Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bf01bc-4f81-3fbb-9cd0-77ba6eb8a4dd.roa
File:                     65bf01bc-4f81-3fbb-9cd0-77ba6eb8a4dd.roa (raw, json)
Hash identifier:          E60xxwi540u3RNIheY06b6rUBJVpBAhHTm8+jg0/eIQ=
Subject key identifier:   B8:01:F6:32:9A:49:26:E6:81:BC:10:81:88:54:0F:EB:76:F3:EC:36
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF30BD15D5259ADA145CB7480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bf01bc-4f81-3fbb-9cd0-77ba6eb8a4dd.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:0b:d1:5d:52:59:ad:a1:45:cb:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=0ce6dd6b-522f-43df-9ae1-40c44f4437f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:12:bf:b7:cf:2d:77:de:a9:be:04:9a:0e:
                    4d:ca:b9:ce:ff:83:80:66:a0:45:88:ba:95:84:d3:
                    25:e3:d5:1d:58:90:20:2b:2e:c8:3a:38:42:3c:14:
                    0e:31:30:2f:2f:25:04:7b:1b:06:35:b4:d6:75:f7:
                    6e:42:13:1f:4c:3b:be:52:48:c0:94:6e:a5:df:4a:
                    18:1f:16:20:53:29:db:7e:b3:d5:c4:07:c4:f4:3c:
                    02:4e:0a:7e:34:2a:74:39:ec:77:45:b3:10:ae:f5:
                    1c:e6:56:62:60:a0:18:b9:e2:ff:c7:4d:b1:14:8c:
                    3b:c7:27:84:fa:63:00:e5:19:d9:1d:b2:c4:a4:8b:
                    ae:59:91:35:40:83:f0:fa:c5:fe:2c:11:f3:65:c4:
                    af:1e:06:df:af:9f:82:ad:f3:0e:82:e7:e4:1a:22:
                    bf:5d:08:0b:a3:41:f5:0a:ae:0b:19:7f:4b:aa:9c:
                    48:5e:f7:48:f7:12:ce:af:fb:60:ff:0e:83:ab:bf:
                    b4:bc:6e:86:8d:fa:86:79:7a:8a:6c:79:1e:c9:27:
                    d3:d8:df:84:2b:08:6a:e3:0e:0c:bd:17:22:7a:36:
                    b1:8c:62:bf:46:c3:d5:e0:9c:1f:3f:03:e0:ae:e2:
                    f3:9a:60:85:8e:99:36:39:a5:37:54:2f:35:4a:07:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:01:F6:32:9A:49:26:E6:81:BC:10:81:88:54:0F:EB:76:F3:EC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65bf01bc-4f81-3fbb-9cd0-77ba6eb8a4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:34:57:3f:11:5f:79:44:b7:5e:4f:1c:66:37:69:2e:48:
         a3:4c:17:39:28:43:95:fe:88:31:b6:82:d4:fd:60:30:93:ee:
         75:56:96:9e:ac:1f:d1:87:cf:bd:b3:60:7f:9c:b9:ab:ca:42:
         3a:c4:ed:34:07:30:7b:e5:f2:f3:53:20:fc:14:49:8c:7c:b8:
         38:9f:e0:13:3a:53:3a:57:ab:88:a1:ed:8f:c3:c6:29:f4:c2:
         95:1a:60:38:73:e1:6b:e8:25:df:4a:f0:6e:60:ba:dd:2b:19:
         93:3c:fe:7f:e6:02:a7:75:b1:23:9e:3d:f5:c0:95:b3:93:15:
         24:68:a1:8b:de:30:24:d1:d4:ea:44:f2:19:fd:19:32:81:a6:
         49:37:a1:19:29:dc:af:3b:17:7f:35:f3:b0:40:98:ad:b4:c8:
         0c:2a:d3:0f:b3:2b:f9:cf:de:9d:26:c6:36:29:28:41:eb:9b:
         6a:45:92:89:4a:e7:d4:7f:03:e9:e1:76:52:14:10:6b:74:8f:
         de:f4:28:8b:36:c5:d5:41:d7:ac:f8:1d:42:8e:81:52:3b:b0:
         ca:29:c2:f0:2c:67:4b:89:26:70:1b:49:dc:53:e1:8f:fe:88:
         ff:32:cd:0d:f0:a0:44:43:e5:3a:fc:83:eb:47:70:af:a0:d3:
         ce:d5:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:06 2025 by rpki-client