Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6db625ae-928a-3431-9195-a8c3a79b3e85.roa
File:                     6db625ae-928a-3431-9195-a8c3a79b3e85.roa (raw, json)
Hash identifier:          VlYgC/l261lRVAFNvpXemiaqBBMEErno/j0Dm4kGC8k=
Subject key identifier:   73:7E:3E:0A:DE:80:AE:F3:F1:9A:A5:EF:F9:2B:04:E3:E2:49:AA:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D6FD0746BDCAA2197EFB990C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6db625ae-928a-3431-9195-a8c3a79b3e85.roa
Signing time:             Sat 02 Apr 2022 04:00:00 +0000
ROA not before:           Sat 02 Apr 2022 04:00:00 +0000
ROA not after:            Sat 07 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:6f:d0:74:6b:dc:aa:21:97:ef:b9:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  2 04:00:00 2022 GMT
            Not After : May  7 04:00:00 2022 GMT
        Subject: CN=d939f75a-79cb-451d-a6dc-d09559835b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:d3:49:04:1e:00:52:81:21:bd:70:7d:aa:
                    20:78:b8:76:fc:a3:4c:4c:77:3a:5c:6a:e8:0f:a5:
                    5c:35:bc:06:c1:43:d3:9a:13:21:f7:a7:a1:83:9d:
                    11:e6:1a:1f:e3:44:10:02:2d:03:09:af:da:ca:7a:
                    dc:ce:5d:84:27:c8:51:e2:8f:8d:d7:13:82:7c:ca:
                    5f:15:d4:54:f4:56:8c:88:1d:bf:cc:6e:10:d5:3b:
                    51:ec:37:67:d7:3d:f3:a8:24:81:58:66:7f:40:4b:
                    50:9d:61:9b:df:a1:73:02:d6:b8:42:27:41:0f:65:
                    9e:c6:96:2b:76:04:29:63:06:2b:77:d7:06:23:d3:
                    54:ba:6a:56:fe:07:b2:0d:12:89:2a:b8:3f:da:8a:
                    bd:e8:b9:3e:eb:ee:94:d4:7a:79:e2:fd:ae:5b:f7:
                    c6:65:5e:c6:f2:1c:d0:9c:76:96:42:95:7d:4d:fd:
                    81:92:f0:1e:0c:c3:4b:53:17:c7:25:51:bb:43:6a:
                    5a:ab:bb:65:88:ee:05:d5:87:85:bc:b8:2d:99:0c:
                    c4:74:ab:68:e6:14:32:f5:fb:b8:7f:ea:52:70:eb:
                    b0:30:df:2d:54:99:28:08:cc:31:07:4e:74:54:02:
                    b0:87:9a:88:dc:7c:b9:4e:b6:44:1a:5b:7e:a5:6f:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7E:3E:0A:DE:80:AE:F3:F1:9A:A5:EF:F9:2B:04:E3:E2:49:AA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6db625ae-928a-3431-9195-a8c3a79b3e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:a2:61:9e:15:8f:ad:fe:13:41:00:b0:2d:24:1a:87:26:
         ea:d8:98:75:5e:f9:a8:5f:3c:31:a0:9b:4e:ca:7b:cd:7d:d0:
         55:da:4a:9f:d5:91:dc:2e:d0:4b:51:ad:78:0f:47:13:74:f4:
         0a:14:be:dc:ad:dd:95:11:68:e6:f3:0a:d7:7f:7d:5f:22:f8:
         9a:b3:33:9b:dd:36:e8:3f:71:53:22:5b:22:22:45:35:52:ed:
         f3:cf:c7:ae:9e:17:3d:95:6d:a9:b1:a7:d5:1a:04:b3:d3:e2:
         b3:b1:f3:10:1b:97:c9:06:cc:03:20:9f:c7:50:75:f7:3b:37:
         31:09:3a:39:a6:e7:ac:ba:ba:17:42:3c:50:7d:55:df:fc:0d:
         02:c3:47:50:46:cd:23:30:89:82:a7:c2:8e:c7:12:24:2e:04:
         f2:00:17:05:ad:2d:a4:48:02:48:45:ae:1e:61:08:00:1b:90:
         62:eb:28:6a:23:42:7f:03:8a:65:da:b6:d9:fb:3f:24:0d:2d:
         1c:6e:9e:6b:1a:74:dc:d2:71:9d:17:94:6a:d6:b8:ca:bf:26:
         2d:fd:65:e1:9f:c3:24:36:94:2f:c2:22:a0:93:63:38:06:79:
         bd:e6:d2:26:08:02:cd:91:f5:7f:fd:65:6c:71:b8:0f:a3:8f:
         d7:19:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:00 2025 by rpki-client