Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/460c905e-ad16-3b8e-bd72-5411d55a5a69.roa
File:                     460c905e-ad16-3b8e-bd72-5411d55a5a69.roa (raw, json)
Hash identifier:          yvqyDHiMwBbg4DHqXek2/0ywpBisHdcwEoKPJOjMtiY=
Subject key identifier:   DE:BB:D2:45:9C:AC:93:90:5D:DE:13:30:31:C7:DF:C9:A2:3C:9F:DB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D567C0997A8B47DD513658600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/460c905e-ad16-3b8e-bd72-5411d55a5a69.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.31.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:7c:09:97:a8:b4:7d:d5:13:65:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=381f7785-3f34-49d0-a1f1-43a1b1ee9e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:51:b0:74:66:cd:51:a2:28:56:a6:40:56:
                    69:62:10:4e:05:43:4c:f0:ec:1a:9c:a9:ed:ea:2f:
                    d9:46:9c:c4:52:92:ff:ab:4f:65:51:63:4a:67:cf:
                    c2:c6:55:97:31:0b:34:6e:10:1d:39:ed:b5:21:52:
                    36:ea:af:ec:3e:5d:5d:48:61:66:3e:36:b8:0d:38:
                    8c:55:16:93:27:af:10:ba:72:95:50:b8:7c:5e:a9:
                    90:fd:11:7f:06:0f:7b:41:98:fd:0c:86:f3:1e:a1:
                    10:c9:c6:e6:49:8d:ef:7c:4a:18:c0:86:4a:64:c2:
                    0b:8f:28:bd:d7:40:3a:eb:93:3f:54:eb:34:d5:1b:
                    99:cf:7e:88:68:f1:d1:ec:e1:ad:12:05:99:85:89:
                    7a:0b:8b:9c:30:ce:e6:4a:65:5a:88:ac:1d:16:a3:
                    e0:6a:30:b4:d0:88:1c:b6:c9:47:5b:49:a8:e5:24:
                    da:1a:a6:81:72:22:77:16:42:fc:a9:01:e1:ee:ef:
                    20:fa:34:0a:d7:65:35:9e:ad:a4:36:38:65:c0:d8:
                    91:39:64:21:13:6a:90:be:53:29:05:ae:d0:e5:6f:
                    2c:36:be:5e:c1:3a:0b:26:0f:89:73:61:21:c6:f8:
                    ef:db:a1:a4:89:34:6e:67:58:d0:2b:5f:a2:37:e6:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BB:D2:45:9C:AC:93:90:5D:DE:13:30:31:C7:DF:C9:A2:3C:9F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/460c905e-ad16-3b8e-bd72-5411d55a5a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:71:52:87:f7:d3:49:9f:14:8d:08:76:ec:86:08:b3:cb:b4:
         8c:5b:23:e2:53:39:c9:17:7d:39:81:e8:bf:88:31:fd:c2:e4:
         8b:30:a0:f2:46:41:a4:f8:14:03:d2:69:f2:5a:61:8f:1b:17:
         1b:95:6f:35:ae:fa:3d:43:0b:56:02:3a:8b:c4:30:8b:2b:8e:
         57:d1:3d:6a:29:5b:41:1d:d0:fc:60:83:ea:6b:98:56:e9:5e:
         51:da:79:52:70:2f:99:e9:31:08:f9:29:d6:aa:93:0e:e6:6a:
         91:65:ad:6d:e1:3c:33:c2:4d:cd:9e:e8:9c:93:8e:83:43:42:
         3b:fc:dc:22:92:fd:ed:70:f8:5c:09:08:48:07:21:45:98:16:
         a1:9d:43:f1:1c:70:fe:54:15:de:48:d6:8d:95:ec:c9:66:ca:
         72:66:88:ad:8c:cc:71:e3:01:cb:a3:1d:15:ed:97:b0:3e:15:
         7d:7c:71:3b:71:09:10:62:39:88:e8:e0:02:cf:64:fc:af:2a:
         7b:d4:32:ca:cb:ce:d1:b6:f5:f4:7b:a0:2c:ed:ac:6d:3e:8f:
         a9:fc:a8:85:21:29:3d:0b:2b:5b:33:63:df:95:de:6f:c4:88:
         90:3a:88:bd:19:7b:3c:49:66:c1:da:68:8d:d3:80:4d:2c:58:
         af:c3:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:38 2025 by rpki-client