Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf570a9-6e24-3f43-9407-48cf7d4f6c00.roa
File:                     4bf570a9-6e24-3f43-9407-48cf7d4f6c00.roa (raw, json)
Hash identifier:          H9m5jiSBwK1C29TfDbSaoLVDbv6TjZl2w4Yk9MNCeW4=
Subject key identifier:   D6:E9:4C:FB:B7:E0:95:07:D6:5F:29:F3:2D:40:1F:CE:4F:C0:76:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAEF84054B1964CEBF7FA8457
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf570a9-6e24-3f43-9407-48cf7d4f6c00.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ae:f8:40:54:b1:96:4c:eb:f7:fa:84:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=ea9f327e-9cb7-4b67-88b4-ccf0b01acd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:36:50:2d:44:40:19:03:78:61:98:bd:aa:
                    a7:b0:3b:9a:d3:4a:0a:07:26:21:cd:2a:a6:10:64:
                    de:89:fa:ea:91:99:1e:12:e4:50:35:5a:0f:ac:14:
                    41:d0:86:64:84:ec:d0:d8:2d:ae:97:79:ae:d4:fb:
                    40:24:83:5f:ab:49:7d:db:7c:d4:c2:ad:b2:07:4c:
                    29:e4:30:54:fc:40:3d:e0:3b:d2:c3:b0:d5:5a:35:
                    ba:f3:71:d7:98:6a:f5:a2:db:83:58:5e:bc:db:42:
                    a9:8c:01:d2:20:f8:bb:65:9a:28:cb:77:f4:6a:e8:
                    c4:8a:ca:5a:dd:08:11:cd:54:cd:24:a2:5b:03:1b:
                    b5:29:e1:dc:37:ce:43:59:b6:fb:08:2f:45:6e:63:
                    ea:cb:25:d7:f1:c9:b5:4d:ee:0e:cd:76:a7:95:91:
                    14:a1:44:29:d9:e9:60:09:24:b3:d4:d1:39:56:15:
                    30:f5:c9:4b:47:04:94:50:ce:fa:da:14:7b:42:9a:
                    77:00:00:61:26:b3:a8:d3:28:b3:22:cf:99:be:0f:
                    c0:5c:51:58:34:ea:86:36:fc:93:c2:d6:c2:6c:95:
                    85:ae:4d:98:1b:6b:f9:58:55:e9:d2:0c:40:0f:09:
                    69:4d:b9:ee:da:64:fb:41:79:1b:68:1e:bb:cf:18:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E9:4C:FB:B7:E0:95:07:D6:5F:29:F3:2D:40:1F:CE:4F:C0:76:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf570a9-6e24-3f43-9407-48cf7d4f6c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:88:bc:3e:f8:ce:0c:70:f2:04:ff:38:37:45:bf:2e:95:
         a7:83:e0:f8:70:0d:7f:47:a4:61:8f:51:93:79:16:f1:55:d3:
         3f:56:07:b7:cb:86:27:86:2c:dd:3f:50:6d:8d:a6:ec:ea:6f:
         fd:8e:6c:a1:6a:75:ad:e8:12:ca:da:6b:47:98:52:bb:13:3b:
         46:41:1c:7f:a3:1e:5f:0a:89:72:dc:84:14:53:f5:37:44:ac:
         5e:3f:4c:84:6c:61:49:af:2f:61:42:d5:e8:78:af:79:ed:28:
         43:3f:21:58:42:d6:63:1f:31:c3:94:7e:23:b5:3f:32:62:14:
         36:83:f8:84:40:62:ac:a3:92:9a:f5:4f:85:6b:ee:36:92:38:
         5d:f2:6c:34:8e:d2:66:cd:5c:9c:25:e6:6a:5f:9c:2b:17:0f:
         21:6c:d5:4a:63:50:dc:9d:b5:f5:03:1a:57:fe:01:31:c2:1f:
         29:0a:bb:7f:ff:7c:9f:94:1e:44:67:ff:68:c5:ae:38:61:1c:
         e0:f3:3a:46:2a:66:c6:6a:84:77:91:4b:97:1b:3b:5c:f9:f7:
         40:5a:54:b3:68:19:40:82:1d:66:0b:d5:50:be:f9:63:9e:c7:
         4c:42:8c:5b:1a:15:3e:35:35:6f:5b:0c:92:f9:5a:9a:ec:b3:
         81:9a:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:55 2025 by rpki-client