:7e:a6:63:67:b8:3b:db:0a:35:3a:db:e3:3b:af:da:9e:
         d5:a2:bf:37:37:69:e8:7d:bd:40:9e:49:c0:6c:79:ce:8a:74:
         69:8a:2f:1a:8e:e1:10:fc:f4:cc:a6:4d:94:19:7f:91:c5:ec:
         dc:6a:9a:eb:08:53:70:a1:69:6e:2a:c1:ff:ee:96:05:2a:ac:
         65:d5:1d:61:98:57:c1:6c:e6:52:1c:34:c6:88:87:48:c0:07:
         d8:47:56:52:4a:60:a4:06:4b:c0:ba:bc:4f:1c:a0:a3:df:ca:
         50:58:28:bd:11:c5:18:11:62:b7:4a:d6:47:9b:19:f6:c7:ea:
         c9:b2:24:d0:12:68:ed:fd:55:44:ed:5b:c8:94:29:54:ee:b8:
         7f:8b:8f:8d:4c:c3:ba:a4:e5:10:8b:c0:c0:ae:a5:5c:f4:af:
         f6:b5:12:af:c5:02:73:e8:1f:b5:05:1f:be:a5:15:85:2c:80:
         81:1c:19:76:f0:cc:d5:80:f9:1d:6a:c3:b8:d6:be:7a:7a:20:
         97:15:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:56 2025 by rpki-client