Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3df115de-37eb-307c-ab58-a505ec3370de.roa
File:                     3df115de-37eb-307c-ab58-a505ec3370de.roa (raw, json)
Hash identifier:          EMOza1wV3ufF+ALYKUhGcVvo5CtLULIhtu3hVe051SA=
Subject key identifier:   45:9D:A4:EC:81:95:08:C4:3E:FF:7D:85:5B:19:02:C1:92:0C:15:CB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F04D923187C40994E2ADA2880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3df115de-37eb-307c-ab58-a505ec3370de.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.121.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:04:d9:23:18:7c:40:99:4e:2a:da:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=865584cf-c9e6-4bf8-95b4-7fc3c8c5c111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:57:e8:24:2f:6f:76:be:57:6e:ed:86:e7:d6:
                    c0:c2:6c:3f:26:fd:ff:81:bd:10:ef:c3:54:5f:cd:
                    14:28:ff:ad:cd:e6:44:00:fc:f6:06:3f:60:23:e2:
                    d5:69:ba:11:13:32:56:cf:a9:1e:b4:4b:d6:ab:df:
                    c2:eb:d9:f3:40:15:b1:9c:1f:51:d8:da:4a:93:97:
                    a8:6f:48:77:56:b2:79:42:80:f4:a0:25:f0:76:0e:
                    5c:f9:b7:4d:69:43:de:23:55:83:56:e4:15:38:88:
                    f2:a3:2f:f2:d8:d5:ef:25:3c:24:a0:d2:0a:3a:23:
                    18:ae:1a:1b:ff:76:7b:3c:30:29:8c:4e:40:bc:2b:
                    d1:42:39:9b:d0:f1:ca:09:55:ae:1d:c1:ba:9b:31:
                    e9:92:7d:00:69:13:97:62:82:39:14:70:d8:10:ac:
                    27:5f:42:60:34:85:f7:11:9e:43:4b:3d:57:2c:02:
                    d1:46:86:14:8e:f1:5f:46:52:9b:8d:4d:32:cd:70:
                    6b:e3:f3:e0:85:f4:b4:5d:38:e1:9c:8b:b5:40:b0:
                    2e:8e:f0:7c:eb:b8:89:eb:b2:fb:df:8b:19:f2:f3:
                    0e:db:96:a2:f8:6a:ad:7c:a7:98:6b:a0:93:f4:86:
                    ea:ab:90:2b:84:b8:dd:bc:2f:4d:da:8e:95:2b:1f:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9D:A4:EC:81:95:08:C4:3E:FF:7D:85:5B:19:02:C1:92:0C:15:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3df115de-37eb-307c-ab58-a505ec3370de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:8c:3d:9d:f4:be:c4:13:99:d8:fa:2b:46:7f:76:56:3e:
         5f:76:7b:b9:7d:ee:88:57:63:f4:6a:ba:33:5c:bb:41:7f:bd:
         ea:88:46:97:8d:36:f2:84:a4:f5:46:ef:fa:6c:35:84:10:01:
         96:7b:16:6c:71:eb:03:1e:e8:fa:15:d2:33:3b:da:d9:9e:8c:
         c2:59:d1:0c:99:84:7b:78:bb:4c:f9:6a:3a:cd:d6:5f:d5:aa:
         d9:dd:66:0b:ce:5a:66:23:d0:50:c9:55:29:2d:9c:73:8d:c1:
         a5:99:b4:23:72:ce:fc:c4:7e:c9:6d:5a:25:89:bd:26:00:89:
         d4:d9:48:9e:72:f8:b9:e9:21:6c:59:e1:c8:a6:6b:7e:0c:f8:
         56:8e:64:cb:75:5e:2f:b3:27:25:ff:fa:1e:3b:87:86:b2:3c:
         70:5c:79:4c:65:59:fe:32:e9:77:e7:b1:df:d4:d8:43:00:8f:
         a1:73:35:5c:a0:af:d4:03:65:0b:55:3f:9f:6b:83:fb:60:b4:
         2f:85:18:af:3c:2d:e7:2f:92:22:82:e8:8e:3b:43:9d:07:eb:
         71:48:12:af:f8:33:0b:3a:37:93:7a:b6:72:55:40:fa:54:ad:
         27:9c:74:7b:22:d7:8a:13:69:fb:12:ff:9d:d5:78:8c:16:07:
         44:e4:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:53 2025 by rpki-client