Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e553676-cc10-3f3b-b9dc-49c8dd21b359.roa
File:                     3e553676-cc10-3f3b-b9dc-49c8dd21b359.roa (raw, json)
Hash identifier:          MeG3qSZC/hNQL/wM7gU9IlnwWZ/7fSf+LtZ2o7A8ypM=
Subject key identifier:   3D:F3:9F:38:8C:82:6C:86:4B:C1:E3:B8:E4:AD:B0:53:D7:BE:42:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E49AF4AEAC142FDAEA9762500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e553676-cc10-3f3b-b9dc-49c8dd21b359.roa
Signing time:             Sat 18 Jun 2022 12:00:00 +0000
ROA not before:           Sat 18 Jun 2022 12:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.219.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:49:af:4a:ea:c1:42:fd:ae:a9:76:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 18 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=5495c236-a234-4f76-83b4-0e2d221edcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:7b:92:6b:eb:12:ea:1c:49:cc:b2:ac:f0:
                    1c:23:f0:e5:4b:5e:ed:7b:77:34:94:d1:f1:2e:28:
                    95:07:27:7e:07:0f:b6:a6:75:10:c2:d2:2d:c9:63:
                    15:84:d8:f9:2a:4b:2c:f2:7b:61:89:4e:80:51:9b:
                    2d:93:a0:43:e9:a5:76:7f:f2:ff:06:00:12:2a:c0:
                    f1:ae:80:63:51:a0:94:65:34:de:f3:f1:ad:85:4f:
                    ed:fc:11:51:0b:11:c5:70:90:65:47:8c:df:c5:16:
                    a8:f2:1f:65:c3:91:58:05:8d:ca:b7:d3:4c:ee:d6:
                    3e:7d:2f:b0:06:61:e5:78:58:ab:cf:69:2f:14:a0:
                    94:5d:a8:36:af:9c:59:30:f4:b2:20:d8:48:07:55:
                    5d:24:a7:f3:f6:e3:0e:38:da:68:1a:be:6f:22:22:
                    32:56:b7:b4:72:f9:fb:85:06:12:72:99:10:24:61:
                    41:6e:fe:10:fe:f5:e1:9c:1f:51:42:a0:a1:95:d4:
                    9e:c9:f2:ed:cd:ff:03:a8:52:f1:81:21:d2:ef:5c:
                    ae:c9:ce:e8:0f:ab:69:40:00:e4:5a:f5:03:5e:a4:
                    84:a9:96:34:21:16:79:b2:41:a4:d0:e5:51:7a:6c:
                    a8:2a:36:7c:6e:9a:2b:db:4f:31:6e:0a:69:f0:bb:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F3:9F:38:8C:82:6C:86:4B:C1:E3:B8:E4:AD:B0:53:D7:BE:42:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e553676-cc10-3f3b-b9dc-49c8dd21b359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:ca:5f:0a:62:c3:c3:3b:db:38:a6:78:59:5c:83:89:05:
         d1:2f:18:66:68:b2:d4:35:97:ab:89:7a:01:37:0c:4c:03:87:
         f3:43:9f:08:f1:45:a9:ac:1c:e2:6b:65:53:91:c6:e6:27:11:
         e2:84:39:da:79:37:9d:63:44:1f:d4:e0:40:6c:8c:5b:31:03:
         b3:7f:89:46:2a:b0:40:28:33:bd:e5:c6:ca:7f:fc:7f:69:34:
         e0:ad:b2:0f:38:46:90:72:a3:ac:aa:82:d7:c8:51:99:f6:57:
         58:76:2a:90:6c:4a:04:40:27:41:da:84:3b:ac:84:63:30:35:
         96:33:08:ff:16:c9:ad:7c:db:b7:29:b4:a1:1d:5e:50:be:b2:
         06:2c:c1:b6:02:37:00:6e:3d:be:60:b8:eb:b1:10:b0:19:c8:
         e9:2c:19:d9:b2:2b:98:c3:ab:d8:d4:b5:cd:ce:1e:cb:20:81:
         89:de:c7:93:21:17:df:9f:3a:8e:0f:f3:63:65:68:98:65:e6:
         16:54:3d:d5:2a:52:d8:be:b3:20:4e:ec:2a:57:03:8a:e3:12:
         bb:c6:86:4b:b6:b0:e6:5a:25:ca:75:bc:b4:91:a2:16:14:5b:
         60:89:6c:26:1e:40:cc:e6:1f:39:97:0c:99:d9:3c:93:af:13:
         2a:98:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:43 2025 by rpki-client