Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/404c440e-4e92-3310-b76e-ea95f61fe3c0.roa
File:                     404c440e-4e92-3310-b76e-ea95f61fe3c0.roa (raw, json)
Hash identifier:          SSDUaJ7hemgdRN/8QSuEHzWsZPfoiZV5FYhMfBUs1zA=
Subject key identifier:   DA:B2:F1:C3:12:A6:50:03:B3:43:C7:41:26:96:CA:65:B3:AB:A3:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAF2C40BDBF9087F18DC287C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/404c440e-4e92-3310-b76e-ea95f61fe3c0.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:af:2c:40:bd:bf:90:87:f1:8d:c2:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=5f80d55f-0362-45b4-addf-0b80e27aa874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:2e:44:9a:53:5c:66:99:94:0b:12:a8:31:
                    ea:99:8f:e1:cf:8a:1b:55:e3:6c:a1:ec:50:a1:e3:
                    86:9e:7b:63:df:f1:fe:35:a8:94:43:fd:5b:a3:29:
                    ff:c4:67:5e:fe:45:7e:04:b3:27:24:af:b0:52:ff:
                    22:07:3b:38:19:76:1f:bc:2f:7d:47:6f:97:b6:ef:
                    76:d8:4c:84:ce:79:64:8a:3f:6b:ff:ce:32:e7:6d:
                    d1:91:33:73:22:c2:be:03:18:dd:f4:dc:52:8c:5d:
                    68:23:c4:b6:f0:f1:35:6b:a8:4f:f6:ea:c1:aa:13:
                    46:8a:c4:f1:43:29:24:fa:6d:45:0e:2e:75:68:32:
                    b2:87:7d:b9:a0:2b:8a:2e:ce:45:d1:42:10:26:30:
                    85:d3:fd:84:76:1c:39:3c:3c:6a:2e:5c:7f:cf:72:
                    2d:4e:fe:b3:f2:36:db:b9:af:aa:bc:bc:1d:1a:bd:
                    bc:41:d5:d6:db:5b:e0:cf:08:4e:88:36:40:85:d5:
                    92:b5:33:69:04:f7:a8:1a:10:a5:81:41:75:7e:61:
                    67:73:b7:7e:96:51:a1:86:71:63:d6:80:4d:71:56:
                    7d:68:1d:a5:0a:97:d8:03:b1:9e:05:62:87:c5:35:
                    d8:21:54:7d:29:22:24:07:da:d2:e5:91:78:4b:24:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:F1:C3:12:A6:50:03:B3:43:C7:41:26:96:CA:65:B3:AB:A3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/404c440e-4e92-3310-b76e-ea95f61fe3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:45:d3:09:65:20:5c:ae:f5:83:8a:9e:7d:0e:a9:96:e6:6a:
         26:d0:3c:42:22:c4:41:88:41:8a:eb:b3:ca:19:67:f1:cf:98:
         b4:35:16:bc:6f:5d:30:a0:15:ae:da:73:d0:1b:31:b5:47:14:
         11:41:a1:49:51:5f:26:09:a0:80:51:51:3a:14:8e:92:37:10:
         79:9b:6f:a6:23:dd:9e:a8:d7:64:b5:de:2c:14:6c:67:23:00:
         a3:99:6a:72:02:76:1e:37:dd:48:7b:f0:53:14:29:12:86:94:
         94:f5:22:9f:6d:34:24:cc:33:1c:30:fa:35:d8:22:c5:20:08:
         f9:49:50:b2:ad:5f:64:0d:15:ef:3f:8c:48:5a:d5:14:30:b4:
         44:0c:47:20:b4:70:7f:05:e7:ff:15:c0:4e:8d:49:cc:77:64:
         71:a5:ec:1e:12:3c:ba:eb:d5:dd:a4:a3:5f:43:40:62:da:32:
         56:ef:8f:9e:96:e0:61:23:db:d8:24:e3:42:21:44:d4:cd:77:
         18:82:23:76:ea:71:08:09:ba:fe:0d:a2:38:52:7f:97:28:3d:
         13:88:00:78:4e:4b:de:dd:8c:9e:0b:75:80:d6:cc:c2:fb:ba:
         47:5c:b2:fd:4c:b8:69:44:6c:a8:29:07:24:e7:be:60:d1:14:
         6e:69:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:37 2025 by rpki-client