Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53896dbd-fb6a-3a50-895d-c57aea6be124.roa
File:                     53896dbd-fb6a-3a50-895d-c57aea6be124.roa (raw, json)
Hash identifier:          ghbQ/KQuRhC+1eO3B/bxFCgyhnUf9qcUMn6ooWGtBmA=
Subject key identifier:   72:BC:83:4D:3A:B8:65:C2:71:AC:7D:18:EB:B4:DA:A2:05:D2:1A:82
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E29CFF1C3E330C456A2606880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53896dbd-fb6a-3a50-895d-c57aea6be124.roa
Signing time:             Mon 06 Jun 2022 12:00:00 +0000
ROA not before:           Mon 06 Jun 2022 12:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:29:cf:f1:c3:e3:30:c4:56:a2:60:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  6 12:00:00 2022 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=7def522d-04bc-4ba8-a65f-9e22037b6807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:6a:99:92:8e:0a:45:19:d4:a3:c8:b8:b0:
                    2f:54:3f:e7:42:1a:ec:5d:ea:72:a0:32:26:da:3c:
                    38:31:94:42:8b:cd:1b:24:4c:54:6b:54:8f:5a:b3:
                    08:c1:e0:81:28:15:35:77:47:46:bb:73:1a:d7:f4:
                    1a:74:f7:77:ca:a1:3a:f8:5a:32:8b:c1:7f:8b:13:
                    1b:ab:ed:62:bb:b0:8d:e4:69:06:01:b3:7a:12:a4:
                    16:d1:7c:ab:43:9e:e7:a1:c9:44:1a:2f:b9:ef:ae:
                    58:a7:2b:ad:79:fc:98:5a:83:c6:4c:b8:1a:2e:14:
                    19:8e:3e:d4:2e:36:53:fa:e8:d2:e8:ea:3c:80:fe:
                    c6:cc:5e:39:59:19:d3:41:32:48:8e:e0:47:60:4c:
                    6c:37:1b:44:7e:26:cd:75:23:e0:b7:c7:ae:8e:77:
                    79:c8:fc:52:7c:0a:d0:9f:f0:84:dc:1d:8b:4c:34:
                    f3:6a:72:73:be:b4:67:a1:d0:cb:08:3e:f7:1a:3d:
                    78:2c:72:b7:f6:5a:7f:c3:83:a5:97:b3:07:6c:de:
                    80:84:b1:48:40:51:6d:57:58:c5:67:d3:53:7f:4b:
                    df:64:d9:16:59:1f:a1:b6:5a:12:da:48:00:49:25:
                    cc:0f:95:4e:63:db:aa:bb:11:0b:75:15:bf:ec:66:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:83:4D:3A:B8:65:C2:71:AC:7D:18:EB:B4:DA:A2:05:D2:1A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53896dbd-fb6a-3a50-895d-c57aea6be124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:c7:b5:ec:db:70:4a:23:74:93:02:5c:58:c0:f7:5b:a2:
         af:78:1f:7c:6e:50:c9:6a:37:a8:a7:4d:ec:02:f4:dd:03:c2:
         1b:98:84:5c:47:3a:ac:ee:4c:39:8e:e7:d1:4d:a7:46:97:5d:
         0a:29:31:05:3c:f8:4b:99:67:93:28:07:61:cf:e7:3a:02:fe:
         ec:8d:c5:6d:e7:ff:77:e2:a4:28:7d:cd:4c:fb:ba:91:a1:e8:
         12:04:b8:8c:df:5d:8b:f3:88:63:0f:6b:d5:0b:eb:1d:3c:ea:
         4d:66:c0:44:01:72:fa:74:1b:46:6c:60:01:40:19:91:b4:1e:
         e6:2e:b8:b9:d5:7f:d9:0a:f2:8a:c5:fe:7c:58:fd:32:8b:68:
         26:39:50:02:c5:7c:18:29:be:18:4a:87:21:2b:a0:14:a9:8e:
         7d:bb:5f:27:2b:98:54:48:f9:2a:d6:84:0d:e8:00:18:c3:10:
         4d:24:6c:a2:4a:b7:c0:2d:a6:63:3d:3d:db:16:d2:f4:82:e0:
         8c:86:e5:bd:50:b6:27:fc:11:28:be:49:80:b7:e2:b7:5e:f4:
         c6:f8:5e:b7:8f:76:53:9f:a8:47:ff:2a:06:88:9e:e0:ae:02:
         34:15:9b:3f:4b:99:82:c8:7a:c2:35:2f:a5:5c:96:3d:07:b3:
         2b:54:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:04:36 2025 by rpki-client