Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c85838-4502-366d-9cc9-ce5bf327ac71.roa
File:                     53c85838-4502-366d-9cc9-ce5bf327ac71.roa (raw, json)
Hash identifier:          I4yVQvvxBV1scUx7h2dvypII9n94ZI+D11omtiPjpf0=
Subject key identifier:   BF:95:EA:63:2F:FD:EA:68:96:29:C5:1E:7A:EA:6F:B0:EA:DA:46:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D08422E1C609E1D9EA9F28E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c85838-4502-366d-9cc9-ce5bf327ac71.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:08:42:2e:1c:60:9e:1d:9e:a9:f2:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=0e26a8bc-6e58-4337-a276-0da7768133f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:3e:cc:93:06:fd:0d:28:5e:f0:31:87:f3:
                    42:e7:e1:db:c1:d8:92:ae:e8:8b:e9:ff:64:e2:61:
                    29:cc:19:79:9a:0f:80:99:f8:c5:cd:2f:6c:e3:d8:
                    b8:02:82:fa:71:d2:f0:fd:11:58:65:35:8a:2c:ba:
                    49:20:eb:1f:7e:5d:86:02:4a:9d:2d:b8:cb:41:1c:
                    29:6a:ab:f6:e3:6a:57:6e:1a:f3:f6:15:40:d4:2c:
                    21:b0:34:8d:25:43:13:28:f1:86:06:2a:14:12:e4:
                    f9:57:84:b4:49:43:e1:c2:50:17:c8:da:7e:2b:a0:
                    c7:c0:b1:37:f7:b7:40:94:7f:32:ab:22:e3:91:c0:
                    9c:8c:ec:74:3f:70:b0:97:c8:92:51:d7:39:27:8b:
                    08:99:f1:62:d7:88:01:ed:da:bd:f9:fa:d6:5b:84:
                    11:39:61:d1:b7:d0:24:c3:8e:55:5b:64:e2:60:26:
                    61:22:d3:16:59:44:fe:6f:58:8b:1f:c2:2c:e3:c6:
                    26:8c:b7:2e:a4:80:01:24:c3:e1:66:ee:81:18:90:
                    76:e0:a6:b1:06:81:7d:45:1d:c5:1e:72:81:98:6a:
                    11:e2:0c:cd:2c:12:91:39:af:80:68:59:74:de:af:
                    61:da:fc:e8:4c:25:34:6f:e9:32:82:6f:1c:27:f5:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:EA:63:2F:FD:EA:68:96:29:C5:1E:7A:EA:6F:B0:EA:DA:46:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53c85838-4502-366d-9cc9-ce5bf327ac71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:57:43:f2:1a:c2:0b:77:2b:09:4c:cf:a6:52:3f:0f:df:
         34:2f:e2:21:18:0c:0f:e7:1a:31:5f:e5:31:2b:e2:1f:6a:ab:
         c5:b2:bc:93:f7:36:29:b9:69:6d:72:ee:5e:bf:0b:b9:67:6c:
         f6:ba:3c:49:36:f8:d1:d8:4a:dd:da:5a:3d:46:2b:4b:d3:59:
         29:d0:b5:e8:48:f3:95:f3:d0:16:3f:c7:43:a1:e1:2c:5a:42:
         c6:c4:40:9e:8a:4b:90:70:53:3b:42:e9:87:80:e3:16:ab:13:
         78:c3:eb:c3:91:96:ab:c5:d6:3c:51:8f:4c:a0:36:55:e2:d5:
         d9:4f:04:1a:1a:fe:22:fe:53:2f:58:0c:a9:81:0e:12:87:55:
         0c:d8:a8:5f:6a:30:1c:45:d0:0a:1f:a3:b6:1b:df:cd:21:f8:
         66:99:4c:8b:6d:f5:36:4a:03:2c:d8:c3:a7:a7:cb:9a:ca:bd:
         05:87:09:15:43:7d:e0:ea:cd:a0:22:a2:85:09:88:cf:76:2a:
         c0:b8:ac:e8:dc:3b:69:e2:e4:52:80:f6:b2:e3:d5:94:bd:7e:
         06:8c:c1:5d:5c:a5:12:80:d7:da:9a:0f:fe:44:b3:cf:1a:bf:
         14:a4:73:5e:09:b6:8d:b9:5a:7f:18:84:ec:bd:bd:49:6e:27:
         a6:ec:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:56 2025 by rpki-client