Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd96f56-7f16-32bf-b94e-a3b9d529668d.roa
File:                     3bd96f56-7f16-32bf-b94e-a3b9d529668d.roa (raw, json)
Hash identifier:          Nwde3Ll9hSCFFq5pmKrJiKZGysgJVs5vz3eGpFvCAsc=
Subject key identifier:   FA:75:7C:D6:6E:F2:90:BF:D3:29:82:48:5F:19:25:09:8E:82:05:7A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA21627A8595E10933353C480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd96f56-7f16-32bf-b94e-a3b9d529668d.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.71.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a2:16:27:a8:59:5e:10:93:33:53:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=0770bd43-3cc5-463b-a295-3b33a0685d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:84:c3:6e:73:27:5a:4f:ba:5c:92:35:31:
                    37:c0:ce:6b:54:fa:5b:ad:9a:59:b4:a0:91:86:1f:
                    d3:ae:4b:b5:07:fe:96:4d:34:67:57:91:37:11:17:
                    20:51:71:b0:5e:17:55:66:1e:7d:1a:79:e3:75:57:
                    15:68:fe:b9:e3:da:65:b9:63:09:f9:46:43:8d:46:
                    26:04:38:24:40:43:c6:5a:45:fd:49:c4:cb:29:4e:
                    0a:94:c9:6e:92:56:66:fa:ab:a7:e0:54:49:7f:4f:
                    c1:6c:a5:36:d0:23:ec:3f:53:3f:57:fa:6b:77:62:
                    19:06:2d:45:e9:a3:67:f3:55:c9:bc:29:fa:dd:b4:
                    91:66:f0:79:e1:7f:14:ad:1b:91:40:1f:cb:1a:66:
                    fd:b9:1b:4b:04:9a:06:fb:57:db:eb:87:da:a0:bd:
                    42:e3:0c:a8:5c:65:89:6e:be:e0:cd:50:f9:fd:33:
                    d4:22:1a:37:f9:64:72:39:07:4b:a3:f9:3e:3a:02:
                    54:ee:45:9e:7e:70:4e:cd:0f:fd:7e:23:25:1f:fc:
                    b0:67:57:ca:b5:9c:2e:9d:05:cc:e0:88:14:4f:61:
                    06:a1:a4:d6:39:fc:79:71:69:2b:cf:44:94:26:cc:
                    7b:43:f8:2b:e5:98:47:94:1e:b2:d4:35:8f:e0:76:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:75:7C:D6:6E:F2:90:BF:D3:29:82:48:5F:19:25:09:8E:82:05:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bd96f56-7f16-32bf-b94e-a3b9d529668d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:74:ba:86:2a:b6:5d:1a:68:06:aa:f2:c5:d1:3d:03:9e:96:
         9c:d2:c1:b2:b6:98:e4:bf:8f:a4:d9:84:59:f8:4b:f8:8d:ff:
         53:ad:f9:ad:c5:0d:32:96:7b:d5:a2:71:75:25:7e:08:58:40:
         a9:01:7f:69:6c:5f:8a:e8:cc:a0:f0:6c:5a:48:0b:28:30:2e:
         c2:37:70:d4:2a:59:47:9d:56:f6:a1:35:2b:55:be:59:37:d9:
         dd:7e:e4:71:f6:29:29:13:03:12:06:cc:f3:8a:a5:fc:06:74:
         a6:8f:e4:ec:e7:b8:f2:0a:2b:05:4d:80:f9:d1:2b:a3:b6:84:
         45:03:d8:22:15:66:77:4e:d5:9e:c0:d1:e0:35:35:8a:f2:5b:
         27:ce:5d:08:30:01:a1:51:53:b8:9f:ea:04:26:a1:79:5e:07:
         41:45:04:d4:f0:53:f7:85:12:62:8c:05:b1:ad:3b:f8:9d:ac:
         b1:1e:c4:39:ce:0d:8e:bf:05:ed:cd:90:69:a9:fd:cb:a9:ac:
         97:11:84:df:a0:88:c6:08:6e:a0:85:48:51:56:68:9c:a8:d5:
         71:13:08:b3:a5:f7:75:46:84:25:80:5d:de:8e:d5:62:98:0f:
         e8:b6:f4:45:a5:6a:84:59:d5:2b:34:e8:e7:6b:a2:97:d5:64:
         f4:c0:0d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:37:57 2025 by rpki-client