Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/499471e4-691c-3d62-a9e2-523811accf3f.roa
File:                     499471e4-691c-3d62-a9e2-523811accf3f.roa (raw, json)
Hash identifier:          MGU486nJS/PR9bWh91Sz9DrSpT+BtaiQALQF3Xmlrg8=
Subject key identifier:   07:69:1E:FB:64:F1:5D:A8:30:90:04:A3:DE:85:33:D2:A3:0A:40:4A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBA083B0A1CB0A4260508E080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/499471e4-691c-3d62-a9e2-523811accf3f.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ba:08:3b:0a:1c:b0:a4:26:05:08:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=2d0b20be-0d30-4442-9d67-48793b7a0945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:62:50:3c:37:1f:53:87:78:25:2d:c5:9f:
                    d6:ce:ab:cd:70:2a:2f:c8:fe:6c:85:b8:98:ad:56:
                    9f:1f:05:3d:eb:3c:f0:79:7a:d6:79:77:97:c4:a0:
                    4c:bc:aa:6e:44:fa:b3:a7:52:fa:26:c0:97:77:24:
                    5d:ad:09:f4:54:4d:90:e2:2b:d4:29:7b:f1:24:b8:
                    46:46:61:22:2f:fe:8d:14:b2:db:f4:b0:d2:c8:80:
                    8e:c1:04:d3:7e:b2:17:39:0e:02:c2:1f:30:d7:28:
                    94:af:d3:40:62:9a:33:37:7e:c2:3e:47:1e:3b:6d:
                    91:30:a0:c5:1a:75:62:8e:b0:8c:81:d2:3e:35:cf:
                    8a:04:32:5f:82:d2:44:92:28:74:f3:2d:6e:8b:1c:
                    78:d0:40:90:3a:57:d4:a8:04:e8:21:cf:3d:6e:13:
                    3d:8e:a0:2c:1f:a9:0b:5b:96:f2:55:e1:9c:f4:9c:
                    1e:71:bc:18:a5:12:2d:06:3e:77:3f:56:de:20:a6:
                    ad:41:b7:b9:6a:e3:d3:c9:f6:6c:a5:92:41:dc:36:
                    b1:5c:9a:98:4c:bb:bb:23:4c:04:5a:67:ba:09:26:
                    70:50:32:6a:5a:5b:ce:65:80:5b:a5:c3:7d:cb:e1:
                    1d:30:96:9c:d9:f3:ec:02:2c:a7:22:66:f0:5e:d4:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:1E:FB:64:F1:5D:A8:30:90:04:A3:DE:85:33:D2:A3:0A:40:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/499471e4-691c-3d62-a9e2-523811accf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:5c:6a:67:7c:d1:0a:38:fd:99:6a:a4:48:b3:3e:f0:c8:
         52:d2:57:e3:22:e8:7e:04:d7:69:0b:56:d4:76:d6:b4:23:8e:
         aa:e6:b7:ab:58:62:76:46:33:92:e1:b3:13:11:05:79:d0:8c:
         4d:15:17:cd:f6:6f:81:62:99:62:73:57:83:ea:02:75:01:20:
         be:1a:88:13:cf:f6:24:38:9b:7e:af:3b:27:12:21:a5:dd:2d:
         b3:f2:80:af:5b:fd:bf:4a:cd:67:6e:b9:96:10:c0:35:8e:65:
         1d:99:f0:a6:36:2e:93:15:d8:02:d8:c5:3d:ab:3f:7d:48:42:
         2c:fa:88:fd:3a:d7:b0:a5:d6:b8:8b:0b:cb:d8:95:3d:84:90:
         54:d4:6e:0c:11:80:7b:23:e7:b7:97:56:44:88:05:f1:95:a7:
         66:7d:cc:58:9b:29:3b:b0:93:1e:d7:3e:98:c9:73:27:7b:4d:
         06:f1:83:9c:cb:b4:c1:5e:51:77:93:4e:25:14:f6:11:74:26:
         4c:58:df:76:61:36:0a:dd:69:9a:ca:b9:0d:a9:6f:0f:82:05:
         fa:93:65:db:05:f9:84:aa:65:9e:d6:3d:e1:c6:32:95:3f:be:
         ab:4b:b0:4b:c9:d5:e3:ab:e1:75:af:ea:83:6b:fc:ce:50:93:
         fe:bb:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:06:33 2025 by rpki-client