Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71f3ba64-f8f5-3f50-864d-5d179c6478ea.roa
File:                     71f3ba64-f8f5-3f50-864d-5d179c6478ea.roa (raw, json)
Hash identifier:          7m4unsDHg5CM3ondBsdaK+isll2GO1SFWgYSuiQQPQE=
Subject key identifier:   F3:B5:F9:A6:D8:86:68:0D:59:40:47:6F:6D:CE:07:E9:CF:92:2D:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD4587006D22573EBE50E1000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71f3ba64-f8f5-3f50-864d-5d179c6478ea.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:58:70:06:d2:25:73:eb:e5:0e:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=b0560dcb-d696-4611-9229-6bbc0cdd4af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:a3:4b:0b:99:53:14:58:ac:d9:76:35:13:
                    20:ef:de:e0:f0:86:c0:d8:a6:d1:32:20:98:dc:20:
                    48:98:e2:f1:a4:a6:91:3f:6b:3b:3a:70:61:77:61:
                    f3:f5:de:81:60:9a:ec:80:4a:9f:45:5d:25:92:15:
                    c1:b0:eb:a4:a5:05:bf:d7:55:1e:fe:fc:c3:ef:ac:
                    94:3a:20:60:33:62:a2:72:90:5b:36:6c:34:e2:27:
                    5c:70:e8:44:e3:14:fa:a0:22:2b:b2:1b:c3:7f:b0:
                    22:4f:db:0d:f5:33:b8:11:ae:56:74:a9:a8:76:8f:
                    a9:78:c7:42:54:e8:f8:a5:2f:0f:c9:82:9e:59:e3:
                    f9:cc:20:ca:83:1f:33:ee:5a:b4:aa:75:e0:02:a8:
                    b6:61:8c:ff:bc:bd:ed:9a:61:22:4c:02:d9:e9:3c:
                    cf:38:ac:60:c8:41:3b:dc:ee:54:3b:94:8f:f1:43:
                    9c:86:ab:95:1a:a7:ee:e7:e4:c1:e4:49:e2:05:00:
                    c3:2f:c4:0f:45:b4:08:d3:95:d2:94:29:e1:91:b8:
                    be:bf:be:dd:64:72:c2:69:ff:c1:d5:8e:76:b6:06:
                    8a:d1:46:3f:c1:37:d8:00:2c:2a:f6:10:92:32:d6:
                    4b:b2:f6:57:86:e0:ed:46:31:f1:5e:95:9a:05:8f:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:F9:A6:D8:86:68:0D:59:40:47:6F:6D:CE:07:E9:CF:92:2D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71f3ba64-f8f5-3f50-864d-5d179c6478ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:ca:b6:72:29:f4:01:77:6c:7d:ba:9c:97:16:3b:77:0c:
         9a:db:74:89:88:33:3a:5e:8b:c5:62:1b:7d:eb:f1:60:35:ab:
         79:1f:d1:f2:34:04:fd:f3:c1:cf:9c:84:90:2e:ee:95:5e:9a:
         15:89:50:9c:87:65:9c:8e:c5:4c:76:85:57:56:1e:14:7e:45:
         0c:f1:d8:ff:78:cc:e5:3b:d9:66:6f:91:74:cb:e2:dc:cb:5b:
         c7:fb:2c:b9:08:a4:5d:2a:b4:ca:a5:5f:43:05:89:6e:1d:de:
         ed:7b:4c:18:4e:4c:e3:64:6f:b3:92:63:9b:76:dc:cd:b6:5f:
         6f:dd:ed:24:54:f7:09:a3:43:6c:87:35:b3:d8:00:c9:9c:4e:
         56:1f:cd:d8:bd:be:6c:d9:90:0f:2d:bc:42:2a:a4:51:70:56:
         77:47:ba:db:6a:f3:14:04:2a:95:9d:91:ba:7f:4f:45:5f:7f:
         c9:04:5c:59:92:2c:60:ed:06:80:8a:54:98:59:53:85:28:24:
         26:e6:be:42:c9:a7:23:06:54:73:43:7f:38:f0:ff:f1:97:df:
         e6:8b:14:b5:27:4b:ac:93:8c:b4:46:17:40:64:58:fb:59:41:
         e0:4e:ac:dc:55:8d:05:3f:aa:5b:77:b2:de:cd:35:77:a9:cc:
         08:29:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:29 2025 by rpki-client