Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49985f1f-5bbf-3fc5-864a-47d76cdbee77.roa
File:                     49985f1f-5bbf-3fc5-864a-47d76cdbee77.roa (raw, json)
Hash identifier:          A/FJdOC07VguF++uHSCYkefGGo2XC6mbJUKjRKaT4TE=
Subject key identifier:   20:66:1C:48:81:A2:A6:42:A6:2E:58:82:0D:7D:3C:43:5F:9B:52:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3222CE9B870A47964F40DD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49985f1f-5bbf-3fc5-864a-47d76cdbee77.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:22:ce:9b:87:0a:47:96:4f:40:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=db8fd5f5-f3a5-4c7b-923d-deb745c2d8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:5b:64:25:1f:94:7a:d0:0c:da:e3:a0:49:
                    16:d0:61:59:81:93:5e:28:dc:a3:88:36:87:db:bd:
                    c8:50:f6:61:22:6c:2c:45:a3:9e:1d:a7:fe:c1:1b:
                    a9:8b:f0:0e:67:a8:c2:49:1a:e5:8e:7e:bb:c7:1e:
                    18:a2:11:90:1b:da:f8:e7:8f:a4:89:ac:aa:26:ce:
                    59:8f:9f:f4:14:97:60:a5:1e:c8:6c:38:92:8c:ce:
                    c9:7d:d3:2c:a7:cf:e8:08:85:87:f2:9d:eb:36:bf:
                    47:7a:59:2f:a8:b4:65:ba:ce:d5:06:a7:54:80:39:
                    27:37:ea:e7:5f:7e:e6:18:aa:95:79:eb:cf:e3:5f:
                    cc:57:1d:bf:af:0c:fb:0e:ad:fd:ce:25:a9:95:b1:
                    c5:86:0e:ee:fb:0a:31:3f:41:c4:a9:c3:e1:39:dd:
                    94:cf:24:9f:cd:6b:ee:11:0a:67:68:6a:45:8d:13:
                    8c:a5:d5:1c:1b:c1:03:cc:e5:a6:fe:f4:11:76:a5:
                    ce:14:b7:55:89:cb:f1:2a:ac:ba:1f:92:cb:be:e1:
                    f9:fe:6c:b1:a7:9e:b4:a3:03:8f:8d:9f:4b:d5:30:
                    66:b4:47:4b:b8:aa:52:f8:9d:e8:47:5e:3f:c1:81:
                    2f:af:77:cd:d5:ff:f2:34:b3:a4:50:13:6e:56:6c:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:1C:48:81:A2:A6:42:A6:2E:58:82:0D:7D:3C:43:5F:9B:52:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49985f1f-5bbf-3fc5-864a-47d76cdbee77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:1c:82:ba:f2:45:4c:30:1a:07:a1:df:29:4b:d4:a7:4d:
         4b:02:f6:b8:1a:6b:2c:be:6b:65:c4:60:3d:60:70:f4:09:b2:
         f5:06:0d:1b:1d:7d:17:fd:a3:86:82:60:f9:55:cf:5c:4c:2b:
         67:71:9e:3f:00:fa:a1:6e:81:6a:91:9b:36:67:81:58:97:38:
         38:2d:56:77:4e:86:20:da:c9:7d:c4:92:26:fb:9f:4d:d6:e4:
         ca:40:70:87:07:f9:2b:a2:ed:b2:09:70:fd:36:ae:3c:f9:92:
         72:7e:63:68:fa:ea:b6:f4:bf:33:af:e4:77:ee:8d:fa:af:db:
         60:3c:b5:a3:40:88:2f:16:a2:dd:17:4a:59:61:01:a0:62:ba:
         92:09:c0:99:b3:01:bf:67:34:fd:b6:63:0a:44:9e:4a:52:5c:
         3e:15:8b:c4:81:24:37:f2:25:1b:ab:e6:dd:b5:13:89:ae:d4:
         6e:4e:6b:be:12:d6:15:25:cf:a8:1f:8d:a4:d9:9e:45:af:43:
         d7:d2:b0:45:84:a2:d7:ba:20:b2:96:6b:cf:c0:b0:69:b1:5a:
         87:5a:cc:92:07:48:71:01:8c:56:b1:eb:10:f2:c2:7f:03:8f:
         44:0a:3e:96:fb:67:d7:da:57:b6:06:06:b4:e8:04:1c:ff:02:
         1c:4f:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:29 2025 by rpki-client