Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/600fdb1c-9c1b-3f89-8dfb-7f7f266d28af.roa
File:                     600fdb1c-9c1b-3f89-8dfb-7f7f266d28af.roa (raw, json)
Hash identifier:          TAloll7uOlrgfiQm/zxx9XH+qVa73lHzguRDVQOxWQE=
Subject key identifier:   CA:91:BB:1E:9D:C4:38:DE:18:2E:CC:D6:8E:5C:C9:90:0C:5D:F5:94
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D58A2FE86CB7FA6A04BC763A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/600fdb1c-9c1b-3f89-8dfb-7f7f266d28af.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:58:a2:fe:86:cb:7f:a6:a0:4b:c7:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=916ad763-c16a-4944-b067-32d645753937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:ad:cf:ad:cf:86:58:b8:dd:74:0d:9b:b9:
                    80:ce:8b:41:5d:b5:83:62:52:14:71:a4:a0:1a:f3:
                    94:7d:9f:e8:b8:0f:19:5a:12:70:c9:76:31:84:eb:
                    b9:27:6d:01:76:7b:f7:43:aa:94:50:b9:b5:19:2b:
                    cc:28:43:9d:dd:b8:8d:cf:f1:97:15:70:e6:ef:b0:
                    b9:27:4f:48:bc:33:54:85:9d:3f:ad:73:69:c3:f0:
                    bd:c0:99:63:eb:fb:e3:ee:bc:c4:71:57:a4:db:60:
                    00:33:fa:db:7e:85:f0:ee:22:a0:5e:91:02:4a:78:
                    af:53:5e:45:ef:ae:d0:32:48:48:89:19:52:c7:e7:
                    b8:68:3a:69:b4:ac:53:21:58:40:82:bc:ba:f3:56:
                    f7:74:31:57:2a:01:67:0a:4c:27:dd:30:74:74:64:
                    1b:97:a7:b9:b7:54:cb:25:fe:1b:51:25:71:ba:0e:
                    51:33:83:ab:d6:35:c0:47:f0:b1:39:5c:f0:1f:89:
                    cc:4b:6b:51:84:a5:dc:0f:b8:32:de:92:a8:91:1d:
                    27:a8:4b:e1:ba:e1:91:f6:e4:ba:7b:ee:6f:17:05:
                    46:88:79:06:1a:fb:28:7f:60:82:ca:9d:a2:d5:3d:
                    aa:a3:d5:22:11:88:8f:d9:a6:d8:db:aa:63:23:23:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:BB:1E:9D:C4:38:DE:18:2E:CC:D6:8E:5C:C9:90:0C:5D:F5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/600fdb1c-9c1b-3f89-8dfb-7f7f266d28af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:29:52:91:06:07:d6:6d:1a:41:8b:b2:6f:a7:63:99:c3:
         1e:fc:a2:6c:8d:ed:c9:49:88:c3:8a:cc:00:9d:87:70:c9:cd:
         df:79:6e:b3:b6:5f:b4:61:52:57:bd:d0:d3:c0:f6:cb:2d:02:
         1d:7f:33:8a:ec:c5:94:03:cf:eb:ba:4f:66:c1:46:b9:28:95:
         a7:e2:d9:82:08:27:45:75:9a:ef:5b:84:cd:07:e7:dd:a4:a9:
         1f:53:17:5e:1f:b1:e1:ce:b1:bb:bf:1e:9a:51:c2:e1:9e:2e:
         32:49:8b:af:18:0d:06:63:e2:2e:10:98:b2:93:4e:c6:1a:5a:
         46:ea:35:4f:49:71:9b:b5:ce:c4:bc:70:b7:37:73:21:2d:c6:
         c3:7b:70:89:08:6c:e6:61:5d:d2:a0:44:ac:df:90:45:38:25:
         cc:26:d4:88:ed:d4:3d:60:4c:30:23:39:d2:cf:ac:89:a9:18:
         21:6a:c4:4d:35:14:5d:09:31:01:10:67:d8:31:62:5d:c2:01:
         49:b3:39:80:79:88:9a:7d:19:5f:03:d9:0c:fb:6d:89:22:b1:
         52:1e:33:f0:14:ae:3c:e3:3b:83:14:d8:90:b4:fb:4d:42:33:
         68:bb:19:23:0c:29:ff:bc:ff:73:1c:e3:d2:7a:4b:76:04:43:
         bd:b1:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:18 2025 by rpki-client