Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e351d13-5cb5-3ebc-bef4-a4edc84ecb7c.roa
File:                     3e351d13-5cb5-3ebc-bef4-a4edc84ecb7c.roa (raw, json)
Hash identifier:          /Tjh1MUq/cUAe1VqmPCflWrC7vMOW5A5spkAVW9q1ds=
Subject key identifier:   8E:31:16:57:FA:DB:C7:50:08:F4:DC:97:8E:7D:17:12:7C:8A:CC:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5BA70DC43F21755C69CA3900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e351d13-5cb5-3ebc-bef4-a4edc84ecb7c.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:a7:0d:c4:3f:21:75:5c:69:ca:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=4366fe7e-12b8-4b08-8834-15dbd0945499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:50:67:92:32:04:2e:02:65:a2:38:75:90:
                    77:44:24:4c:d7:18:99:89:17:ae:9f:cd:25:2c:7a:
                    51:0c:f9:0b:a2:1f:85:65:a3:92:8e:af:00:1c:a1:
                    f1:43:05:08:64:e4:90:89:22:53:0c:81:db:cc:46:
                    e8:cf:a6:fd:cf:d4:ef:f8:99:a4:5d:a1:c3:c2:a9:
                    0a:56:43:e0:da:6e:7f:8e:d7:76:83:87:83:db:48:
                    d2:f9:e0:ea:99:09:4e:7f:97:37:7d:6b:88:8e:f2:
                    dc:72:36:c1:45:6e:ad:dc:40:2d:c7:87:69:84:2e:
                    c4:98:ce:70:2d:a6:4f:86:20:2b:2d:da:00:a0:e0:
                    a3:5c:ff:dd:7c:39:b5:9c:6a:56:a4:a0:bc:cc:04:
                    c4:5a:38:ec:17:52:a7:f2:30:5b:f2:5d:3d:d3:30:
                    77:07:42:ff:a4:b5:e7:da:31:33:23:8d:48:04:a6:
                    6c:71:03:6f:e6:25:c2:11:8e:2c:6b:09:78:0d:af:
                    37:ff:9b:3e:93:cb:64:18:20:12:86:71:7d:74:f7:
                    00:ca:38:d6:c4:a4:19:1b:82:3f:d3:99:52:d4:3a:
                    23:5b:e3:24:b2:bd:58:af:38:e2:20:b7:c8:e7:73:
                    ea:3a:4a:4b:04:38:33:61:8a:8b:7a:8a:4d:cc:4b:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:16:57:FA:DB:C7:50:08:F4:DC:97:8E:7D:17:12:7C:8A:CC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e351d13-5cb5-3ebc-bef4-a4edc84ecb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:ff:fb:89:0d:bf:6b:8b:1e:71:cc:16:c3:fd:ad:e7:41:
         a7:4d:1f:0a:52:de:bd:6d:5b:c0:4d:d6:c2:27:26:88:8d:f5:
         da:8f:f1:86:3e:8d:9c:57:43:3a:f0:14:f7:9c:48:92:dc:44:
         26:bc:6f:4d:90:c0:52:ac:25:c6:1d:c7:13:4c:30:5a:1f:05:
         83:b2:21:9f:e0:00:27:79:c5:67:08:a1:56:40:4a:95:27:5e:
         eb:63:ac:85:43:bf:2f:c2:19:94:18:19:dc:31:cd:24:ff:a2:
         a0:2b:39:5a:f5:af:ab:c9:22:47:78:dc:73:0d:e5:ca:89:fa:
         00:b6:4b:05:63:0a:37:28:cf:67:64:92:cd:27:40:91:10:c6:
         e5:76:26:ab:32:9a:f8:57:a8:8e:47:fb:7a:d5:de:12:e5:af:
         e5:46:0e:26:3d:50:57:d6:1f:e3:e1:68:20:0f:d3:37:da:de:
         03:59:c1:92:f8:16:3b:c3:e8:8c:36:c1:11:ce:3e:dc:42:80:
         d4:38:0a:01:42:c7:6f:ab:8a:aa:49:48:84:8f:0c:02:b9:91:
         ff:53:12:90:0d:ff:ed:e0:65:76:57:da:e4:ca:26:d9:ef:a7:
         4d:30:d5:30:b4:23:79:0c:28:d8:e4:73:5d:3c:ed:26:4b:b6:
         dd:4e:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:52:19 2025 by rpki-client