Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e9bccd-70de-3491-89dc-e22121b4d21d.roa
File:                     38e9bccd-70de-3491-89dc-e22121b4d21d.roa (raw, json)
Hash identifier:          kQdZ+XM9KfjBCb9b1bYtwQmftiaiAtX2jIRKURsKcao=
Subject key identifier:   24:25:04:DA:C2:F8:29:DA:9F:1F:B9:72:93:4F:CA:77:CA:83:A9:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6E914369869A734849DFA100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e9bccd-70de-3491-89dc-e22121b4d21d.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:91:43:69:86:9a:73:48:49:df:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=9b5d4976-046b-406e-be7f-bd44db4e4d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:cd:44:8b:da:d8:5e:ab:ea:9f:51:d4:80:
                    46:45:72:1d:35:77:7b:66:12:9e:30:86:c4:74:5a:
                    51:ca:17:c3:08:59:6f:49:46:55:66:37:78:27:1c:
                    0a:4d:02:2e:1c:f1:71:02:62:40:3d:cd:b0:50:e8:
                    a2:11:26:41:0b:02:14:13:91:70:0f:79:c8:b4:39:
                    51:ff:99:2a:7f:70:df:be:94:24:07:56:39:67:19:
                    63:99:b2:c0:a4:a1:9e:e3:a2:6a:bb:79:9e:2e:70:
                    33:91:a8:ae:78:b3:81:b2:4a:c3:f8:05:0b:0c:65:
                    04:b4:89:b6:d5:9d:1e:d5:ca:8a:07:da:d7:0d:b1:
                    6b:cb:3a:e0:23:bf:ee:69:d3:31:9f:79:65:19:1b:
                    ca:7e:8f:fe:56:55:37:04:e1:a9:1f:36:7f:98:4c:
                    cc:7f:a2:c7:17:2c:b0:4a:c4:28:f6:7f:7a:f2:65:
                    5c:9d:db:fb:ed:68:c2:38:9d:53:dd:ad:d7:72:9b:
                    1b:6f:5f:ae:6d:c3:12:d8:34:bb:e9:79:2e:66:82:
                    7e:f2:37:24:c0:63:c5:7c:e4:7f:dc:a6:d2:02:2e:
                    0d:c0:40:a2:3a:17:af:01:2b:62:1b:96:0e:28:bf:
                    d2:95:4f:cc:26:87:f3:96:08:c6:de:98:67:4d:9e:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:04:DA:C2:F8:29:DA:9F:1F:B9:72:93:4F:CA:77:CA:83:A9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e9bccd-70de-3491-89dc-e22121b4d21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:93:ea:a4:d9:b2:a1:ac:ca:54:4b:6d:0c:13:30:c3:7f:
         43:e1:5c:9d:30:5a:64:2b:4b:5d:68:e9:06:e2:90:24:8c:81:
         e2:59:e1:de:38:2d:fc:ba:90:e3:f1:c1:94:b4:aa:68:89:9b:
         8a:d4:eb:b4:c2:32:be:96:00:f8:ff:b3:81:5d:e7:df:ea:f2:
         8e:37:e5:3a:2b:c2:b4:a8:3c:20:4b:91:85:d4:b2:14:f6:30:
         77:ab:a1:6b:53:00:57:d0:31:db:f5:5e:6a:89:71:9f:68:0e:
         de:ec:e9:b4:1a:cd:bc:5a:6b:a9:98:10:d3:da:45:93:cd:33:
         cc:24:5c:53:fa:fa:18:44:f5:25:5b:f7:71:29:74:a6:53:d3:
         13:a0:39:c8:37:df:7d:98:fa:c3:57:a1:ff:95:73:61:00:ea:
         18:45:32:43:4a:ec:26:e8:72:e7:32:c9:3c:39:08:55:45:fb:
         0c:63:4b:7f:3f:3f:1d:ed:df:f0:ba:43:01:6c:68:d5:3b:37:
         bd:ea:29:e7:b8:d7:58:a2:3f:84:10:ba:0b:e1:a3:7b:b4:36:
         48:d4:40:05:e3:5c:26:b8:41:08:3f:40:1d:3a:66:71:44:09:
         06:5b:a2:2d:93:db:31:de:36:89:b4:b5:47:93:8d:b7:43:1d:
         51:f1:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:15 2025 by rpki-client