Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52319e3a-f583-358b-a9ba-34de2f72dd19.roa
File:                     52319e3a-f583-358b-a9ba-34de2f72dd19.roa (raw, json)
Hash identifier:          OHDKPQhE7PfFo2WuVSJCMaMpVtTvWBxwICEnnq63Ze0=
Subject key identifier:   5E:3D:67:03:29:31:F5:28:EE:A6:31:48:39:C7:6A:40:2F:EF:9A:AB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F82D3402F3201E58FE07E2C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52319e3a-f583-358b-a9ba-34de2f72dd19.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:82:d3:40:2f:32:01:e5:8f:e0:7e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=d3ef5814-eeff-44b5-b87b-0788cd0bb93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:46:59:2f:c1:c2:80:58:70:d3:6d:40:6d:
                    2d:c1:c1:c4:1c:a7:19:69:a5:5a:ad:c3:af:ba:13:
                    58:ef:5c:89:36:04:01:6f:e8:6d:ca:bf:bb:3d:e4:
                    5d:34:30:67:99:ce:5a:cb:f7:09:99:82:48:cd:59:
                    cf:be:0d:7e:9f:77:03:ae:4c:71:c3:4f:69:96:1c:
                    f1:82:73:cc:19:0e:3a:69:0f:c6:9b:8a:96:63:9d:
                    fa:3d:49:3d:03:67:a1:de:13:a9:b1:d0:8f:6a:f5:
                    d6:fe:b0:3d:6e:65:da:08:44:d3:89:ed:c8:80:e9:
                    a0:dc:ce:2e:af:ef:5d:79:84:0e:e1:77:8f:11:9d:
                    88:5b:0a:ba:ba:64:54:62:e7:48:ac:51:3a:d0:d9:
                    dd:53:1e:d4:87:55:e8:78:bf:4d:ee:0d:60:74:2c:
                    9d:05:df:f5:3d:56:8f:7f:15:c9:c3:1e:86:f1:76:
                    bf:95:31:47:08:d0:b9:4f:3a:b5:27:a6:2a:18:77:
                    40:c0:7a:7a:fb:9c:9c:ea:6f:44:52:c8:28:8d:59:
                    cd:72:d5:d4:0f:12:84:50:d6:bd:04:d5:94:27:5f:
                    c4:34:83:53:bc:08:cf:b3:da:a5:2a:69:0e:b9:a6:
                    3f:29:d5:d9:c1:13:1b:21:04:eb:ab:57:6d:2e:f2:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:67:03:29:31:F5:28:EE:A6:31:48:39:C7:6A:40:2F:EF:9A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52319e3a-f583-358b-a9ba-34de2f72dd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:a8:8b:76:7f:c2:e2:a5:d6:41:f2:0a:f1:1d:03:4e:20:
         25:c2:16:4d:d7:fc:0a:40:7f:86:68:b9:0a:d7:38:b2:f5:e5:
         e8:da:f0:3a:57:7b:b8:26:4b:6d:ff:c6:af:63:45:3a:a1:66:
         dc:03:92:07:55:ea:da:2f:56:77:24:50:d7:39:83:c3:cc:4d:
         fc:3b:34:ec:4e:6f:71:77:ba:40:4e:95:b8:83:f0:3c:1f:5b:
         40:e9:c4:46:b3:02:53:0b:d6:e3:23:b0:c6:75:5c:d5:89:33:
         e0:43:85:8c:f1:35:20:bb:88:83:0c:7d:86:cb:8f:a1:f0:26:
         0f:73:e4:6e:4a:1a:ec:57:04:e6:e3:85:30:5d:96:be:b7:90:
         a7:97:ac:eb:e3:32:9e:48:10:f5:32:41:a1:88:6e:75:c7:de:
         02:c2:e6:c4:3b:e4:f4:09:f4:25:30:f6:10:47:1d:9f:5c:7b:
         22:11:8c:ea:c6:02:35:c6:86:77:a0:3c:ea:ab:71:f2:e3:9d:
         4c:a1:ec:0e:38:c7:f4:d5:a8:34:40:f0:25:79:2e:aa:87:28:
         2f:73:a5:41:5b:01:0c:44:94:4f:b0:ef:ef:e6:0b:53:78:4b:
         51:53:a7:4b:bf:1d:9c:d8:b1:46:e7:9e:31:e6:8b:fd:5f:81:
         5e:a5:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:46 2025 by rpki-client