Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38cf15b1-5631-341f-9de8-f682898845a9.roa
File:                     38cf15b1-5631-341f-9de8-f682898845a9.roa (raw, json)
Hash identifier:          Yv4GV2IOKw6XA+leypbETaMTIyh40BmlrUfZTU/usgQ=
Subject key identifier:   90:88:37:20:B4:50:C0:79:24:44:E2:D7:EE:23:AA:2D:33:26:91:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840273F19788DD62192615D4A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38cf15b1-5631-341f-9de8-f682898845a9.roa
Signing time:             Tue 06 Dec 2022 12:00:00 +0000
ROA not before:           Tue 06 Dec 2022 12:00:00 +0000
ROA not after:            Wed 11 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        170.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:27:3f:19:78:8d:d6:21:92:61:5d:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  6 12:00:00 2022 GMT
            Not After : Jan 11 05:00:00 2023 GMT
        Subject: CN=2222e494-7e0d-40cf-8616-4fd095e18e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:88:05:28:1d:d3:b4:fe:77:92:13:0a:34:2a:
                    5e:b8:30:66:34:9a:2b:a8:8e:1e:ba:42:c5:24:fd:
                    15:ad:4b:c5:cf:6f:14:96:24:b2:9f:04:1a:3d:c2:
                    fa:4a:80:1c:c2:8e:3d:e2:89:dc:58:16:80:db:59:
                    d5:46:80:24:41:23:51:bf:60:e9:e5:55:93:db:20:
                    83:5f:5f:73:36:d6:df:97:ed:df:ba:f2:3c:de:9b:
                    bb:e7:55:78:62:da:cc:93:b3:60:bf:19:8e:2f:65:
                    c3:43:ad:15:2f:81:d6:8a:f4:dd:e1:ea:0a:3c:a3:
                    11:1d:2a:b9:30:ce:91:cb:ba:cc:3b:01:11:35:af:
                    3e:15:59:b5:de:6d:82:5a:be:6f:d6:b3:c0:e7:12:
                    fc:7a:11:0e:a0:db:b4:86:da:f9:14:8f:51:34:2e:
                    ad:db:fc:bc:41:0b:51:d9:94:1b:b5:88:2d:48:08:
                    36:63:20:5f:6f:11:60:36:cf:42:42:97:81:f8:fa:
                    f6:94:69:c4:86:d8:00:1b:9c:a7:46:79:57:78:04:
                    0b:3c:16:a5:1a:5c:20:44:cb:07:84:cf:53:bd:11:
                    0c:20:76:14:d2:43:0b:3e:72:6d:5c:52:59:68:31:
                    39:bf:33:af:5c:a6:46:8a:a5:f1:a0:f3:5b:b7:3b:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:37:20:B4:50:C0:79:24:44:E2:D7:EE:23:AA:2D:33:26:91:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38cf15b1-5631-341f-9de8-f682898845a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:20:5c:8c:75:0a:51:55:73:20:d6:74:f6:1a:f8:33:68:92:
         22:95:8f:4c:19:a2:9c:af:cc:37:56:a3:ea:ed:71:d1:56:7a:
         6f:cb:9e:b6:b8:c8:32:fa:db:ab:a7:d3:21:83:d1:b6:78:59:
         62:08:55:0c:7e:8a:1a:89:6d:b1:35:77:f1:18:04:48:dd:93:
         5d:bc:26:6b:d1:a5:b4:36:e3:f6:b5:12:78:ba:18:87:8d:08:
         16:55:4a:6d:32:09:2c:2c:96:ad:54:82:87:d2:86:42:42:01:
         af:a6:0c:e7:39:f3:6d:26:a9:75:5a:55:e9:90:50:88:61:6a:
         d5:4b:bc:7a:35:68:de:79:09:ec:9f:20:a4:87:e1:0c:68:b2:
         11:31:6f:3d:0b:a8:27:29:d0:f5:ed:49:6d:13:f8:5a:62:4d:
         02:3c:00:5a:74:da:3c:f8:04:4d:e9:25:0b:f2:6c:16:27:75:
         0f:0f:1e:30:d8:20:1e:9e:fb:c4:b4:ed:35:d1:cc:45:f6:17:
         18:53:5c:8e:a4:39:e1:71:d0:73:ac:48:92:64:e7:e8:88:8e:
         c9:89:20:5d:f1:66:85:25:fa:83:d2:e2:bd:99:e8:a5:a5:75:
         06:e5:19:fb:d7:23:63:f5:22:27:1a:c2:95:b5:d3:47:cf:77:
         43:3c:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:29 2025 by rpki-client