Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67e02c33-089a-3199-90cf-62dd96f8004d.roa
File:                     67e02c33-089a-3199-90cf-62dd96f8004d.roa (raw, json)
Hash identifier:          QkyNVm4PPPOZb2b+h7q/N2V2BND8Wu94r578b6pF160=
Subject key identifier:   E7:DC:9E:FB:FC:54:E2:5B:5C:66:AD:E5:BB:15:7A:04:E6:FF:97:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCBD323786578ECE146F38800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67e02c33-089a-3199-90cf-62dd96f8004d.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:d3:23:78:65:78:ec:e1:46:f3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=273bbbf5-647a-4d65-9f3f-f267f41e5e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:51:93:25:cb:9a:ec:54:a7:0c:1d:8d:a2:
                    db:3d:52:a1:63:35:ef:44:bc:37:fe:bb:db:1b:45:
                    08:2f:03:24:4c:e4:ea:b5:66:ed:f6:53:13:4f:e0:
                    66:5a:e8:c3:20:4c:fc:53:05:c0:ba:23:b8:b1:ef:
                    6c:73:14:f3:80:81:a6:41:e7:21:ce:c0:fb:bb:d0:
                    0f:41:c2:e9:82:ad:ba:4b:04:b7:ef:3e:3a:f5:54:
                    8b:65:39:6c:7e:b0:4b:2b:2e:ae:fc:30:d6:08:e2:
                    11:d9:8f:c5:b0:5f:39:b6:cc:b1:80:19:73:f9:70:
                    d3:9f:35:c4:3e:f4:ab:0a:87:93:0d:77:9e:73:a2:
                    ed:62:9b:59:61:e6:98:6b:f1:6c:3c:f2:e1:e5:57:
                    c7:5a:c1:3f:db:00:ee:73:4a:76:3f:54:dd:1c:2e:
                    88:8b:cd:31:8b:19:10:ba:6f:64:cb:4c:4e:7d:c3:
                    4c:15:f2:5b:10:90:00:84:ba:4f:1c:22:a7:89:28:
                    86:57:50:d3:47:f2:24:e9:66:1b:48:78:41:b8:8a:
                    c2:e4:d8:d7:80:a1:87:1c:68:6d:c4:4e:12:75:c6:
                    2e:c3:76:f3:43:58:6b:05:9f:02:81:c8:5d:93:b1:
                    47:13:64:f6:15:bd:26:59:60:28:1c:7f:6b:78:5e:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:9E:FB:FC:54:E2:5B:5C:66:AD:E5:BB:15:7A:04:E6:FF:97:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67e02c33-089a-3199-90cf-62dd96f8004d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:20:67:3f:1e:55:6a:c0:36:0c:95:85:b1:2e:3d:f5:cd:d1:
         e0:89:62:bd:e1:f5:20:84:a6:95:b9:9f:36:0b:47:fc:9e:c0:
         23:15:7e:a7:13:03:eb:f0:ae:7b:f9:e8:e8:f9:94:e9:41:ae:
         12:c6:0b:16:1d:ca:03:59:ec:a6:bb:c3:99:f5:92:0b:c9:02:
         94:35:c1:73:b4:3d:8c:87:66:8e:9f:9b:d6:1d:64:99:5a:04:
         01:85:dd:ab:4c:47:13:9c:a6:45:b0:26:bb:00:05:c3:6f:c3:
         c9:e8:85:c7:e3:6f:cf:b7:02:6e:8f:fe:86:b6:8a:47:62:a3:
         ee:ec:e2:63:99:c1:a5:cd:47:77:d8:c5:07:42:5e:4c:04:dc:
         35:a1:20:bc:ed:1a:99:86:5e:48:13:8b:98:b6:5a:73:86:6d:
         a9:cf:17:55:db:f4:4d:25:dd:c1:61:eb:7b:93:c1:6f:7f:00:
         2e:e1:32:96:5a:0e:00:c8:77:f1:b1:62:9c:cc:54:98:c0:8f:
         43:56:ef:6f:d4:91:77:7d:82:3f:08:5a:d9:1d:ee:51:54:63:
         00:6a:c5:d5:85:e5:28:cb:32:f8:6b:8d:97:ac:81:c3:6f:82:
         e5:9e:73:59:1f:ee:99:f0:1f:97:0d:19:e4:d1:c0:8f:e6:4c:
         2a:d8:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:53 2025 by rpki-client