Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4badaebb-4e92-3e94-9a4b-34a8db68e609.roa
File:                     4badaebb-4e92-3e94-9a4b-34a8db68e609.roa (raw, json)
Hash identifier:          sWMff+AMYgcX9jVqRHP4ETfioOb5TDMTi/CGASKm204=
Subject key identifier:   54:0A:01:2C:83:37:1D:FF:B5:DE:BD:21:F5:DF:69:F2:B0:6B:26:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6EA01952DB622318E37F32C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4badaebb-4e92-3e94-9a4b-34a8db68e609.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:a0:19:52:db:62:23:18:e3:7f:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=449d21e7-88c2-4050-be30-608aee6bb814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:17:e9:80:9d:6e:2e:48:93:ec:98:6a:2c:
                    d2:0c:aa:43:35:0d:71:1a:8a:d6:f8:a7:ee:e0:f9:
                    8f:98:63:5e:32:cf:fb:ab:c3:c0:2c:c0:4f:32:02:
                    98:36:f0:6e:3b:01:bd:ac:af:1b:f0:e5:7e:44:08:
                    94:db:1e:c1:44:f3:bd:3d:0d:1f:35:7b:b7:af:a5:
                    65:47:ff:82:6b:b1:13:73:5d:72:f0:f0:26:e6:cc:
                    fe:c6:1a:fe:6f:17:2c:f7:bf:2f:38:1d:1b:1d:68:
                    3f:21:6c:56:53:d1:e7:cb:4e:12:2c:41:1d:7b:c4:
                    1a:45:5c:9c:b7:16:08:5b:25:55:96:d2:26:02:ec:
                    dd:e0:89:ee:40:9d:85:e6:13:3c:57:7f:87:59:ec:
                    bf:1d:ba:23:a5:e6:55:cf:1e:1f:ca:92:8b:a4:86:
                    da:fa:28:3d:98:1a:ac:75:a3:79:58:e1:94:06:de:
                    09:8c:76:f9:10:78:45:d7:98:67:4f:f4:56:cc:ca:
                    26:0d:5d:d8:96:04:0b:b3:8b:1e:b1:3f:84:ab:57:
                    fa:5d:a0:e0:c8:5b:85:b5:fe:41:3d:63:8a:17:95:
                    71:f9:c3:ba:cf:06:39:1f:1c:4f:28:47:db:81:cb:
                    ca:c8:80:5b:3b:3f:b4:fd:6a:09:4b:d2:c0:ee:a3:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:01:2C:83:37:1D:FF:B5:DE:BD:21:F5:DF:69:F2:B0:6B:26:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4badaebb-4e92-3e94-9a4b-34a8db68e609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:e2:22:d7:bd:22:1b:73:ef:b1:54:13:9e:21:cc:03:84:
         fd:70:fb:a1:f9:83:4d:f3:96:88:70:d3:40:27:d0:da:ea:7f:
         1a:03:11:9d:63:38:2f:4b:54:c6:ef:89:5b:b0:f2:65:cf:01:
         49:ec:f8:13:c1:d9:91:57:de:2b:50:3e:f6:04:69:01:fc:0e:
         a7:2a:47:34:f8:a5:dc:41:eb:52:56:a9:ab:b7:8c:54:89:29:
         1a:db:fc:91:68:4d:17:15:d4:8f:84:80:80:61:39:ca:3d:50:
         c8:5d:e1:35:1d:df:10:a6:7b:86:d2:ce:b7:9f:fe:60:9d:ba:
         12:de:6c:b7:4e:64:46:76:15:e9:8f:ff:cc:cb:96:c5:a7:ff:
         41:47:c1:b5:cd:e4:4d:f3:4a:6e:f6:43:cf:7d:15:f7:4b:d4:
         4f:b8:b6:11:ec:cd:1a:82:f6:04:7f:95:c6:11:a3:a5:87:9c:
         47:6c:08:93:3c:ca:1f:02:9d:fb:86:c4:3b:4e:a9:d8:ec:92:
         ee:02:8c:2e:10:eb:e6:69:eb:04:5c:48:20:59:d7:d8:13:8e:
         2c:e9:52:61:9c:48:93:1a:6a:13:5f:f7:b2:a1:97:f4:c7:70:
         e9:be:ca:db:0e:6f:94:4f:cf:e9:77:77:9b:1e:d0:1d:aa:57:
         f8:e0:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:03 2025 by rpki-client