Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/738b03dd-efeb-39b4-be74-24910b1b0731.roa
File:                     738b03dd-efeb-39b4-be74-24910b1b0731.roa (raw, json)
Hash identifier:          ng00QpaUjqXYRwAaaxmEWaWJETdZA9/d7w1xo6rxfOI=
Subject key identifier:   1B:04:F7:32:4D:65:E4:BF:B5:AD:3F:4E:D7:FA:65:96:84:86:E7:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CF40BC0603464BE90BC3D0D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/738b03dd-efeb-39b4-be74-24910b1b0731.roa
Signing time:             Wed 16 Feb 2022 05:00:00 +0000
ROA not before:           Wed 16 Feb 2022 05:00:00 +0000
ROA not after:            Wed 23 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.146.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f4:0b:c0:60:34:64:be:90:bc:3d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 16 05:00:00 2022 GMT
            Not After : Mar 23 04:00:00 2022 GMT
        Subject: CN=eb5fcb4e-5b60-4c55-96c7-03e6aa78185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:8e:c5:63:cc:60:9a:fc:36:ab:e8:dc:cc:
                    f2:12:c4:7a:e1:d8:46:30:1e:17:bc:9c:6b:7a:3a:
                    c3:50:e8:bc:ba:c9:19:57:ae:8d:7c:f5:c5:bf:3a:
                    a4:41:ea:2a:0e:8a:ce:d3:42:a7:f6:fb:2d:6b:34:
                    19:b7:da:7a:e9:f4:54:b5:20:b8:ee:c9:f8:1c:44:
                    49:e3:8a:95:64:17:99:ec:a6:7a:57:c0:71:ad:a0:
                    c4:c7:88:aa:4e:74:cd:e7:5a:46:cc:81:31:94:96:
                    8e:f7:92:d4:7f:cc:26:35:da:8e:95:31:66:66:e0:
                    26:a2:01:c7:59:fb:ff:f1:8a:03:3c:eb:f6:03:ed:
                    58:1d:ed:11:de:f8:40:4f:56:7f:d2:69:15:4a:e5:
                    65:19:4e:68:e4:7b:ee:d3:66:c7:16:a6:6c:dd:8e:
                    c7:7e:03:f6:1f:35:7c:be:f4:93:2f:bf:8d:99:56:
                    7a:15:29:32:d7:0e:03:c5:7d:6b:9a:93:3d:56:1d:
                    85:0c:cd:92:b4:f7:c4:6b:9b:79:1f:7f:95:04:57:
                    a1:41:03:7b:e7:01:c2:f0:86:1a:f7:70:c5:6a:52:
                    6a:c6:74:ca:cc:37:15:8a:97:a0:80:23:ee:00:84:
                    33:02:9d:6c:e2:a6:70:08:16:57:6a:50:10:7a:ca:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:04:F7:32:4D:65:E4:BF:B5:AD:3F:4E:D7:FA:65:96:84:86:E7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/738b03dd-efeb-39b4-be74-24910b1b0731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:93:dd:88:31:27:1e:11:36:49:b3:11:ff:05:d2:a7:4d:
         7f:6b:6d:4b:bb:aa:1e:7b:06:b1:f3:1e:d9:a6:6f:72:ff:da:
         cf:a7:b9:13:f2:78:1c:58:fb:d0:00:17:a3:e6:53:c6:6b:a9:
         f3:c6:c8:74:93:29:b6:55:35:7e:b7:99:12:6d:5d:88:6c:86:
         42:8a:79:f0:85:52:15:3c:80:75:ff:ba:d8:0d:fa:13:9b:04:
         e5:f8:d7:3c:d6:ca:07:54:9d:1f:60:1e:6c:58:af:2c:1d:4a:
         19:70:40:ca:d9:39:f1:1f:fd:38:a6:28:de:0d:02:9e:a8:43:
         6d:12:9f:8e:af:9a:50:60:79:9b:fa:1f:9e:62:4c:9e:e0:fb:
         68:4e:cd:47:df:ab:3c:de:65:7b:8a:45:80:08:1c:54:8c:a8:
         b0:39:3b:a0:b2:5e:2d:25:8b:76:10:cd:33:d5:73:4f:1b:a9:
         8f:16:0c:9d:e9:e3:a8:e6:9d:5d:26:08:3b:fb:b6:cf:be:aa:
         0f:9f:77:69:df:c8:2a:15:0c:17:f9:d9:ef:d3:4b:02:5e:b8:
         1a:0b:4e:c8:fc:c2:bd:32:d9:61:06:8b:df:f1:06:78:d9:e0:
         54:f1:73:a6:5a:ba:a6:80:6a:ae:48:51:0e:df:54:20:9a:10:
         40:2d:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:43 2025 by rpki-client