Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39684b18-8081-3d15-ab08-f902aa567087.roa
File:                     39684b18-8081-3d15-ab08-f902aa567087.roa (raw, json)
Hash identifier:          iz4eqTzhkKrEC294u0hnMSgGTJTaN+zh0Q8nunPwybY=
Subject key identifier:   86:64:C1:0E:3A:AB:A9:C2:44:9F:80:22:69:29:CC:AE:BC:13:22:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE6BEC283540986721469FF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39684b18-8081-3d15-ab08-f902aa567087.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.176.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e6:be:c2:83:54:09:86:72:14:69:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=a2267e17-a62f-45da-96a6-66de2292ddce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:b5:2d:46:fb:dc:3a:ba:70:9c:16:9c:84:
                    e2:47:1f:95:5f:85:4f:d8:3d:eb:bd:e4:5c:11:8c:
                    8d:34:54:33:46:54:9f:02:9f:ab:0e:6a:c9:70:2e:
                    d5:e7:39:c3:0e:9f:75:da:15:4b:df:9f:15:5e:26:
                    96:d9:1e:c0:f0:43:2e:30:6a:b7:22:10:20:b3:29:
                    1a:f6:d7:b5:df:bd:0d:6c:bf:c6:69:ba:e6:88:90:
                    2c:3e:c1:19:fd:a8:8a:5b:e6:e4:34:8f:2d:6e:5a:
                    b9:0e:b2:91:7b:bb:5a:8c:21:ab:82:9e:da:db:0f:
                    35:71:9d:9c:da:5e:02:70:44:60:79:0a:95:ca:8d:
                    29:b3:8b:7e:1a:f4:6f:4a:05:d4:1a:4f:27:63:72:
                    bf:d1:e9:ad:4b:a4:8b:26:5b:fc:f7:e4:61:36:ea:
                    ec:af:ab:52:cb:be:91:41:62:ab:14:0c:6c:a3:b8:
                    3d:15:64:38:e1:6e:9b:7c:b5:01:ba:0c:53:07:af:
                    29:57:79:6b:02:4e:8f:1f:73:7f:d1:45:2c:38:19:
                    65:32:f7:8b:73:90:fd:a9:8f:dc:ca:dc:20:95:54:
                    f8:6e:5d:9c:de:54:28:f9:03:90:0e:46:50:76:ef:
                    81:86:b7:2a:ac:eb:b2:5d:62:b8:85:49:bd:b8:53:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:C1:0E:3A:AB:A9:C2:44:9F:80:22:69:29:CC:AE:BC:13:22:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39684b18-8081-3d15-ab08-f902aa567087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:da:8b:2a:7d:bc:73:d8:82:12:77:1a:ab:6c:83:ca:0d:e4:
         63:2e:10:94:bc:fd:20:bc:81:f9:ae:50:fc:00:c2:5d:60:bd:
         78:c5:21:4b:07:83:7b:38:de:c3:2a:d0:88:0e:36:bf:c9:48:
         a7:c7:12:6d:d3:9c:c7:c3:e0:34:03:6b:9f:2e:4a:47:23:b2:
         53:1a:5f:e6:da:59:35:5e:77:e4:11:7b:ca:2c:b3:1d:f7:9d:
         1a:f1:6c:39:a4:99:b0:3c:4f:9b:28:c8:a0:b6:58:c9:cd:8d:
         d0:24:3e:93:ae:eb:8f:45:44:79:2f:57:14:42:37:a2:2f:bb:
         53:e4:bd:b8:a7:1d:d2:cb:77:6b:68:fa:72:4a:91:79:ce:13:
         6d:d0:86:a3:0e:2b:ba:58:9d:f3:0e:e7:5a:26:81:e5:95:4a:
         db:f3:9c:56:69:51:82:8d:69:19:83:55:6e:47:af:2f:44:de:
         28:d2:f2:08:6f:39:2c:c6:56:8c:05:f5:5e:f4:82:cb:10:ce:
         8a:77:11:4a:f7:66:24:a1:17:af:3e:03:65:17:e9:56:76:b5:
         19:af:2a:cb:a4:99:d0:92:63:ee:0f:fa:e7:fe:de:df:d3:83:
         8d:44:37:df:2b:ea:bf:8e:af:a0:1b:c1:20:51:3e:26:f2:bc:
         3b:03:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:30 2025 by rpki-client