Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d42991d-309a-3468-8f35-b57b45644610.roa
File:                     4d42991d-309a-3468-8f35-b57b45644610.roa (raw, json)
Hash identifier:          BOX5uvUnRiZFMubfVrCdBGgCbs2itqSc0n3HlSE+qnY=
Subject key identifier:   61:F9:72:AB:C5:7F:1E:A3:15:EF:B3:5E:85:E3:47:2F:39:F9:C4:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2B437E65254F9DD6D0D71A20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d42991d-309a-3468-8f35-b57b45644610.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.156.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2b:43:7e:65:25:4f:9d:d6:d0:d7:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=98de7f5c-0f61-46f1-a2ea-6d0103cad9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c6:f8:4a:70:62:4e:29:68:83:a0:a9:c0:e5:
                    21:8b:d8:45:09:e3:7c:65:c2:35:d6:82:40:60:95:
                    bd:8d:68:24:a7:31:f0:22:78:96:d5:f5:0f:5a:ff:
                    05:4b:5e:86:6a:fa:2b:08:d5:c6:39:39:b9:61:95:
                    75:02:6a:08:aa:d7:3b:40:a6:ae:9b:91:62:88:27:
                    13:8c:63:f6:ad:da:d5:6a:3d:49:72:1d:f7:09:96:
                    87:1f:ab:2e:cf:3a:fa:6f:b0:a5:a3:e5:a7:e9:b1:
                    8b:85:78:b5:29:be:01:56:66:c9:7c:19:0b:12:0f:
                    89:bf:5f:04:ea:e2:a1:c9:2c:50:ba:84:f0:88:95:
                    1b:a8:20:8a:5b:0f:a8:a8:24:25:a2:63:79:33:b4:
                    94:a6:1b:df:0f:68:da:d3:96:bf:68:74:cc:b4:91:
                    9f:f9:0c:5b:8a:1f:0a:24:88:ca:11:ac:71:e6:46:
                    d9:b4:bb:07:d0:19:2c:9d:76:15:8f:3b:b1:92:5e:
                    f8:5b:65:c1:b3:91:67:e4:2e:d7:f4:73:cc:5d:fc:
                    37:a6:65:e8:5f:a5:54:e0:cc:fa:22:cd:b8:cf:19:
                    d2:3e:32:8c:11:30:e4:46:a6:b7:de:0f:31:33:8b:
                    bf:a3:19:16:00:c6:16:f3:9e:c6:68:e6:8a:3a:a7:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F9:72:AB:C5:7F:1E:A3:15:EF:B3:5E:85:E3:47:2F:39:F9:C4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d42991d-309a-3468-8f35-b57b45644610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:28:60:01:5b:e6:94:d2:25:ae:2b:b0:64:19:fc:ca:34:90:
         29:78:30:9d:f5:17:00:84:d8:13:e4:36:08:66:83:e7:51:82:
         81:d8:62:d7:99:17:82:9f:38:4e:18:bc:42:a1:3a:c8:57:bb:
         92:d0:7a:01:89:15:81:e0:71:0e:2a:db:64:5c:a8:96:83:ab:
         91:66:27:01:b0:01:c3:33:96:e7:ac:ed:29:33:af:61:7c:cd:
         39:6a:06:46:01:c6:23:24:af:e7:cc:95:3b:83:16:ab:b3:8f:
         d3:ae:8e:58:9f:44:c3:f9:df:e2:38:4a:87:51:91:9f:31:11:
         3b:f0:69:de:63:c5:17:a5:b0:5c:12:c2:1f:46:d7:a5:ef:0f:
         3f:60:94:73:d5:27:39:1f:b0:78:9e:18:f5:25:17:1c:e4:92:
         91:17:91:be:8d:7d:3c:cc:23:0d:b6:18:55:b5:44:20:f2:f1:
         81:24:94:2d:ab:d0:da:7e:ab:03:ec:81:39:6c:bc:bd:98:12:
         4f:c4:97:53:8d:2e:83:88:4c:2e:77:7f:b5:75:fe:29:95:6b:
         9d:f3:ca:0e:24:36:96:de:b1:27:b1:b7:cb:10:ad:7c:5c:62:
         e0:d1:a4:89:73:24:9a:79:7c:5f:00:5f:f9:ba:50:b8:1f:6a:
         43:c5:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:53 2025 by rpki-client