Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c1f6c7a-b265-3f17-b9e4-ea474b93ffb9.roa
File:                     6c1f6c7a-b265-3f17-b9e4-ea474b93ffb9.roa (raw, json)
Hash identifier:          MPSYsXQgjVd1rkLRjGXvGzvOJM3POhDJYwmEGl70STg=
Subject key identifier:   37:C2:D2:0E:0B:DD:6B:FB:20:1B:12:BF:5B:AA:10:19:CC:5C:40:35
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA435666DD5799EC4CB91AD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c1f6c7a-b265-3f17-b9e4-ea474b93ffb9.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:35:66:6d:d5:79:9e:c4:cb:91:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=d51e77d9-8294-4885-aab1-6d5d61424935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:29:a4:ef:ce:33:1a:43:57:3c:f2:45:51:
                    e2:97:6e:df:c6:1e:8f:49:9f:8a:67:ef:2b:6c:97:
                    07:05:69:12:af:12:9f:a5:2e:cc:b6:1d:24:c4:16:
                    da:49:72:7f:1d:5e:64:ee:90:db:01:60:f4:e7:48:
                    89:f0:39:8c:30:3b:de:11:54:9f:0d:c6:5f:d4:13:
                    91:51:46:82:26:10:fa:28:54:5a:ff:31:b3:0d:92:
                    87:0c:6b:5c:18:ed:f4:e8:c9:af:c1:3b:d4:85:2b:
                    ae:81:cf:ab:28:bd:5c:46:27:99:c4:d6:c4:c9:d2:
                    97:ac:a2:81:d9:32:c6:9c:04:7d:ce:ba:74:e5:03:
                    7b:aa:61:e5:ab:e5:f7:f6:ad:f6:0b:1d:25:07:06:
                    b4:a4:9f:c1:0f:5b:77:74:7c:cc:4b:26:a4:02:0e:
                    da:9f:d7:84:cb:5e:1f:76:67:59:bb:e2:a8:65:7b:
                    ab:98:c8:09:35:32:54:bd:4e:4d:93:a9:d0:d9:ce:
                    8a:d0:db:16:e0:67:e3:48:ed:bb:be:be:d0:a3:69:
                    99:71:d2:1e:bb:40:59:ff:31:65:c3:9a:51:ab:11:
                    07:2b:37:f1:45:06:48:d1:ce:d9:84:c3:e7:b9:cd:
                    5e:e9:8e:0f:96:20:19:d8:6f:bc:de:62:1b:72:20:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:D2:0E:0B:DD:6B:FB:20:1B:12:BF:5B:AA:10:19:CC:5C:40:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c1f6c7a-b265-3f17-b9e4-ea474b93ffb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:77:1c:53:8e:8a:29:12:c0:2f:9c:2c:b1:eb:1f:a8:07:26:
         de:15:ad:2d:90:a3:95:1a:3a:e7:bb:57:f2:c8:f3:36:4f:46:
         f3:82:11:cb:7c:eb:19:b0:ed:1c:f9:54:fc:cf:e3:20:58:f7:
         83:9d:ed:30:12:2c:d9:f7:ef:28:92:fc:bc:21:2d:7e:6d:36:
         a5:3d:c5:b9:27:ad:b5:b0:08:4a:44:d8:6c:7c:92:be:10:4d:
         f1:b3:61:76:6a:2e:87:db:7c:1d:13:38:6c:35:bb:a0:26:78:
         57:12:7f:25:0d:41:b2:d0:95:fc:e8:73:36:19:4e:ca:a4:e9:
         d9:64:7d:b6:ed:36:47:56:a0:0d:fa:ec:95:28:83:93:aa:3a:
         20:23:ae:2e:14:d0:59:2c:28:c3:49:b1:a2:4a:96:10:10:bb:
         80:99:24:23:26:87:89:8b:aa:be:11:5f:62:56:67:82:e0:11:
         81:9b:bf:11:ac:33:8d:ed:20:b4:92:9a:ad:2d:23:15:b9:18:
         d0:e3:b0:6d:80:06:a9:e0:0e:89:e0:c7:37:07:f3:4b:3c:76:
         6c:88:48:c9:d5:34:82:fe:f2:e4:8e:f8:86:78:2a:87:74:68:
         b2:8b:85:e7:6f:35:91:c5:1c:51:17:6a:9a:d6:d9:35:41:00:
         6d:df:3e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:46 2025 by rpki-client