Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580f447a-5244-3455-9790-48fac773f89e.roa
File:                     580f447a-5244-3455-9790-48fac773f89e.roa (raw, json)
Hash identifier:          AHJz++el0+0vcTSqj5hFDktKu2+jLxfAQV66W/sfcp8=
Subject key identifier:   53:8A:DB:6C:BB:6C:54:CE:36:F6:A8:92:FC:8D:1C:80:1B:4B:2A:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCC85BFC9F5762B2EB1F610C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580f447a-5244-3455-9790-48fac773f89e.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:85:bf:c9:f5:76:2b:2e:b1:f6:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=19214671-b5fb-45ff-8b95-e1c12aa13b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:40:da:b4:3d:50:ee:3a:40:fa:12:9a:f8:
                    05:57:ca:b7:9a:6f:a9:d7:15:1e:52:a6:6d:ab:04:
                    b9:15:ba:30:ac:19:b5:8f:c7:49:a1:85:21:eb:a9:
                    d6:d6:6f:12:d8:7a:27:60:48:0c:1e:76:ac:87:c2:
                    91:f7:3c:cb:af:19:a3:17:4a:c7:3d:7b:34:5f:6d:
                    8b:31:a8:17:99:7d:6b:19:16:61:cb:21:dc:d5:1b:
                    c1:7d:8b:06:e0:cd:81:4c:ad:62:d2:b9:c7:8f:a8:
                    84:7e:13:4e:dd:63:5c:66:a4:4e:09:ce:f6:e6:92:
                    2d:73:da:b4:03:96:5b:bd:79:40:02:f7:76:10:a9:
                    7b:8b:90:d7:f9:6c:cd:89:f3:58:f3:88:fb:c5:0a:
                    35:40:f3:44:26:a4:9c:42:54:31:60:3c:5b:c6:84:
                    f7:a2:ef:8b:00:83:49:cd:d5:02:2f:cc:a8:98:fb:
                    35:7b:36:0a:b9:21:c6:24:61:cb:27:f8:d6:ef:8b:
                    9d:48:f6:e7:d6:ab:8a:5c:14:fd:93:4a:8f:fe:9e:
                    e0:4c:10:88:bc:b5:28:a7:6f:a7:7a:3b:32:a0:e1:
                    ce:d5:af:18:8f:bb:84:92:e1:79:6a:16:c3:69:2e:
                    82:65:c0:32:84:2a:54:d4:2f:bf:d4:bd:56:1d:e3:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:DB:6C:BB:6C:54:CE:36:F6:A8:92:FC:8D:1C:80:1B:4B:2A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/580f447a-5244-3455-9790-48fac773f89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:32:7e:e2:2a:30:fd:4e:0e:79:f4:93:70:b4:67:30:3d:
         67:0a:29:93:4a:c1:30:4e:2a:94:e4:6f:00:15:91:ef:de:26:
         fa:c8:ea:4e:0a:21:d4:72:61:03:a9:95:8b:7f:7c:14:cc:50:
         3b:17:b8:e0:0a:e6:19:5f:0f:ae:51:0f:ea:70:a5:9e:72:f3:
         b9:2a:c4:61:ae:69:ed:54:cf:bf:39:ad:be:51:fc:1f:fd:5d:
         fb:59:0f:51:8b:b4:0f:f1:62:1e:7a:5c:5e:5c:b8:e3:43:43:
         52:67:7c:b4:68:5f:c2:86:90:60:6a:5e:7d:66:db:50:6e:a6:
         8a:e8:86:ce:c9:11:bb:66:96:0b:ed:2b:70:d6:5e:37:5d:bb:
         da:b1:36:84:09:2e:a6:6d:02:03:11:19:65:c8:b7:1a:8c:08:
         bf:92:6e:79:0f:7f:62:e4:af:9f:25:a5:8f:73:4e:13:9b:10:
         a6:db:5d:bb:80:1f:ce:a5:0b:97:14:02:df:8d:44:75:ac:d7:
         65:d3:eb:1f:59:aa:87:dc:63:9c:5c:3e:61:d6:7c:02:05:75:
         ed:d7:27:b5:79:0d:59:9b:e8:45:8f:ca:07:f1:ca:f0:56:99:
         1e:0e:c0:64:68:7b:7c:dd:ca:97:90:11:66:e0:0e:e0:53:d0:
         7c:5a:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:53 2025 by rpki-client