Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/429fd016-64f1-3322-b2f2-c7ac37b5414e.roa
File:                     429fd016-64f1-3322-b2f2-c7ac37b5414e.roa (raw, json)
Hash identifier:          jBJo7TyTVyNqtjt6R7REDXVUcqKPbMzp4bhAd/18dfc=
Subject key identifier:   44:81:6F:5E:8A:55:90:FD:6C:8E:33:EC:C3:46:6F:09:01:2B:BD:F4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E433AA294193AF9770BDC4D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/429fd016-64f1-3322-b2f2-c7ac37b5414e.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.71.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:43:3a:a2:94:19:3a:f9:77:0b:dc:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=8ecaffc2-cb1f-41ae-b995-bd25b74c346d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:db:5b:03:60:13:4e:50:64:c6:cf:b2:61:
                    f1:7a:95:8e:82:12:52:f3:50:be:15:5a:73:41:5e:
                    21:be:11:ad:7a:45:47:10:e6:2d:f3:12:07:6f:13:
                    42:2d:11:d0:fb:50:e1:83:e3:ed:24:be:52:67:f6:
                    09:52:68:f2:7a:5a:d2:94:e7:e3:23:4c:f0:04:ec:
                    0b:c1:94:73:b1:82:aa:7a:49:23:57:95:ad:5f:89:
                    9e:04:f2:a9:8d:d3:80:39:7c:0b:49:b5:14:1a:27:
                    1d:98:ae:d2:77:b0:2a:9e:fb:26:58:b0:36:d9:d2:
                    88:f6:89:47:5e:55:cc:b5:3c:40:b2:69:a7:f7:82:
                    a7:59:e8:6f:8a:59:09:33:d0:e8:26:9f:c4:86:f9:
                    49:2f:1c:c9:22:ad:93:32:b8:c6:3e:23:8a:81:54:
                    ce:40:28:9f:64:b7:f8:1e:f0:6f:a2:7d:a0:95:15:
                    69:f4:4d:46:65:41:dd:19:b6:a2:32:6d:9f:dc:fa:
                    ee:8b:0b:da:9a:e2:5c:6e:80:fa:fb:89:bd:a8:ac:
                    3a:40:f4:55:8e:37:29:55:f1:a4:e1:6a:db:56:58:
                    12:e2:b6:db:8a:4c:98:cd:8d:84:fd:cb:72:b5:fb:
                    69:5b:e1:fa:ef:c6:6f:f6:e1:d4:63:e0:cc:ae:4c:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:6F:5E:8A:55:90:FD:6C:8E:33:EC:C3:46:6F:09:01:2B:BD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/429fd016-64f1-3322-b2f2-c7ac37b5414e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:f2:1e:88:6e:00:12:1c:85:6e:df:d9:3a:37:b1:37:12:
         7d:a3:cc:92:63:85:fb:ff:36:c4:d1:d7:1c:da:ae:db:c6:31:
         36:f7:5c:d8:e4:ed:02:56:39:ce:e8:90:86:c3:b7:21:3f:d5:
         cc:f3:2c:49:1a:1c:e6:a2:ab:97:ab:08:e6:8c:99:8d:e8:9c:
         d6:5c:df:c9:80:81:54:ed:24:58:b3:78:c9:5f:28:2a:a3:9a:
         9d:e2:2d:33:8c:54:5a:64:ea:ca:26:8d:52:fc:4b:38:3e:b0:
         cc:86:e7:09:36:5f:ba:8b:49:54:76:40:e9:0c:75:b4:7d:63:
         8e:9d:15:4d:ff:c5:cc:a4:e2:82:6d:85:09:3b:8c:21:1f:60:
         55:3d:df:65:32:c6:4e:77:94:e3:34:64:48:cb:b0:df:5c:62:
         57:4e:d3:fe:83:05:2d:b8:3e:fe:1e:07:14:1d:1d:63:71:12:
         d1:27:76:79:ce:8c:86:53:37:c1:41:94:12:ef:be:91:c6:df:
         ec:07:a9:24:69:2e:db:75:86:5e:c3:97:6f:73:31:4f:84:30:
         9d:ba:78:84:bd:87:72:87:97:e6:bb:58:8d:41:80:45:f0:84:
         8b:53:fe:8f:24:29:41:5d:af:0e:a7:ea:17:20:55:a4:b6:04:
         89:74:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:40 2025 by rpki-client