Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47ed9a4c-4714-320b-9a74-067f5e70be64.roa
File:                     47ed9a4c-4714-320b-9a74-067f5e70be64.roa (raw, json)
Hash identifier:          CV40pEMVqAIYenb8TnwqsnehwcvWEZGgI8PkdsnT2NA=
Subject key identifier:   00:B1:92:50:02:29:46:4C:00:35:61:3C:AF:88:8B:92:67:96:03:E2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEBE564DE6F6F42C80F203BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47ed9a4c-4714-320b-9a74-067f5e70be64.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:e5:64:de:6f:6f:42:c8:0f:20:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=b6f9264e-011f-4ca5-ae01-8b0775fb56ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:80:16:3f:71:9b:4b:94:80:9c:cb:15:bc:
                    63:b8:ad:5a:11:42:a3:e7:35:b9:01:62:1b:b9:ad:
                    a4:bd:af:04:83:93:a2:13:bb:24:43:b0:2c:f2:74:
                    2c:1b:9f:42:ef:f0:9b:76:d9:90:cd:d2:40:9d:3a:
                    be:a7:f9:4e:08:1f:6d:15:6b:c6:74:00:f9:c9:31:
                    e3:1b:8f:8e:d8:aa:b9:9f:4c:a4:3d:57:54:cc:af:
                    1e:67:a6:7a:1a:71:58:f2:57:9f:bb:ac:b9:b4:03:
                    d1:f8:ba:8f:53:4b:f9:1e:20:3f:24:64:4d:42:e7:
                    34:42:09:4c:b6:3e:93:c4:84:b8:b1:28:04:d5:03:
                    da:9e:14:1f:9b:69:c1:99:33:ab:a1:6a:31:16:bc:
                    40:14:c6:8d:3e:79:a7:5c:c7:eb:35:82:ca:d8:96:
                    64:49:a2:d0:dd:a4:6e:90:49:eb:f7:df:f9:b9:03:
                    07:f2:80:de:0f:4c:7a:18:97:4d:4d:f6:17:28:01:
                    9c:5a:28:15:c6:c3:f2:4c:97:af:4d:30:94:c5:c6:
                    cf:98:66:bc:2a:04:3e:4a:3a:e2:dd:eb:d4:58:17:
                    83:97:fd:4a:a4:6e:ee:97:cd:cf:ab:8b:62:91:cf:
                    ee:64:34:6d:86:75:52:04:b7:a2:fa:ed:61:db:61:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:92:50:02:29:46:4C:00:35:61:3C:AF:88:8B:92:67:96:03:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47ed9a4c-4714-320b-9a74-067f5e70be64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:6e:b1:ad:07:a7:f9:ad:34:1c:d4:67:e7:bf:e5:c8:b5:
         08:36:8a:9a:0b:b6:c2:fd:7c:34:1a:e5:a5:dd:e8:45:09:45:
         e9:b4:98:02:4b:ec:36:8c:11:a5:26:5d:01:90:53:51:30:2e:
         e3:ad:f6:d0:0b:8f:8b:1e:7f:77:30:09:05:ea:54:4e:e2:43:
         68:91:f6:c7:88:24:4a:13:24:45:7c:99:71:61:1a:70:f7:00:
         7f:36:43:c3:7a:b2:67:5e:37:b5:8c:8b:8b:4c:29:28:55:bd:
         d9:01:63:29:aa:1f:8a:13:20:cc:ec:8c:ac:48:6a:df:a2:fc:
         57:07:96:76:d6:b0:f1:ab:11:13:c0:02:fb:9e:93:3b:b1:46:
         db:ab:ec:e3:98:ed:3a:dc:19:42:76:eb:b3:70:a0:3e:57:50:
         f6:4e:34:0e:31:f9:bb:9c:ff:f6:6b:77:77:86:b8:47:1b:14:
         6a:0e:94:4f:59:de:8a:0e:7a:28:ed:d8:3d:c1:58:66:8c:08:
         7f:7a:d1:44:c8:0f:45:dc:8b:a4:96:68:3f:3f:da:7f:c1:14:
         5e:bd:ed:44:ff:d7:92:f3:93:02:1b:cb:59:32:d5:0a:77:fe:
         c4:3a:8e:45:2d:fd:d0:93:02:3e:35:27:df:09:30:e7:e0:0c:
         76:51:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:42 2025 by rpki-client