Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6167b8e5-6baf-3749-ac62-807eff2a976b.roa
File:                     6167b8e5-6baf-3749-ac62-807eff2a976b.roa (raw, json)
Hash identifier:          isIbuqWW0j5yMG6VU/nbabCqSFbndWqf2igGEKfrX7w=
Subject key identifier:   EA:21:F7:62:33:15:0F:05:0E:DF:CE:CC:97:B4:39:B7:27:47:96:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840178B120389672CE66C680380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6167b8e5-6baf-3749-ac62-807eff2a976b.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:8b:12:03:89:67:2c:e6:6c:68:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=b89ddd00-5477-4557-ac7e-1e51e79b6ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:72:d4:0b:d5:3c:76:a9:1c:c8:a7:2a:ed:
                    6a:05:14:8f:b5:2c:d8:bf:94:9a:e0:ec:0a:ee:65:
                    ec:6a:92:e1:a0:7e:4f:ad:40:29:55:dd:ff:0f:4d:
                    c6:46:e1:92:66:1c:a9:61:21:c3:9d:c1:32:a8:d9:
                    c1:bb:b8:97:eb:42:63:04:14:75:0e:53:25:ed:5c:
                    af:5a:42:2d:b3:4b:20:65:13:1d:2b:57:e0:da:c2:
                    ba:1e:8f:e8:5f:62:f7:95:92:dc:53:09:4e:8f:25:
                    95:3b:83:c6:92:e7:3e:6a:a5:8d:d3:2c:62:96:0a:
                    59:62:64:b9:0d:fa:8b:5e:aa:60:a4:6d:cc:78:f4:
                    12:85:ce:90:c1:48:ad:ea:f2:ed:e1:2b:6e:d7:3c:
                    52:35:65:02:40:b0:99:80:6f:68:b3:f6:d9:40:ac:
                    85:1d:96:dd:ff:8d:86:a7:f8:0f:3b:e9:b0:69:70:
                    75:95:7b:25:3c:7f:a2:b7:9f:9e:ae:e5:01:8b:be:
                    ab:3f:84:df:60:10:a1:fd:bf:68:4f:10:3a:eb:de:
                    b1:0f:93:0d:5a:43:d2:46:6f:32:27:0e:c0:c2:43:
                    c2:ea:b9:1f:22:14:e0:9e:0f:1c:03:29:ab:19:17:
                    9a:5d:59:60:20:8e:cc:42:3b:f6:0a:82:f6:98:a8:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:21:F7:62:33:15:0F:05:0E:DF:CE:CC:97:B4:39:B7:27:47:96:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6167b8e5-6baf-3749-ac62-807eff2a976b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:57:2e:58:13:0e:51:c6:a7:f3:52:a9:3a:a0:ea:2e:a5:35:
         87:4a:fb:c3:8e:67:21:da:3c:d7:29:78:e0:fd:a7:88:5b:ff:
         87:a0:d8:e0:31:fb:f9:df:4d:6a:e3:80:3e:94:a3:03:f1:f3:
         fe:54:82:f1:e6:78:2d:6f:e4:a6:a0:5a:6c:07:ee:dc:c1:bd:
         d2:27:59:27:aa:c4:2e:ea:3d:d3:c1:4b:fd:5a:96:8c:6c:12:
         29:1d:6a:8a:01:c9:67:df:3c:29:88:37:36:9a:1a:9b:82:fb:
         e5:97:05:07:0e:da:2b:8f:1b:18:a4:0e:4c:c6:0a:db:33:cd:
         b7:f5:c0:d0:4c:4b:70:45:a8:ad:d9:13:3f:7f:61:37:4d:b0:
         b9:86:1d:39:10:21:24:14:fc:ac:b9:c7:86:69:a7:60:31:16:
         57:4b:25:9e:33:52:78:7f:fb:e2:c3:b1:62:57:18:e6:76:c8:
         ef:00:d4:54:26:65:a5:17:76:2e:a4:d3:51:54:fd:6b:71:c5:
         3a:d0:d9:21:72:70:79:eb:f2:ea:53:53:ae:31:17:54:44:e6:
         60:e2:d9:42:e1:c7:65:c8:7c:67:2c:9c:68:d3:bb:ed:9b:aa:
         71:68:2a:83:b4:e5:18:5f:af:8b:c2:4e:06:d0:f5:db:fd:f8:
         57:0c:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:46 2025 by rpki-client