Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4058f058-2573-3a6d-bf7a-3982b5b30e1c.roa
File:                     4058f058-2573-3a6d-bf7a-3982b5b30e1c.roa (raw, json)
Hash identifier:          QItzgdJAc/PSHfEoL1UMgSDw4VDzHH40UfxwzH22G8Q=
Subject key identifier:   4F:D8:6D:D0:72:FC:6F:86:26:9F:9B:EB:0A:55:17:C8:37:7F:1C:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E41E44E05FDD218C9FE9CF140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4058f058-2573-3a6d-bf7a-3982b5b30e1c.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:e4:4e:05:fd:d2:18:c9:fe:9c:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=b4b9295b-9ca8-4967-9392-052275c0280e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:7c:9c:1b:11:aa:55:1e:28:34:29:26:0f:
                    e4:da:58:8b:4a:77:7e:74:b9:84:17:76:76:95:eb:
                    9c:54:55:d2:61:b6:63:2b:56:3a:f7:2d:57:a3:59:
                    ab:8b:b2:bd:15:ee:ff:65:7f:83:68:fd:6e:12:f7:
                    b9:78:96:70:37:95:8a:19:c6:25:bf:64:36:2a:1d:
                    e1:69:05:41:11:28:5d:e4:ce:1b:f5:01:28:1a:fc:
                    5d:9b:86:7f:05:5e:8f:0a:b6:44:11:44:5e:dd:0c:
                    02:b4:12:a4:bc:6a:18:a3:0e:bd:75:eb:78:25:39:
                    7f:f2:9e:76:10:70:40:44:de:a2:a2:37:1f:1f:30:
                    02:4f:25:b0:09:28:13:22:32:dd:50:64:9a:e7:86:
                    e9:0c:91:41:79:ed:b8:8a:47:e5:6d:a4:0f:a0:6c:
                    27:6b:5b:eb:7c:c3:ef:b4:8d:b5:e1:2d:5d:a8:8d:
                    28:d1:b4:c6:12:d8:ec:7a:91:6b:95:d5:50:14:71:
                    69:2e:e8:8b:1a:db:c9:2e:07:d9:38:27:db:b8:c8:
                    ce:20:0a:cf:4d:fb:29:9b:4f:e7:51:2c:0e:ad:81:
                    66:2b:2a:bd:a3:ce:03:c2:99:1c:f6:5a:58:5b:e1:
                    21:48:00:3e:2c:03:3a:b7:77:7b:be:19:07:ac:f0:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D8:6D:D0:72:FC:6F:86:26:9F:9B:EB:0A:55:17:C8:37:7F:1C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4058f058-2573-3a6d-bf7a-3982b5b30e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bd:62:a4:e6:1a:c7:27:07:22:a3:fe:ea:39:bc:d2:ad:fa:
         78:37:ac:d5:ba:11:04:7c:27:10:4a:6b:01:c0:14:1b:d5:14:
         26:c0:a5:8e:e7:6c:4a:45:31:02:aa:01:aa:16:83:ad:f0:8c:
         7f:c3:b7:46:6d:f2:71:4b:d6:e6:51:71:bc:98:0f:8f:df:45:
         a7:9e:88:4f:12:ed:75:a1:f8:00:31:88:7c:5e:be:ef:21:fb:
         e6:db:7b:cf:20:2a:cf:a1:9e:de:f9:52:68:1c:3f:ba:c2:57:
         77:b6:fd:75:a6:b3:ac:1b:76:9a:bb:12:9b:1f:29:0c:23:b9:
         ff:91:25:4d:c0:a8:3d:bb:65:16:c5:a6:1a:32:ed:32:4a:ed:
         73:e7:38:95:c0:58:6b:b3:ce:1f:e6:cb:ae:21:0f:9e:0c:e4:
         c9:70:0f:fc:52:b4:1c:bf:e9:98:3c:d3:a4:a2:c5:9d:e6:c1:
         17:ed:48:7e:4c:53:ec:b9:70:d1:cf:d8:65:f1:e2:5b:b0:90:
         b6:40:02:15:4b:84:48:a0:9e:d7:a1:b3:e4:8c:cd:43:8d:9d:
         9c:b3:b2:85:7a:fa:7d:6c:e9:23:20:8d:b1:a9:b4:b7:5e:b4:
         82:82:48:fd:d9:b8:d5:0a:23:3d:bf:16:ed:bf:f3:2e:e2:03:
         53:8a:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:45 2025 by rpki-client