Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66be1005-2743-3bb2-825d-e288a5066860.roa
File:                     66be1005-2743-3bb2-825d-e288a5066860.roa (raw, json)
Hash identifier:          nzJGqkSZVPYGowUksoQxoOfS7g9zyaHFbcH44kzuVAk=
Subject key identifier:   37:49:0F:D9:86:E1:90:57:3F:94:5E:29:3F:BF:FA:C2:59:E3:7A:36
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE121E5CC8AC45842766FCD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66be1005-2743-3bb2-825d-e288a5066860.roa
Signing time:             Fri 11 Nov 2022 12:00:00 +0000
ROA not before:           Fri 11 Nov 2022 12:00:00 +0000
ROA not after:            Sat 17 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.52.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e1:21:e5:cc:8a:c4:58:42:76:6f:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 11 12:00:00 2022 GMT
            Not After : Dec 17 05:00:00 2022 GMT
        Subject: CN=928a0451-49dc-4f56-bd3d-b0bf1ccf99f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:1f:c0:88:1d:ec:5d:8a:ae:10:48:75:a2:
                    43:c6:e3:09:bd:3b:89:dd:ae:a8:40:87:b3:4c:ae:
                    4c:b7:71:65:dd:69:e7:5e:9b:6c:93:02:b3:33:01:
                    83:fb:a3:b3:c8:1f:9d:32:86:a7:f2:16:0b:86:9a:
                    fb:8c:69:e0:3a:1c:48:22:5b:b1:36:1b:49:c1:7c:
                    e2:09:65:29:80:30:b1:7f:40:58:d9:95:6b:56:dc:
                    86:4e:41:3a:3c:dc:29:a3:11:f2:11:28:03:f6:f5:
                    2f:d1:ef:03:db:25:90:e8:1e:ce:54:e5:53:cc:44:
                    d6:1d:9c:fe:18:ca:9a:ed:8c:e8:fc:5e:81:41:88:
                    2f:50:19:29:2a:aa:ad:18:2c:fb:e6:f7:ad:c5:6f:
                    92:ee:9c:01:e0:3c:12:16:da:26:cd:a5:f2:1b:92:
                    be:d0:37:d5:cb:0b:75:9c:95:09:f5:f4:cc:fd:79:
                    1b:80:d2:38:f3:b1:a8:19:c3:02:de:33:07:bf:56:
                    66:47:86:e9:04:3e:1f:4d:bc:c4:43:9e:bf:57:74:
                    9b:4f:26:30:74:02:57:d3:f6:6b:4c:aa:00:ca:db:
                    79:11:c6:ae:31:6d:e1:86:3a:c6:3d:0d:c3:40:84:
                    ad:93:a7:49:86:12:1e:43:6b:c5:eb:6a:e3:f0:6d:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:0F:D9:86:E1:90:57:3F:94:5E:29:3F:BF:FA:C2:59:E3:7A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66be1005-2743-3bb2-825d-e288a5066860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:13:e1:53:c6:ea:40:aa:00:c1:1a:ba:3a:71:6a:21:c5:
         5d:56:a0:4a:2f:b2:28:91:b9:04:ff:d0:6f:22:f9:d9:01:0c:
         0c:90:1f:41:a4:b3:f5:be:60:06:c2:ea:95:e6:93:e7:0f:0b:
         f7:49:49:f8:b7:56:fb:f0:54:5c:87:9a:0a:2b:3c:44:89:cd:
         23:cf:73:38:4c:3a:a1:26:01:b6:4a:37:82:04:64:22:ca:ac:
         9d:56:00:b3:84:49:87:40:da:8f:c0:a9:32:ff:ca:73:85:18:
         ab:4f:64:46:67:63:8e:30:c1:84:5e:25:a7:42:e3:33:c5:7f:
         b0:56:84:d4:36:af:db:df:1d:b0:bb:cb:12:ad:cd:19:1d:56:
         4f:7d:97:dc:d4:25:c3:80:6d:f8:7f:cc:5a:9a:b3:fc:80:1f:
         96:c7:07:bd:95:c5:a8:68:2e:33:0f:51:1b:1f:bd:01:12:e3:
         05:4e:06:90:67:94:9d:32:83:67:fb:78:a5:df:6d:74:d3:af:
         d3:be:46:b5:1a:13:3b:50:13:bb:dc:06:cb:e1:fd:87:fc:fd:
         3d:85:2a:35:0a:8f:13:08:be:42:ff:c1:d7:14:21:02:ee:f6:
         5b:57:48:cc:06:b0:89:a8:85:a8:ba:1a:d1:37:4e:34:27:3e:
         ba:e4:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:39 2025 by rpki-client