Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4271f921-8514-3cbf-8076-77348a95cdee.roa
File:                     4271f921-8514-3cbf-8076-77348a95cdee.roa (raw, json)
Hash identifier:          GI25JHrBVkpaWRgjorSFfpdIIk8l4U9rzlLz3+AHoqQ=
Subject key identifier:   44:5E:F7:E9:4F:46:29:F6:D6:87:F3:90:B3:AC:00:A3:81:79:94:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB5BED8A5F91B7DBBBCF19540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4271f921-8514-3cbf-8076-77348a95cdee.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.118.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:be:d8:a5:f9:1b:7d:bb:bc:f1:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=f05792b9-285d-4d63-84fe-e0efaffcfeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:47:fe:7a:f7:0b:7a:b6:1e:8f:c9:c4:4a:
                    8e:2f:82:f5:79:a3:a3:49:0e:b8:ff:26:39:e0:09:
                    6f:ca:2b:04:76:91:10:41:7b:f9:fc:84:cb:bc:07:
                    66:cd:0b:b3:84:85:a5:b0:17:e9:23:75:ec:7f:12:
                    bc:da:6d:b7:49:4e:ed:e3:0a:b2:26:03:9b:f9:f8:
                    81:19:5d:05:45:82:8d:bb:01:36:a4:b8:46:65:95:
                    38:46:4a:58:af:f1:3a:2c:e0:c8:b4:0e:5a:6c:b1:
                    d5:aa:b1:bf:42:4d:cb:54:d9:51:90:46:35:ab:41:
                    86:57:86:05:94:92:b7:ac:d1:64:17:d1:66:75:b2:
                    b0:1a:60:42:63:97:7e:ea:ce:7e:65:ee:13:7f:41:
                    99:80:90:b4:4f:2e:16:1e:98:a0:a4:57:1d:c3:3e:
                    b3:98:cb:d2:90:82:92:f7:88:3f:83:71:33:ce:a0:
                    8c:51:de:ea:da:9d:ba:88:ee:ad:02:f1:1e:f7:22:
                    86:03:26:cd:61:1b:12:1b:f6:13:8e:67:ee:f6:97:
                    fe:e1:bf:af:2f:a5:71:3d:d4:0c:94:2d:48:fc:20:
                    70:af:33:1f:64:65:e1:00:74:32:3d:06:0e:b4:e3:
                    a3:58:14:cc:8c:82:03:11:29:d6:47:59:b5:fb:fa:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:F7:E9:4F:46:29:F6:D6:87:F3:90:B3:AC:00:A3:81:79:94:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4271f921-8514-3cbf-8076-77348a95cdee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:76:2e:3d:d5:b5:7f:86:77:17:0b:27:39:cd:80:a3:8e:
         d1:16:11:db:9a:48:03:15:d6:a2:62:f6:2b:e6:d2:59:40:8a:
         5f:c5:6b:4c:42:49:e5:b6:d5:89:c9:09:2d:b1:74:5b:86:ad:
         07:20:37:38:7a:f9:68:93:20:b1:eb:8c:d0:30:e3:d3:61:2a:
         74:82:88:c1:1f:e9:61:05:ba:b9:8d:f4:88:ac:61:6f:f2:54:
         48:dd:83:90:5c:72:95:61:d7:4c:30:e9:f9:37:61:a4:ba:9f:
         0b:7f:6f:a6:ff:dc:d2:ee:e8:51:a0:86:84:56:56:e8:60:27:
         2d:40:6d:31:48:b4:73:a5:78:5b:64:8b:cb:0e:f1:f4:2d:b7:
         73:a0:2b:99:61:5e:fa:04:b1:26:ce:1f:5c:f6:37:4f:fa:88:
         3f:75:4b:de:f9:81:d7:6f:3b:13:90:49:c6:30:60:50:d4:61:
         2f:fb:6f:5f:28:d1:f0:bb:f4:2b:8b:28:df:78:97:b2:e6:a9:
         4b:43:ce:62:ef:a2:cf:8e:60:f9:46:fd:6e:6c:fe:ef:fc:03:
         04:8b:1c:02:83:74:bf:a1:e4:cd:f6:38:ac:63:84:7e:11:34:
         13:51:60:37:e6:44:c4:c8:9d:b3:1b:89:dd:de:5f:b7:d4:16:
         5b:7b:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:57 2025 by rpki-client