Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a51d725-bba3-3dd1-a22f-a8d9b192c256.roa
File:                     5a51d725-bba3-3dd1-a22f-a8d9b192c256.roa (raw, json)
Hash identifier:          BrK8H6nz1a+tNRY+Leoh3KlANwHIMYUaKhlJROgx7lQ=
Subject key identifier:   73:80:A7:71:EA:86:D3:65:A4:AB:DD:C2:C9:E1:BC:81:11:3F:17:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7B5282BF8CBA58CB509BD1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a51d725-bba3-3dd1-a22f-a8d9b192c256.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.18.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7b:52:82:bf:8c:ba:58:cb:50:9b:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=e98c11a2-de03-4f3c-b3da-db42422755f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:09:9e:75:fa:f8:05:bc:d1:9d:34:c3:dc:
                    38:1e:3d:60:bf:91:6f:37:94:bd:2b:0b:46:b8:30:
                    56:e7:57:fc:cf:16:da:59:40:43:72:1b:6e:85:bd:
                    07:66:63:e0:66:1d:46:cc:6d:80:4c:c0:a2:18:69:
                    b6:d2:26:b3:ad:68:3f:ef:28:8a:30:1c:b8:fe:9e:
                    6a:f1:d1:7b:fa:7d:81:ef:76:a0:63:90:7b:72:79:
                    1d:a2:57:93:6a:9d:30:cf:69:48:62:e1:b7:16:7e:
                    98:87:1e:fd:0a:31:be:22:6a:19:af:06:ff:c3:15:
                    9e:3f:77:eb:3d:01:df:73:fd:6c:05:d1:18:83:b5:
                    ad:5c:04:89:34:4e:1d:f1:4f:c5:34:12:e3:65:4c:
                    56:ec:59:ff:c3:5d:b5:67:84:1f:35:f1:a4:a2:0b:
                    a8:e8:85:93:ac:94:eb:6f:4a:91:0a:b0:f8:a0:26:
                    eb:7a:5e:26:37:19:50:3c:fa:1b:98:f7:48:fa:58:
                    89:76:91:cb:37:ba:91:1e:bd:3f:6d:4e:d0:eb:05:
                    80:a2:6b:82:99:ab:a8:29:9d:18:a2:18:56:95:41:
                    b8:02:33:76:21:ea:6f:a0:3a:05:1a:07:e2:85:ed:
                    83:9b:88:95:80:5c:61:69:1d:18:2b:c5:eb:12:f2:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:A7:71:EA:86:D3:65:A4:AB:DD:C2:C9:E1:BC:81:11:3F:17:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a51d725-bba3-3dd1-a22f-a8d9b192c256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.18.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:ef:1f:30:32:7b:b5:89:07:cc:84:15:a6:e2:48:9b:ed:
         90:00:a4:a6:87:a1:91:c8:92:a6:87:de:b3:1f:ae:56:db:21:
         c4:3a:91:3a:9e:c3:e4:81:3f:b4:43:43:f7:0a:5e:6a:c5:e4:
         4c:e3:aa:36:e1:8f:e1:19:44:4c:c0:90:ce:ba:ba:5b:d7:31:
         42:8a:7a:09:23:c5:29:73:7c:6a:04:8a:4d:0e:99:d1:c3:82:
         f1:dc:39:b0:03:90:fc:99:0d:26:0f:35:b0:98:69:0d:86:34:
         98:95:52:5b:d6:e5:4f:be:51:93:b3:2a:ed:4b:da:ee:5f:60:
         e5:71:7f:04:96:6f:10:0b:4d:df:cd:12:3f:02:3e:eb:cf:1f:
         69:f8:c4:c0:22:39:a8:38:7f:f7:9b:2b:db:3a:4d:db:da:e9:
         58:cc:c3:9b:19:0a:7d:78:41:76:7a:d1:c3:53:9b:b5:43:82:
         a7:03:ae:af:8a:42:34:e6:08:e6:87:c5:64:c1:b3:ef:da:b3:
         6a:38:67:ef:8a:34:58:52:4e:be:f9:4b:1f:75:bb:5b:65:ed:
         02:29:fd:50:44:40:ff:b6:e9:d3:71:b5:dc:e6:e5:43:7a:70:
         e3:0a:5d:78:8c:8d:97:c9:20:d5:98:d3:5e:90:44:5a:79:18:
         b3:3a:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:46 2025 by rpki-client