Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66743b76-24ab-3033-ba81-bee28e7c96c7.roa
File:                     66743b76-24ab-3033-ba81-bee28e7c96c7.roa (raw, json)
Hash identifier:          mSt55E8fcL07k3Jh8kvWCcHFxLmkOvPF3kUb7edSc8Y=
Subject key identifier:   8B:11:97:EA:BA:2A:B4:F9:A5:01:BE:36:EF:00:C7:65:B6:55:4A:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7B00A363DE5D33E398C24908
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66743b76-24ab-3033-ba81-bee28e7c96c7.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.71.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7b:00:a3:63:de:5d:33:e3:98:c2:49:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=c1f6e608-879b-425b-bc4d-aa551b1519e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:b8:a6:76:bc:2a:17:d6:fc:a1:54:c5:b7:
                    54:45:d0:f6:99:0e:e1:8b:7a:cd:52:f0:61:1f:b4:
                    37:01:e5:d0:40:4e:82:db:08:c6:6c:70:02:77:78:
                    3d:c2:d5:bd:6e:98:a1:79:84:36:86:78:75:f6:70:
                    bf:6e:a6:69:34:5f:61:18:9c:7d:2e:bb:2e:fb:49:
                    6e:17:5c:bd:76:51:57:78:b8:56:99:60:30:79:6a:
                    59:29:2b:97:f0:8d:d2:c5:d2:64:4f:15:74:43:2d:
                    07:da:87:a0:7b:25:48:28:43:59:4d:87:98:8d:de:
                    5f:5b:0b:27:6e:4f:96:11:cc:92:82:70:6b:d8:08:
                    ff:70:b1:92:57:f0:87:55:a9:17:22:5d:ab:c5:fd:
                    2d:7d:7e:fb:81:8f:a4:96:66:ff:20:9d:ff:54:9a:
                    6a:62:a6:e5:ab:7a:16:1b:79:13:52:df:d8:48:ab:
                    b1:a4:4a:46:e0:ce:f3:d8:cc:31:db:2d:26:6b:66:
                    39:4e:7a:93:93:cc:b9:9c:a8:f6:47:fe:ec:c1:15:
                    6d:03:27:26:c9:d3:f5:2c:1a:57:4f:d4:cf:a6:fc:
                    d1:f0:c7:64:6f:37:5c:1d:38:63:0a:17:c4:58:c5:
                    79:5b:da:68:ae:13:b3:50:2c:10:a9:4d:25:79:27:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:11:97:EA:BA:2A:B4:F9:A5:01:BE:36:EF:00:C7:65:B6:55:4A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66743b76-24ab-3033-ba81-bee28e7c96c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:94:25:a9:a6:2e:ac:dd:d9:61:d8:b5:dd:61:2a:52:c6:1c:
         06:23:03:86:33:a7:cf:f6:c7:c9:25:e8:ce:bf:1a:8d:bb:f6:
         94:88:15:1f:3f:31:bd:70:47:a2:21:10:60:5e:c8:98:d9:92:
         d7:1e:b2:11:b4:b4:83:20:c2:20:e9:02:ef:de:29:c7:17:49:
         ba:ac:b7:3f:cc:f8:db:ef:5a:04:c6:25:d7:77:fa:ef:db:77:
         81:eb:07:66:42:28:68:10:18:9f:0b:a5:55:c8:a5:92:a0:b2:
         17:e5:c6:8c:1d:90:a6:4b:47:60:5e:83:f7:49:3b:d9:d0:72:
         03:de:9c:b9:55:7a:ea:7f:d3:36:34:7a:54:e8:99:f9:86:6e:
         c4:7d:3c:a8:0e:1d:51:f1:c1:1e:ac:13:93:80:5a:3e:bb:3b:
         6e:f3:3c:27:ef:47:7d:0f:30:b4:d5:08:80:ca:07:b7:58:c2:
         db:05:c6:fe:0b:e3:58:bb:79:f3:84:30:30:b5:75:38:08:c4:
         f5:bb:b9:5b:c5:3b:44:14:b2:bd:eb:92:c6:c5:1e:6b:a1:a8:
         0d:e9:ec:05:c2:b6:d3:3d:cb:d9:f0:14:5f:48:aa:27:3f:6b:
         6c:f6:ed:5b:54:c5:ff:92:22:12:26:b0:c2:b4:64:00:2c:bf:
         7f:57:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:30 2025 by rpki-client