Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42754d40-d024-3fd6-84e6-c07b7e679e00.roa
File:                     42754d40-d024-3fd6-84e6-c07b7e679e00.roa (raw, json)
Hash identifier:          ml4v+VWZ2WrZsHkQaMZ3Mhza5d5EEBO04B9cMsXhDcA=
Subject key identifier:   86:2C:59:33:FC:D1:3A:54:71:48:60:5F:69:0B:F3:F9:0C:3C:3B:CC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAD51C571305092F1B3CCB680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42754d40-d024-3fd6-84e6-c07b7e679e00.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ad:51:c5:71:30:50:92:f1:b3:cc:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=6dfdc653-a216-46b2-97da-3f1336a6d6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:bf:3e:e8:1b:4e:8f:fe:bd:aa:ca:d3:cf:
                    0a:f5:75:02:4a:84:f3:88:46:d8:5e:76:23:d8:58:
                    3b:1a:df:f1:78:f0:9b:1b:65:04:02:e4:4e:b7:99:
                    7a:16:84:ed:79:bc:32:c8:f6:ed:3a:4a:4e:01:d7:
                    62:32:58:7d:93:10:ab:62:0b:7d:99:1b:19:d3:cb:
                    90:e1:f8:86:1e:d4:0f:96:42:54:49:9a:f1:43:4e:
                    aa:b9:bc:ca:1d:b4:75:3c:d1:e0:ac:f7:25:41:7b:
                    d6:34:89:5d:dd:b5:63:e0:d8:4a:04:8e:f7:64:ee:
                    83:50:b3:ae:32:c7:83:90:f9:8a:b5:c4:49:43:56:
                    1a:fd:fa:44:c6:8c:79:f5:e4:7d:77:3a:d8:42:c3:
                    bf:44:d5:d6:8a:29:51:f7:f3:3f:38:d8:f9:05:9d:
                    d2:14:a3:35:e3:d7:a9:28:b6:bc:fc:f3:9b:6b:a3:
                    bb:dd:87:a6:7f:5a:3a:05:c1:d7:e5:ef:4b:f8:65:
                    d2:bb:70:1a:ed:47:d2:09:a7:fc:06:81:f4:18:43:
                    f5:57:ba:60:8e:4b:ad:52:a0:c6:8a:2f:3b:04:6c:
                    9e:e2:2f:b4:e4:9e:76:de:b9:f8:a9:15:42:75:a2:
                    80:73:49:8e:a3:4a:f2:8c:40:7c:e1:e4:ba:05:6e:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:59:33:FC:D1:3A:54:71:48:60:5F:69:0B:F3:F9:0C:3C:3B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42754d40-d024-3fd6-84e6-c07b7e679e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:17:b3:fb:c4:cd:ae:8e:18:f4:75:42:fa:de:72:83:f0:bb:
         a1:14:80:83:2e:8b:f9:4c:da:32:4e:63:4c:17:cb:c7:a0:5b:
         e5:e1:ee:18:4b:96:d6:fa:cd:ac:ec:f2:75:3e:7c:38:69:ef:
         50:1a:ef:10:ec:84:a1:4f:55:da:23:21:cb:b5:48:0d:af:44:
         3e:98:90:7d:ea:78:a1:86:55:53:7b:32:81:5e:27:3f:d4:b1:
         66:6e:0c:b7:6b:28:3e:f8:cc:58:a5:5a:c5:37:e5:2e:93:c7:
         fd:a2:33:ef:09:44:fe:1d:59:bc:c0:d0:64:09:47:0b:78:d2:
         6f:b3:8a:30:9c:a4:c9:b1:2e:27:49:3a:bb:5d:75:9f:90:b3:
         b4:ab:f8:96:cb:e7:df:a3:44:17:e0:28:6e:17:4d:e7:95:c3:
         98:f3:47:ad:11:ef:56:bc:c5:0c:2d:63:0b:85:35:50:25:1c:
         4e:18:c2:79:42:f5:b1:7c:a3:1e:30:b7:f5:cd:e4:06:b6:1c:
         c1:18:3c:a0:06:32:df:a3:3c:e5:80:c6:67:55:bb:19:90:b8:
         8d:e2:74:56:85:34:72:9b:2a:dd:57:11:60:1a:3e:a0:1f:9a:
         0c:30:24:e8:05:f9:38:e2:21:ff:41:c5:86:4a:ed:c7:dc:bb:
         58:93:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:58 2025 by rpki-client