Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff09d59-6511-3625-9023-11113ec2f156.roa
File:                     3ff09d59-6511-3625-9023-11113ec2f156.roa (raw, json)
Hash identifier:          RuqqFpXcmDEFKdC4fU0E+AvHwXC04XfEdE5Og4oVrAQ=
Subject key identifier:   92:2D:02:F6:81:B1:4C:58:69:1A:4E:92:8F:78:43:EF:62:07:21:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E40EE8C85A59A577B4CF97590
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff09d59-6511-3625-9023-11113ec2f156.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.69.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:40:ee:8c:85:a5:9a:57:7b:4c:f9:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=005225fa-d848-400b-aeef-acb467bf89a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:b5:0b:d2:43:97:1a:f8:92:9f:a6:d8:13:
                    53:09:73:94:79:fb:47:ec:89:7b:77:62:b2:40:da:
                    ba:f3:93:62:de:f1:f5:e6:bc:0a:46:b5:37:43:c6:
                    8d:d8:f4:85:b1:36:c1:a1:e9:11:8d:ba:cd:32:79:
                    8f:36:7c:de:69:70:ff:9d:fa:0b:7f:27:aa:e6:09:
                    1d:98:0e:36:d9:7e:e3:c7:5c:8c:c1:25:51:64:94:
                    b4:09:04:f0:8b:ff:36:38:fc:12:76:5d:c0:a2:c8:
                    c1:0d:2c:eb:a5:66:a5:03:38:13:81:49:87:aa:6b:
                    3c:33:7b:6b:37:14:28:e0:e6:b7:f5:04:d0:4f:33:
                    4e:e4:0f:37:86:d6:07:a1:b9:73:3c:14:1d:4d:4f:
                    d3:4c:78:15:7c:eb:33:1a:4a:11:8a:59:bd:fc:4f:
                    19:08:80:b3:7d:0b:0e:74:a0:fe:7e:2d:32:a7:ca:
                    0a:b7:0e:a4:2a:0d:9c:d2:58:df:ca:e6:b4:0a:f3:
                    f2:f7:5d:55:f7:13:f8:bf:c8:e6:f6:7f:59:3e:06:
                    b6:d5:12:12:1b:10:b4:c6:be:74:7f:97:1f:5a:9b:
                    68:01:08:27:89:e7:02:4b:b0:06:7d:5f:2e:87:84:
                    7c:72:1d:17:40:35:e7:a6:50:79:f5:cc:9e:67:e8:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:02:F6:81:B1:4C:58:69:1A:4E:92:8F:78:43:EF:62:07:21:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ff09d59-6511-3625-9023-11113ec2f156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:2d:2b:20:26:79:46:8b:d5:b3:38:2d:06:34:0a:6c:6f:
         4a:58:94:d6:20:80:01:60:6e:a8:c5:cb:04:f4:8e:05:46:b0:
         24:06:ac:b1:a3:d1:23:bd:77:c0:30:4b:55:18:c6:fa:9d:a3:
         76:64:1b:de:ad:aa:6f:cc:c6:5d:d2:21:64:92:31:34:b1:f7:
         c1:0a:5a:ee:e1:61:72:8d:f2:7e:20:b6:b9:a5:33:7b:d9:45:
         9b:ef:6c:04:37:4d:c7:0f:2f:bd:b6:3a:fc:c7:1a:94:ec:04:
         fc:15:08:bc:58:dd:32:30:d8:83:27:09:b1:55:d3:34:0c:98:
         9e:60:c0:8c:a8:40:d4:38:7e:d5:5d:d1:a0:f3:60:5a:f7:6c:
         58:a4:69:97:1b:fd:11:95:c4:64:53:cd:46:1b:32:73:b2:b9:
         8c:0c:3a:fd:3b:bb:ea:aa:c0:2c:98:eb:f6:82:af:8f:74:3d:
         ae:01:73:fc:64:97:8e:00:d1:84:7e:0b:42:6a:0d:2f:68:c5:
         e4:17:09:19:ae:61:0b:c9:ba:3f:eb:1c:3e:7d:31:40:57:97:
         25:b7:48:8f:26:16:da:5a:6e:e2:b5:e7:78:05:50:e7:8c:97:
         f6:1e:4f:db:c7:77:fb:d3:3c:07:19:be:e6:93:08:b5:12:ce:
         a6:f2:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:58 2025 by rpki-client