Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/731d1968-3386-3502-b0ee-87222215930b.roa
File:                     731d1968-3386-3502-b0ee-87222215930b.roa (raw, json)
Hash identifier:          jZ0+lGoMDDf3HCdP73cQu9nwBaq+78dLleFVa1dhDnw=
Subject key identifier:   A0:A7:3A:2A:BB:19:6D:28:76:FE:BF:A4:3B:70:3B:D8:6F:6D:4D:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1A5F14370E3EF0031B831C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/731d1968-3386-3502-b0ee-87222215930b.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.23.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1a:5f:14:37:0e:3e:f0:03:1b:83:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=96f8ff4d-79a7-4745-b9c8-c0cc969eb10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:c4:f9:6c:f7:ad:fb:91:62:fb:39:2b:f7:
                    fd:25:fe:6e:5a:eb:36:0f:ee:3c:8c:cc:52:c9:e1:
                    1c:72:8b:bd:62:6a:48:7b:cd:b4:67:44:22:cd:36:
                    03:ec:b0:e4:54:c9:7c:4d:66:58:47:94:99:63:e1:
                    c3:69:49:01:36:3d:18:3c:95:3b:b6:5f:4a:1b:2e:
                    34:2f:f4:cb:0b:0d:69:8e:de:45:d1:c4:1a:86:79:
                    34:2f:5d:c3:c4:17:62:0a:48:be:f1:0d:07:78:ee:
                    2a:73:90:c8:cb:48:30:53:82:b7:36:5e:98:a4:8b:
                    ed:05:b5:28:ca:3c:84:04:14:60:08:cc:b1:3b:3e:
                    be:d2:10:3d:70:34:0c:eb:11:90:24:f9:d7:8a:cd:
                    1a:72:d6:81:1e:87:6d:ce:d4:34:32:69:81:1b:f5:
                    95:05:74:f1:ca:5c:9f:a1:28:84:32:98:88:f3:98:
                    c2:74:28:ea:d0:2f:69:62:95:35:a6:f2:a7:26:ff:
                    32:16:0e:29:66:0f:4d:32:8d:c2:de:60:bd:0f:27:
                    9b:9e:f6:66:ba:dd:d8:11:95:83:82:09:51:29:90:
                    29:63:90:ee:b8:38:0f:77:89:c2:ff:7e:99:48:da:
                    db:2d:ee:b6:d7:3f:72:74:31:11:18:20:c3:01:92:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A7:3A:2A:BB:19:6D:28:76:FE:BF:A4:3B:70:3B:D8:6F:6D:4D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/731d1968-3386-3502-b0ee-87222215930b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:e5:62:4d:82:ed:c4:6f:6c:bb:af:1b:83:e7:0d:af:ae:
         90:84:f8:95:db:90:14:72:96:49:15:b0:a1:73:45:d9:04:55:
         6a:9b:ae:88:90:49:da:a8:2f:94:8a:1c:86:21:d0:56:a0:f3:
         89:e6:90:b4:dd:19:42:82:01:75:6b:a8:d6:d6:67:5a:ac:b5:
         4b:15:95:95:ae:5c:13:a1:ba:a4:b9:07:71:d3:8c:29:a7:8b:
         a1:75:b3:72:2d:a2:ee:b4:6f:22:79:cb:89:15:0f:94:7f:30:
         1b:44:80:68:c0:b8:21:fc:b3:e0:32:bd:11:60:7d:39:6f:80:
         fa:98:6e:3a:6c:29:7b:29:b6:04:a3:5b:33:57:57:13:6c:63:
         ff:72:ba:e1:68:89:e2:0b:da:e4:eb:ee:f3:f0:45:ad:ed:8b:
         f6:40:b3:b9:fc:4a:05:2c:80:f6:36:e1:e7:12:a6:c5:db:c1:
         24:2d:77:ab:44:ea:0c:a9:69:62:f3:bf:6b:1b:e5:c1:96:41:
         58:8d:86:0e:d5:51:0f:38:3c:91:c6:a6:30:f8:63:95:22:43:
         fc:3b:6a:6a:94:9a:5c:1d:30:2b:ea:50:dd:bf:6b:b5:27:38:
         9b:a8:48:96:72:69:2a:3b:7e:9a:71:fa:85:46:ff:df:eb:e4:
         43:49:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:45 2025 by rpki-client