Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/714831dd-b5dc-3d62-bfab-ec73bf429717.roa
File:                     714831dd-b5dc-3d62-bfab-ec73bf429717.roa (raw, json)
Hash identifier:          n4scNbNAZamTNBG0DYfr4/TxA6JtCWu59XWqP+Wq/dc=
Subject key identifier:   4D:31:03:CC:E7:39:26:34:5D:DA:85:ED:0F:9F:3B:63:4E:94:0D:E0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA470FA00A77E213FAD3E2F20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/714831dd-b5dc-3d62-bfab-ec73bf429717.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.107.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:70:fa:00:a7:7e:21:3f:ad:3e:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=0fb6e885-8faa-45f2-b7ea-017a0481be8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:fc:da:e2:9e:3e:c8:f5:91:53:4c:a6:5a:
                    e6:be:3c:9b:e8:d9:bf:4d:e7:f3:8d:2e:fa:f5:17:
                    5e:63:34:91:41:f8:2f:08:25:15:d9:05:f6:ad:0a:
                    41:9d:76:0c:39:a6:6a:a7:7e:52:16:84:50:9f:f7:
                    cf:2e:92:b9:ce:4b:92:b5:1f:c3:dd:65:bc:4d:29:
                    24:52:f1:a8:b3:3a:d5:ce:98:2c:f5:8b:83:2f:72:
                    31:06:f5:be:04:cd:3a:65:20:2a:21:42:ef:d2:ab:
                    50:4d:19:40:30:25:e8:d3:a6:64:85:5f:2f:15:5a:
                    a7:a0:3b:79:ac:2b:01:c0:8c:84:27:21:5d:fb:4e:
                    06:fd:f5:e4:d3:56:eb:f8:28:08:ed:d0:87:a3:85:
                    c2:d7:4b:c8:47:e4:7a:6a:87:88:cd:68:94:5a:3a:
                    96:f6:80:b2:ea:9e:5e:f6:24:78:99:7e:f6:ea:c4:
                    19:48:91:66:1f:27:69:be:8f:81:b5:02:e3:21:d3:
                    71:e2:d5:d7:e0:88:09:af:99:9a:c9:33:e0:fb:89:
                    96:e7:7e:2d:8a:79:18:20:74:ec:bc:1e:e2:7d:fb:
                    12:79:e5:57:0e:13:c7:6e:10:4a:97:d9:4f:cd:4d:
                    84:27:30:93:dd:10:3a:5f:47:c0:3e:f7:38:ac:cb:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:31:03:CC:E7:39:26:34:5D:DA:85:ED:0F:9F:3B:63:4E:94:0D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/714831dd-b5dc-3d62-bfab-ec73bf429717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:20:38:cc:55:02:e8:23:ee:76:34:a8:04:4b:36:25:b2:
         e1:c5:f7:c1:b7:7e:dc:00:77:c0:7d:bb:38:57:74:f2:43:4c:
         2e:bb:ca:d5:58:e3:a0:df:ee:00:9e:b2:e6:c0:5e:c7:1a:bd:
         9d:1c:ad:6a:1d:d5:25:b7:d9:20:d7:a8:92:b4:42:5e:20:c3:
         72:78:ed:d7:e7:2f:bf:7e:4c:3a:72:61:a7:95:db:2f:88:da:
         5c:fc:db:fc:e4:7e:60:3c:34:63:ef:72:fd:81:bd:e5:03:71:
         53:de:26:fc:eb:ba:12:c6:7f:73:b8:ef:11:c1:83:34:0e:ee:
         3b:e5:3d:40:b5:d1:e0:5f:74:56:23:54:72:9e:17:9d:92:90:
         c8:da:13:8d:a6:eb:2c:c7:d6:a7:e1:ca:3c:0c:1a:dc:f4:e2:
         78:08:06:f7:c1:16:92:86:f4:2f:16:be:c8:40:97:d9:63:ff:
         e9:b5:ab:a2:dc:5b:b1:8c:f8:38:f9:99:f5:67:da:67:de:e9:
         5d:e4:36:03:7f:ec:d6:3e:54:35:82:05:cc:fc:ff:9c:45:b1:
         34:c3:45:b2:90:cc:e5:6c:74:5f:10:b1:99:51:66:86:1d:37:
         76:99:af:2b:7b:59:d6:d6:2e:14:3c:1a:f7:b8:82:02:dc:fd:
         93:73:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:16 2025 by rpki-client