Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/604c3ede-5df1-386e-a437-39ec089909eb.roa
File:                     604c3ede-5df1-386e-a437-39ec089909eb.roa (raw, json)
Hash identifier:          TefiRDIs5ViUUKtv9+TlsyANrOUPSphY6f4/0tKuWIU=
Subject key identifier:   F0:8D:13:C3:EB:C8:A5:1B:EF:45:1C:99:02:D6:14:F9:EA:99:92:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403EAF4A6B508033DBC276E180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/604c3ede-5df1-386e-a437-39ec089909eb.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.132.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:af:4a:6b:50:80:33:db:c2:76:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=47c87ded-8e53-4fc2-b2e9-8e4dc9696101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:70:1d:9d:ad:0d:8c:65:b7:3d:4b:5d:fe:
                    a2:73:69:99:a8:b4:96:32:4d:09:83:b4:e7:2e:df:
                    e1:72:66:5b:67:a0:20:1e:64:dd:dc:8d:0f:23:84:
                    1e:ba:15:e6:95:d1:7f:93:da:8a:5e:3a:23:19:e5:
                    47:51:1f:61:73:d4:43:c8:a6:ec:d4:67:38:48:6d:
                    df:34:19:e0:c0:2a:a8:9a:d1:a3:f8:76:93:a0:32:
                    ac:42:c2:e5:6e:20:8c:da:bf:98:49:75:8a:61:79:
                    09:59:85:e1:c0:02:6b:56:05:43:c7:52:1c:ff:20:
                    15:fd:85:3c:1b:ce:33:ae:ee:60:8a:42:26:4d:89:
                    0b:6b:c8:25:da:2d:47:7d:6a:31:bb:55:13:50:b4:
                    7b:bb:92:60:63:27:92:ed:03:77:5c:49:b1:3b:0b:
                    6d:f5:0f:03:d8:39:f5:7f:8e:1b:b3:5d:09:cd:8a:
                    7e:c2:67:47:3f:1b:2e:be:fc:b8:22:3f:1f:3a:2e:
                    3a:0f:7c:9f:20:a0:d9:af:6e:5c:8b:2e:09:a1:65:
                    e3:92:fc:47:48:f8:fc:e8:4a:4d:6b:65:65:61:b5:
                    56:e3:b9:6a:b3:4e:60:43:56:ee:68:93:88:5a:7d:
                    2d:f7:76:9a:49:dd:6a:41:39:d9:8b:15:04:fe:9f:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:13:C3:EB:C8:A5:1B:EF:45:1C:99:02:D6:14:F9:EA:99:92:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/604c3ede-5df1-386e-a437-39ec089909eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:93:9c:35:cb:c6:35:12:08:6f:ea:38:96:b1:e7:8c:56:
         22:7d:a0:29:7a:f0:bf:6f:ba:93:23:3f:e1:9d:72:9a:d2:94:
         52:da:b2:47:2b:49:1b:f5:95:b0:f4:ba:07:78:dd:be:91:24:
         31:2d:0c:a0:38:ef:3d:6d:73:1d:52:ac:69:8c:05:92:90:f8:
         18:14:23:f2:00:22:5a:27:c5:e5:60:4d:c5:79:f2:d5:3b:96:
         17:64:19:ee:34:2e:f0:7d:f2:64:17:8a:e1:85:cd:bf:ce:51:
         0a:da:e7:68:85:19:01:f1:4a:ec:60:f4:7f:fc:5d:97:ff:c3:
         2b:48:d5:f6:fa:9b:4e:a0:fe:53:b0:06:35:6b:b6:0c:81:b6:
         19:64:af:c9:74:86:4f:e4:55:b8:ea:09:5f:4e:a2:a5:aa:2c:
         04:92:9b:37:12:7f:60:3b:cb:83:d1:26:de:c7:23:d4:02:a5:
         3b:41:ec:0f:2b:f0:ae:f7:01:ee:e0:f9:eb:e8:5a:83:e2:47:
         06:84:d6:8f:64:e2:e5:cf:ac:bd:05:32:d1:2e:58:e5:97:6b:
         ce:25:32:22:73:12:80:b3:4a:3f:57:55:6d:00:e6:d0:84:25:
         96:7a:52:b2:15:b4:12:ae:29:2b:7e:a6:cc:18:ac:4d:c2:5f:
         b0:f3:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:19 2025 by rpki-client