Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74199609-dc07-3a1f-93ed-89b383c50969.roa
File:                     74199609-dc07-3a1f-93ed-89b383c50969.roa (raw, json)
Hash identifier:          rq8Qb7z7KdfjMnIQdtrcHwXBNtd+25ty6GJdVIjvRvQ=
Subject key identifier:   39:45:0A:7B:2D:A2:A2:79:32:47:EA:C9:93:A6:BD:3D:59:E5:24:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840247BDAAC32AE03EDE8D66BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74199609-dc07-3a1f-93ed-89b383c50969.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.94.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:7b:da:ac:32:ae:03:ed:e8:d6:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=174b8e19-7b4f-42fd-af19-915a418fbc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:e4:a1:a2:2f:a1:12:db:7a:2b:0a:49:d1:
                    41:46:e5:b8:1b:a7:71:d7:ed:11:f4:ed:56:29:83:
                    8a:29:91:d7:e9:ce:25:62:da:ab:ee:06:14:f4:ef:
                    35:a9:85:e5:3e:cc:5d:9e:f8:65:33:40:64:39:03:
                    02:23:1e:f5:97:1e:f7:a4:7b:44:b4:cd:4a:8e:cf:
                    d5:97:01:cb:29:22:05:f7:dd:c2:af:c2:ff:92:28:
                    18:d5:b8:14:11:82:73:2e:f2:39:f5:19:ba:25:2a:
                    14:a6:d2:84:d9:13:9e:05:b6:9f:53:57:27:11:ff:
                    13:94:1f:9a:d7:1e:de:83:fd:54:91:6d:fa:37:fc:
                    e2:55:41:eb:cd:17:1f:bc:df:ef:2a:5c:be:7b:e7:
                    35:7f:d4:a5:66:bb:d0:fd:d0:fc:b5:bd:7d:a0:52:
                    c9:70:06:11:48:d5:07:ac:14:97:d9:f6:68:f4:0e:
                    a3:21:88:99:8e:51:cb:ee:b8:c1:9d:69:bf:a2:aa:
                    84:71:61:c0:dd:bb:72:77:d1:d7:0b:c2:1a:1b:ee:
                    17:10:9a:40:75:8f:af:ae:16:e0:15:1e:26:ce:fa:
                    1c:2f:19:6c:21:d7:3f:58:77:ab:7c:8f:df:03:f3:
                    86:15:c0:f2:ed:b7:5c:00:df:c5:ec:46:0f:af:5a:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:0A:7B:2D:A2:A2:79:32:47:EA:C9:93:A6:BD:3D:59:E5:24:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74199609-dc07-3a1f-93ed-89b383c50969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:c8:af:fa:8d:a1:09:41:d6:1a:69:1c:95:2d:ab:8c:ab:
         04:1c:5f:2b:b9:d8:fe:f4:e5:33:b8:94:8a:45:52:ca:9f:9c:
         66:af:78:dc:e0:ec:06:92:d8:cb:c5:29:9e:20:12:58:8a:b0:
         b9:55:9d:05:a5:07:c1:de:8b:07:4c:28:35:81:ca:a2:e5:f3:
         cb:f0:7e:21:34:8c:35:58:96:b5:ef:fb:c8:52:d6:21:09:c0:
         d1:3a:0b:a0:78:91:b5:c3:47:ef:44:05:4f:ff:48:fa:5f:62:
         d2:71:cd:be:cb:aa:66:b7:d2:a3:a1:b6:a1:14:10:fc:14:6c:
         ac:0a:2c:37:ec:62:e5:60:2f:19:62:e2:5d:b8:6f:be:d1:e9:
         81:d1:fe:97:2f:ab:34:6a:9f:d9:35:50:e1:e3:ee:d7:5a:b4:
         41:16:96:8e:d9:a9:87:b2:c5:0a:97:60:40:ba:4d:20:9c:a2:
         0b:fe:55:05:7d:95:46:f7:b8:6d:c6:b3:65:a8:29:a0:0b:35:
         1d:c4:4a:e9:f6:74:8b:86:6f:83:cb:fe:bd:4d:d3:2c:29:0b:
         44:0e:ee:c5:34:0a:0c:b4:45:34:a1:5b:37:40:e5:94:33:22:
         5d:04:35:09:49:f8:96:6b:98:de:39:44:e5:27:20:e0:9d:0b:
         0d:81:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:26 2025 by rpki-client