Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47caaea3-16ab-3105-a113-ecd841733170.roa
File:                     47caaea3-16ab-3105-a113-ecd841733170.roa (raw, json)
Hash identifier:          oAnE/zozhe+4bMGldTEklPqHzy0bh+w96/dCuw71Zh0=
Subject key identifier:   75:B7:BD:DC:92:9B:CA:4C:23:17:F0:25:FE:52:7E:E5:43:2C:96:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDC9156C3A2532BB405ED6000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47caaea3-16ab-3105-a113-ecd841733170.roa
Signing time:             Wed 09 Nov 2022 12:00:00 +0000
ROA not before:           Wed 09 Nov 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.155.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:91:56:c3:a2:53:2b:b4:05:ed:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  9 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=5db6e9d0-d394-41fb-ad2c-45f2bb919252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:46:ae:62:74:7d:f0:bf:b8:36:04:17:26:
                    b3:21:31:69:d0:09:b0:f7:0e:7b:17:b5:df:44:5c:
                    be:ec:4e:f7:2c:4f:51:cb:88:ba:25:f9:9e:d6:b7:
                    2c:f9:14:cd:7f:d5:f4:07:46:b0:22:bf:b7:38:51:
                    40:2f:2b:4e:0f:dd:e4:96:91:2f:e0:d9:01:63:fc:
                    6d:d9:c6:eb:1c:5b:3c:84:1f:4a:76:ab:59:98:a9:
                    e9:6a:d7:f2:91:a8:f3:fc:ea:45:62:c0:fb:83:e3:
                    e6:78:e3:06:8e:a1:46:a7:1b:cf:17:6e:11:2d:b3:
                    29:d1:fb:0f:77:bc:6c:bf:f9:bd:2d:ab:54:61:e9:
                    59:f5:47:d7:2f:6d:32:a9:29:73:b7:53:c5:f2:26:
                    c0:4f:93:0d:d4:b1:ea:f8:54:b5:b1:fc:58:d3:ac:
                    42:3e:f4:51:ce:c2:40:48:8b:ad:31:0c:46:2a:ff:
                    be:ce:d1:de:d7:1a:a1:7e:0a:31:c9:94:0f:78:0b:
                    aa:a2:62:eb:0d:85:22:d6:75:c8:6e:ed:3f:7a:bc:
                    12:d9:73:45:be:7a:cb:50:54:e6:8e:0e:cf:2e:d4:
                    8a:3e:fa:f9:3b:af:36:d8:55:14:3b:0a:73:5b:d1:
                    e0:e1:fa:93:dc:4d:bb:7b:d9:21:07:22:2e:77:99:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:BD:DC:92:9B:CA:4C:23:17:F0:25:FE:52:7E:E5:43:2C:96:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47caaea3-16ab-3105-a113-ecd841733170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.155.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:54:ba:01:10:7a:b3:af:e5:f8:e5:82:e8:c3:78:12:a4:05:
         8e:7b:02:38:b9:d9:c0:94:28:73:22:eb:73:12:b4:33:c1:87:
         82:0e:ef:11:ec:f6:01:d7:36:88:59:ff:09:76:74:99:0d:70:
         14:42:f6:01:42:1d:8c:c8:80:59:f7:7e:a6:32:2b:e8:a1:e8:
         ae:a3:fc:dd:af:20:34:8c:eb:38:eb:43:be:ab:dc:5f:c3:7d:
         d2:90:02:c0:34:6a:1f:ec:64:5f:2c:9a:77:4e:36:71:2d:58:
         4c:f7:0b:37:19:0e:55:7a:b7:94:47:2e:27:5e:2d:44:63:c5:
         91:c2:6f:96:bd:c1:d3:09:b9:45:e1:dd:3b:57:40:f0:36:2c:
         4f:a2:28:67:66:4f:08:59:ce:3a:8e:38:43:76:3f:94:ee:0a:
         49:a3:a1:14:c5:4d:96:07:ca:c0:ea:4d:6e:d4:31:9c:e7:1c:
         9f:82:be:7f:04:b3:83:ca:36:fa:7e:2e:2d:d1:54:1b:63:af:
         f7:b3:c6:0e:c0:79:fe:78:15:b7:2b:6c:3b:e8:57:c7:bf:23:
         32:84:2c:6e:5b:5d:ee:ff:30:1f:52:e2:4d:a9:4b:df:b2:9f:
         43:72:62:02:5c:5f:36:3b:0d:80:67:ae:e8:d9:2c:c2:b6:31:
         f5:18:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:10 2025 by rpki-client