Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f2ee20d-1714-3946-bc0a-6e5dd8d8db7a.roa
File:                     5f2ee20d-1714-3946-bc0a-6e5dd8d8db7a.roa (raw, json)
Hash identifier:          yLeAeF1FsdCIEdPEeALCpvb2C/FSLoUPIHQb0/F9XbM=
Subject key identifier:   15:C5:3A:65:3C:C2:89:61:14:EF:89:D8:61:9B:62:E8:05:4A:7A:13
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF05EDCD04834D267B8433B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f2ee20d-1714-3946-bc0a-6e5dd8d8db7a.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f0:5e:dc:d0:48:34:d2:67:b8:43:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=a06941c1-6100-4458-9672-3b74d5a5e31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:fa:7f:10:2c:70:bf:81:15:7e:83:35:1c:
                    38:00:d2:20:42:c9:b0:fc:76:8a:03:bb:41:cd:cd:
                    d4:57:7f:19:5e:08:95:dc:02:be:69:5f:13:ed:9c:
                    d9:a5:98:f9:4a:1f:f3:0f:f9:ae:4f:a1:5e:61:a4:
                    b6:c9:48:44:ba:68:4b:7b:6b:a2:3c:2e:58:01:aa:
                    40:2e:b8:4c:96:f0:11:7a:42:ba:c9:7d:b8:4b:a0:
                    44:a0:c6:a4:cd:60:ab:a0:67:15:46:0d:45:d3:78:
                    25:54:45:b4:9c:f9:59:08:e2:03:41:ae:7d:00:d0:
                    e0:a6:43:cb:5b:a2:9f:7a:de:27:00:6a:9e:bb:80:
                    f5:98:66:61:c8:fa:25:04:33:e3:f6:04:4a:0e:83:
                    0b:d9:bb:f8:8c:06:f4:b8:e9:c9:9b:a4:62:0d:32:
                    b4:fa:f5:71:48:25:00:6a:d7:36:a0:e3:15:69:40:
                    8a:2b:86:d3:22:b1:5c:dd:b8:5d:8b:30:06:4b:54:
                    5b:5c:db:73:21:14:90:86:46:59:4a:cd:63:41:44:
                    95:13:fd:f9:e8:a3:48:80:62:1b:0e:dc:5d:9e:2c:
                    cf:aa:0e:fe:98:9d:90:53:70:d3:69:25:ed:1d:80:
                    19:3a:0f:bf:bf:32:e4:d1:28:28:96:a6:00:49:ba:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:3A:65:3C:C2:89:61:14:EF:89:D8:61:9B:62:E8:05:4A:7A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f2ee20d-1714-3946-bc0a-6e5dd8d8db7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:09:38:dc:b7:eb:3a:a8:6c:9f:e0:53:71:42:1c:bb:da:
         b8:48:af:3a:6d:bf:c7:70:52:85:27:78:e8:59:ce:b5:49:c3:
         17:93:c5:b4:ab:b7:59:e0:53:cd:3a:80:a7:71:16:31:4c:71:
         83:8e:9b:f4:f5:06:84:69:cd:19:be:bc:15:5b:59:22:fa:89:
         56:df:a0:79:6e:98:89:4f:fe:fc:44:fc:bb:ae:6c:c1:db:e8:
         38:66:dc:b8:b5:58:47:56:69:e1:5f:19:53:a9:65:b7:2e:7d:
         35:92:a0:42:82:bd:30:f3:0b:2f:5f:c1:df:eb:b7:2c:b4:48:
         52:e1:6b:5d:d6:4c:9c:ab:25:0a:6d:56:27:e7:aa:f4:ea:b6:
         45:5a:10:cc:0b:c5:33:1f:79:9e:eb:7e:81:7d:ff:31:28:a5:
         82:18:04:24:ce:98:c0:be:a5:5a:e7:2c:fb:79:e0:1b:72:ec:
         15:d6:33:83:f3:e9:0c:24:3d:46:76:53:71:ad:56:71:cf:b0:
         02:38:f8:97:f0:f4:81:d3:5a:b6:2f:62:73:20:ea:02:e7:16:
         11:cb:8d:49:f5:1f:13:08:03:b8:8b:ec:53:33:bb:d2:3d:99:
         b4:70:c5:3e:4d:20:54:9c:e1:7b:82:20:a9:e0:e0:1b:4e:ef:
         b3:59:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:52 2025 by rpki-client