Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7002ac12-8cd0-3524-bc6e-87344cd8f714.roa
File:                     7002ac12-8cd0-3524-bc6e-87344cd8f714.roa (raw, json)
Hash identifier:          A/El2syMiPIs31Pp1XefmnZhDnWujTEpnYF3zD5PxdI=
Subject key identifier:   A4:40:22:7A:C8:80:65:F3:84:E7:2E:0B:9E:08:97:F0:F3:49:4A:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEBA26A45564CD301C1DD7000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7002ac12-8cd0-3524-bc6e-87344cd8f714.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.50.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:a2:6a:45:56:4c:d3:01:c1:dd:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=2ad293ae-93df-4ccb-9e59-712e6f4c778b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:c7:0e:ad:cf:ba:53:be:5a:83:a2:04:45:
                    24:a0:fc:ea:43:70:c0:f0:1c:2d:93:78:ba:0d:7a:
                    5c:bd:fa:47:55:5a:93:da:72:81:dc:5e:5c:36:a6:
                    e3:0a:38:f7:d0:5a:03:e4:0f:68:c8:20:aa:a5:e6:
                    9b:39:89:2c:76:11:64:91:6d:0c:46:4f:38:ee:51:
                    d2:ec:d5:b7:89:c4:21:a0:95:cd:f2:84:2c:9b:91:
                    d5:7f:59:06:f1:3c:15:da:b1:68:03:63:07:a0:0d:
                    b1:e5:d6:55:03:e1:57:90:32:b9:ce:43:3c:5f:00:
                    26:44:a0:a1:16:82:3b:f5:e4:56:ea:b7:1f:be:87:
                    ac:78:01:6b:54:9d:cd:44:2b:4d:24:c5:47:0d:38:
                    f0:ec:60:b8:c8:f3:f1:af:c3:15:fd:89:c1:1b:7b:
                    99:66:3c:0e:5b:cb:6d:d1:d3:66:5f:d8:77:c7:80:
                    51:70:ea:47:79:94:da:c5:cc:89:95:0a:06:c0:8a:
                    18:4a:32:6e:67:78:6e:4a:4d:34:87:ce:d0:5d:1b:
                    59:d9:38:9b:fe:1d:09:68:15:c3:93:26:6c:87:b1:
                    91:44:72:ff:dc:21:5d:7b:75:fe:d5:09:4d:1a:ec:
                    16:13:a4:de:46:cf:f2:79:11:cb:a7:d4:7f:32:f2:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:22:7A:C8:80:65:F3:84:E7:2E:0B:9E:08:97:F0:F3:49:4A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7002ac12-8cd0-3524-bc6e-87344cd8f714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:40:2b:9c:09:90:59:f2:2b:04:4b:30:6e:16:7e:e1:8b:
         69:d4:7b:1a:4d:aa:c9:9d:2b:69:36:34:d4:5f:40:35:89:dc:
         b7:91:98:79:5c:23:d5:54:4a:cc:9b:96:16:29:ad:f0:86:78:
         76:05:ab:59:57:25:ad:85:84:a4:8b:2a:69:c9:ee:72:86:ca:
         1b:10:54:b4:ca:6d:bd:56:e3:20:06:19:fb:34:6f:d6:ad:36:
         33:ae:12:65:b9:db:bf:10:9e:05:dc:56:39:fa:72:56:69:44:
         0c:72:c7:40:c1:d8:3f:e4:fb:60:09:14:46:fc:f7:db:99:89:
         fd:39:a4:23:a7:c6:3f:98:9e:40:c0:da:b6:5e:cc:c9:3c:51:
         6e:1d:2e:44:4a:20:d6:cb:9a:b1:09:c6:b1:ce:f2:70:d6:2c:
         d8:ca:64:f8:cb:bc:8f:c2:4e:b9:c9:fb:d7:7a:db:e2:d2:cd:
         a1:19:70:9d:e6:72:47:5a:8c:40:a3:35:ec:2b:50:a3:bb:2b:
         9c:4d:d7:27:56:44:6d:1a:8f:96:62:41:55:ab:01:62:12:af:
         f5:82:fc:21:1b:81:49:3a:14:b1:03:78:b8:aa:50:3d:17:ee:
         a8:c2:8c:5e:36:dd:5c:e4:b1:00:87:9e:57:4e:6b:7e:a9:9d:
         f2:46:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:26 2025 by rpki-client