Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e59f181-88e2-3611-b0f1-074e010613df.roa
File:                     5e59f181-88e2-3611-b0f1-074e010613df.roa (raw, json)
Hash identifier:          KXRjp+st7dWUqfEqI8bGkMFaW0TkXyXEYsorPsZ/mG8=
Subject key identifier:   AF:77:C1:3E:53:C6:0A:A3:A5:04:FE:54:E2:5F:EE:31:68:F6:3B:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB810B918298C3767F6E9640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e59f181-88e2-3611-b0f1-074e010613df.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:81:0b:91:82:98:c3:76:7f:6e:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=3d4093b7-d416-4022-8ebe-0ebc8e711c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:d0:8c:c7:34:b7:60:ca:f5:f1:73:40:8c:
                    d8:d0:d2:cd:24:54:c5:9c:bc:fb:54:00:65:53:bc:
                    cb:26:1d:6b:63:de:ba:86:47:01:76:26:c4:14:5f:
                    10:c2:5c:11:f8:5b:bf:0f:a2:3b:3b:1b:f8:d7:a1:
                    bc:91:72:e4:ad:68:c8:b5:23:c0:cd:ef:45:64:2e:
                    7f:8b:10:d3:a5:cc:62:f8:71:33:c9:a3:f2:58:c0:
                    3b:23:5e:d9:46:68:b0:d9:22:c3:87:c7:7c:de:f0:
                    e6:e2:49:98:31:00:a3:4f:9e:37:a6:b1:97:16:fa:
                    06:30:c7:cf:a1:29:0b:ef:cc:86:8e:0b:92:f6:eb:
                    fd:7f:d0:c0:8c:3b:27:10:74:ea:31:a3:a8:0d:2f:
                    8e:55:07:77:31:90:a3:d3:55:a5:00:50:bf:a3:cc:
                    49:1b:99:d8:fc:22:ce:fe:f3:60:e4:97:bb:38:1c:
                    ab:94:1a:fd:fb:52:d2:53:ed:54:95:38:fd:98:43:
                    bb:db:de:99:f0:fd:69:cc:52:fb:8b:9a:12:da:8e:
                    73:e4:84:3f:b5:e5:2c:5e:2a:87:a6:fc:fa:ec:3f:
                    dd:1f:4c:7e:4b:08:46:c5:41:d8:c5:81:f6:87:89:
                    a6:84:ec:97:f5:9d:42:75:7b:58:9b:9b:d8:64:e0:
                    3e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:C1:3E:53:C6:0A:A3:A5:04:FE:54:E2:5F:EE:31:68:F6:3B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e59f181-88e2-3611-b0f1-074e010613df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:1c:7a:22:5a:98:7f:1c:48:db:53:30:b2:55:4f:9b:7f:
         16:63:22:5d:f8:34:9b:39:6e:d0:c5:7b:77:75:c3:10:f8:e1:
         d5:e3:63:43:65:0d:80:9b:e9:f6:22:62:df:ec:ba:cc:1e:e4:
         18:a4:95:bd:db:23:c5:49:5d:e5:25:d0:7c:27:ab:da:68:ac:
         74:6d:49:0c:94:5b:48:55:e9:2b:4d:92:9e:ca:98:0b:b2:9d:
         5b:58:e5:58:26:ab:13:d7:1b:ff:30:a9:1d:ec:4b:56:07:61:
         a8:4a:ff:d8:52:0d:34:7a:16:c3:50:ed:05:7b:c2:ee:d3:7c:
         83:e6:be:a1:22:ce:34:83:04:33:4b:a3:cd:ed:00:ae:e7:9b:
         e1:fe:17:0b:a7:05:1a:c2:02:3d:35:75:a9:c9:c3:f8:46:e7:
         77:29:f8:43:ba:db:29:d1:7a:8f:e4:03:8f:d5:1e:14:68:71:
         12:71:bb:c6:a0:53:02:a1:d8:10:69:c0:31:77:45:b1:be:60:
         9d:35:08:31:7b:3a:37:1e:cb:0d:b7:db:b9:72:15:e7:d1:0b:
         c5:35:ed:a3:8c:1b:b4:94:da:c1:b8:21:06:08:5f:b9:27:f8:
         b0:80:1d:c2:39:bb:d4:32:33:0d:7f:c2:a5:2b:17:3a:fe:59:
         ab:85:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:56 2025 by rpki-client