Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a0c887-9d67-31bd-be25-06f9177fdd95.roa
File:                     48a0c887-9d67-31bd-be25-06f9177fdd95.roa (raw, json)
Hash identifier:          zv1tcNIcD/fwFZST8HFGjCFFbCjatTBDLgA7V0ijjjY=
Subject key identifier:   34:2A:F3:ED:7E:1D:E0:36:48:06:6F:EC:50:25:30:51:A4:F8:91:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF260932F549277A2B28174C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a0c887-9d67-31bd-be25-06f9177fdd95.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:60:93:2f:54:92:77:a2:b2:81:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=32c4aae1-bf22-4497-874d-2110d6a0520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:1f:2d:82:02:0a:9a:4d:10:3a:7f:ba:12:
                    b0:bf:e1:36:54:1b:1f:2f:08:7e:bd:e2:80:bb:db:
                    8a:9d:7e:26:8a:ef:80:aa:11:5b:16:1a:73:d0:0d:
                    9e:e5:1e:4c:62:ef:a1:57:fd:6e:91:07:5e:81:48:
                    2b:1e:f8:d4:13:a0:32:8b:83:9b:18:15:9d:88:50:
                    1d:8a:1e:e3:c6:7f:d9:a4:12:25:15:86:9b:80:37:
                    70:56:d9:a0:17:2c:69:e2:0c:1f:c8:4f:f8:1e:84:
                    cc:6a:85:79:82:e5:ee:68:2c:93:53:5b:96:e2:64:
                    da:ff:e1:0a:b8:f2:39:8e:a6:b9:81:5c:71:9f:00:
                    eb:91:92:02:3e:21:fc:90:46:35:58:70:82:b8:c3:
                    5a:d5:43:cd:ab:0b:22:14:88:76:37:cd:63:f6:df:
                    31:71:92:b6:ef:2e:56:a3:1b:16:d4:dd:b3:6c:0a:
                    a9:24:bf:a6:92:90:7c:6d:e5:f8:ee:9a:e4:43:49:
                    82:b8:a8:fc:26:fb:a0:ce:32:7e:a9:b4:a2:a9:51:
                    db:6c:74:e7:11:4d:12:9b:98:f2:66:8a:ff:e9:d3:
                    19:64:0d:c2:6a:f2:13:13:40:07:15:ad:04:d3:ed:
                    99:0d:e0:b9:43:8f:4f:26:b2:22:68:d5:4f:03:a8:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:F3:ED:7E:1D:E0:36:48:06:6F:EC:50:25:30:51:A4:F8:91:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a0c887-9d67-31bd-be25-06f9177fdd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:31:52:fb:d2:c7:6c:ed:bf:bf:55:40:01:eb:38:ce:d3:d4:
         36:08:fd:8a:6c:81:2c:e9:88:01:08:4e:8d:9a:49:97:22:7f:
         7c:2f:f0:e4:40:f2:f5:11:b3:7a:3f:cf:bf:61:19:59:17:c6:
         4c:1e:d5:d2:f8:e9:dc:ae:1d:e4:9d:38:89:26:7f:a1:3c:83:
         19:c5:69:21:ea:15:3b:7a:4a:fd:a1:8a:fa:14:02:c8:75:63:
         a0:86:81:23:bb:1d:f6:79:ba:62:b7:e8:5d:57:77:19:68:d8:
         dd:3b:ce:dc:5d:b4:54:73:d5:b2:44:8d:50:6d:ad:cf:c3:d5:
         28:53:b7:fb:2c:3b:2e:45:1f:46:07:6d:6d:35:9b:f6:52:cf:
         88:d8:a3:a9:84:34:54:10:f5:9f:b3:5d:d6:40:8d:c3:b4:4a:
         6c:33:8a:01:b2:7c:57:73:f4:7b:9f:5e:eb:2b:97:80:e3:6c:
         ef:c2:0f:45:ac:89:49:7c:30:d9:36:e2:42:ea:49:5d:ee:9f:
         30:26:c6:92:98:82:b0:0f:25:e8:c0:f7:91:ce:cf:9a:6f:ad:
         7d:c6:ee:b5:82:8e:c9:54:e0:ab:83:2d:c6:f8:ba:bc:e0:d6:
         8c:e6:9f:89:4a:78:fb:d2:7c:61:d9:65:a6:48:96:61:86:42:
         94:80:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:35 2025 by rpki-client