Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cfeb8a1-4199-3683-bdce-b217f990bd0f.roa
File:                     5cfeb8a1-4199-3683-bdce-b217f990bd0f.roa (raw, json)
Hash identifier:          odYPtg2Tr1xCNH+DsSSL6uzl9ZPVCX/S0w+Etury+A8=
Subject key identifier:   DE:EE:58:D5:75:49:9F:93:0F:14:BD:44:6F:DE:F2:19:B0:4C:74:55
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6A5F09E59D77CFE33CDF3D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cfeb8a1-4199-3683-bdce-b217f990bd0f.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6a:5f:09:e5:9d:77:cf:e3:3c:df:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=5628d2ce-8049-4b43-aedb-22812b52a153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:e6:ba:f7:a9:11:97:b5:d9:8d:93:61:25:
                    bc:e3:05:41:a3:fb:d3:c1:61:81:76:e7:c7:cf:fa:
                    a0:b2:19:8a:0c:47:93:ec:d8:d6:a7:eb:3b:fc:60:
                    74:6b:ef:ff:56:27:3b:1d:06:1a:f6:60:cb:a8:5f:
                    77:2d:54:94:ab:24:cd:53:4f:9d:95:d1:c8:52:e2:
                    50:ce:25:04:8d:8b:cd:ee:05:00:5c:cc:5c:2f:59:
                    6b:fb:71:01:76:a1:ce:ad:62:12:e5:ea:55:d1:00:
                    08:45:53:10:0c:72:53:f0:9c:e8:0e:d2:b7:09:b7:
                    7f:f6:a9:7f:da:e6:e6:9c:24:81:5e:03:96:cc:ec:
                    d8:dd:ab:34:29:ac:e1:89:c1:57:09:de:a3:64:c9:
                    db:1c:5d:fd:ea:39:76:cc:5a:28:d0:66:ef:67:85:
                    bc:cd:1e:0a:73:76:0b:4c:26:04:33:29:c8:7b:61:
                    47:d1:eb:a3:ba:a5:ba:f8:01:e0:0c:9e:c2:ba:fc:
                    09:62:af:36:99:c4:ae:75:92:7d:57:26:d7:01:c4:
                    1d:2e:4a:25:3d:f5:a5:68:56:cb:af:d0:f7:e4:af:
                    c5:15:9c:e6:17:cc:b0:17:03:3c:5e:1a:12:df:65:
                    7e:b1:43:3c:38:22:82:3b:1c:2c:38:58:30:36:3a:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EE:58:D5:75:49:9F:93:0F:14:BD:44:6F:DE:F2:19:B0:4C:74:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cfeb8a1-4199-3683-bdce-b217f990bd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:40:d4:3c:22:1a:8b:7b:e6:8a:b9:28:55:99:13:89:91:
         03:1d:10:81:c5:df:2f:cb:83:11:99:a3:e1:2d:d0:36:fb:a5:
         b8:5c:f2:51:d4:40:9c:a8:17:67:dc:41:81:df:f9:e7:39:c3:
         83:41:37:50:d1:83:d8:ac:5f:02:46:96:d7:8a:c1:9d:6e:89:
         e9:ce:4a:f5:26:98:91:b6:cd:fd:95:fa:b5:5e:d5:16:9c:3b:
         d1:06:8b:7f:7f:ce:b8:85:59:bd:05:b1:94:13:b1:bd:3f:e1:
         b3:be:ab:a2:11:bb:ef:4a:77:7a:fd:a2:56:ca:bd:9e:36:6a:
         3b:7b:1a:ba:41:e0:43:0c:ae:79:63:d9:d4:0a:1f:30:f2:f7:
         7d:eb:f3:a7:e1:7f:e8:ba:d1:78:f2:23:31:d9:aa:0c:24:4c:
         9d:14:1d:fe:e2:63:32:80:a5:e8:af:31:d7:aa:5b:ae:d6:3e:
         24:e0:b9:e2:4a:a0:55:75:65:a0:25:5e:0c:6d:82:27:ac:57:
         6d:2a:43:d4:04:5e:be:57:fb:91:14:66:bd:b6:6b:3f:c2:33:
         93:d2:fa:99:91:2a:a0:c2:ec:14:16:50:e9:5e:ae:65:11:5d:
         81:78:d7:1f:93:81:f7:4b:58:b3:04:1a:6a:1c:fa:e3:ee:ed:
         6e:83:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:43 2025 by rpki-client