Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62e811ba-7816-351e-b29b-f576bf2c776e.roa
File:                     62e811ba-7816-351e-b29b-f576bf2c776e.roa (raw, json)
Hash identifier:          JvTpV7ebZYNmUDoZAN8pwU36DPsUQZiodAyJMhOtfs0=
Subject key identifier:   28:41:A4:CC:EF:7B:79:00:56:E0:1A:EE:A2:C0:EE:96:A5:B4:C8:1A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE3F6F553EDBDB1E47D157780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62e811ba-7816-351e-b29b-f576bf2c776e.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:f6:f5:53:ed:bd:b1:e4:7d:15:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=cc9b33d9-69fe-4677-8a5d-a2d7c4b30b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:52:bb:c5:80:28:a7:63:fd:30:4b:da:13:5d:
                    9f:41:7b:b5:fd:d3:cf:9e:a7:40:5e:aa:3b:40:dd:
                    8f:58:9b:aa:48:ea:a5:68:47:b5:02:41:5f:b9:c7:
                    18:fb:0d:1c:ab:03:0c:14:64:6c:ec:ad:ea:62:aa:
                    74:da:df:b7:a9:0f:ea:2e:0a:dd:03:35:16:9d:b7:
                    2e:7b:e8:42:cc:eb:91:52:ef:27:52:46:52:ad:66:
                    40:e8:4d:ba:d2:54:e0:9b:38:7b:b3:ef:62:86:83:
                    09:7b:4e:fc:d0:90:3b:8a:f7:d4:1d:38:af:c1:b9:
                    2c:51:e2:2b:72:b8:33:9a:25:fd:7d:ca:02:8f:8d:
                    d9:d6:ac:04:d1:7c:06:31:a7:32:16:33:30:6f:67:
                    4c:07:81:25:b9:55:9e:70:31:ad:92:b3:76:20:ea:
                    f8:25:dc:cd:0c:74:5d:7c:7a:e3:f5:04:71:bd:34:
                    5d:6d:ad:12:c4:af:3b:d6:42:4a:38:26:29:6f:85:
                    6f:ce:b1:04:1c:1c:03:5e:0a:b9:25:9f:00:b8:1d:
                    4e:12:38:8a:c4:2b:ff:24:77:1c:47:ce:0b:29:b7:
                    6d:1d:3c:63:be:e7:c8:ea:0d:3b:2f:5b:70:14:b7:
                    21:1c:99:a5:35:f8:2e:39:9d:46:89:99:b1:b9:2f:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:A4:CC:EF:7B:79:00:56:E0:1A:EE:A2:C0:EE:96:A5:B4:C8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62e811ba-7816-351e-b29b-f576bf2c776e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:21:8d:d3:3e:93:8f:f7:c6:83:a7:5a:b3:8b:56:21:ed:c7:
         91:43:34:36:e0:33:3c:31:5d:f5:1e:2a:dc:21:68:eb:b7:1e:
         02:97:1b:97:60:82:87:5e:da:a6:f9:83:a1:15:52:ce:86:f8:
         c6:fe:8b:fe:4e:d2:c8:6e:ff:f4:50:15:71:af:e5:60:7e:9e:
         fd:d9:0b:a6:5a:8a:2c:e7:c7:b1:82:82:3c:32:2e:e3:dd:c8:
         8b:a1:e7:87:a6:83:fa:c6:47:be:f6:eb:36:81:9c:e6:5d:5e:
         08:a2:80:e3:61:e8:0d:ef:ca:a3:bf:40:d1:f3:83:3b:12:4e:
         48:6e:1a:d6:d9:63:33:72:43:0b:a5:62:9b:8e:fe:d5:69:bd:
         cf:71:b5:1c:ad:ad:b2:df:a0:23:c8:8c:4c:ea:69:89:16:a0:
         19:7c:4e:3e:5f:70:4d:4b:ff:db:42:b3:64:3c:a2:d5:fa:40:
         7c:bb:27:c0:80:4b:0b:3e:be:54:fc:07:36:a3:bd:05:9c:74:
         ca:5c:c9:04:62:2f:4e:f1:1c:bb:2f:c9:d6:8a:89:04:8e:f3:
         26:77:45:da:22:08:45:58:42:2c:9a:2c:1b:07:2d:4c:32:1d:
         95:db:bc:48:ab:6f:63:43:c3:d3:6f:e3:3d:64:8d:33:e0:f6:
         ae:f0:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:24 2025 by rpki-client