Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74dd4227-b141-36f3-8b8e-db5984518d91.roa
File:                     74dd4227-b141-36f3-8b8e-db5984518d91.roa (raw, json)
Hash identifier:          TMui/YnUhmGhcQ1OIiz7texpJEf0FfTZc6nE/kSCu/I=
Subject key identifier:   13:BC:36:9B:F1:F5:71:BB:A7:5C:E5:F6:A0:48:5F:66:66:FB:F7:50
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404BAF18E918C679740685A7C2
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74dd4227-b141-36f3-8b8e-db5984518d91.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:af:18:e9:18:c6:79:74:06:85:a7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=95e1db92-97f5-4f0a-b88c-f518c8775d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:1f:69:c5:81:89:5b:20:21:9b:51:26:ab:
                    79:60:d0:25:65:fd:d6:a2:f4:4a:6f:01:32:d8:6e:
                    3b:67:08:72:8c:af:73:79:bc:00:be:31:6f:52:ad:
                    8f:dd:a0:e4:69:76:a3:94:88:c4:5c:29:54:b7:73:
                    8b:1b:d0:90:4f:04:4f:2d:e5:2b:f9:0b:16:04:c7:
                    e6:ea:ea:ac:ec:01:d8:20:7e:eb:08:15:9a:5b:df:
                    21:0a:f6:3a:69:b2:c7:ff:81:e5:71:39:fa:53:16:
                    d0:2b:25:3e:08:49:81:33:48:29:ed:78:dd:f7:43:
                    24:15:a0:9c:1b:28:bf:8f:82:bf:24:fe:ae:2a:8f:
                    56:bf:b3:28:bd:ef:d3:fe:0b:b0:b5:94:ab:db:c8:
                    c4:12:d4:ac:d1:8a:a2:8e:47:0d:45:48:d8:f5:48:
                    63:7a:76:3e:a5:66:10:5b:57:e8:fb:9b:2e:84:66:
                    ad:9c:7e:1a:14:15:31:83:05:b1:f8:de:ab:bf:ef:
                    9e:fd:2d:91:cf:2e:91:36:b4:77:ec:b4:0e:2d:32:
                    d4:1f:b5:cc:33:2f:8b:5e:2e:f4:c3:59:4c:0c:1a:
                    5e:f1:a3:bd:fa:b9:ed:21:bd:01:5f:83:83:0e:58:
                    c0:48:8e:12:b0:1b:4e:e1:72:4e:f9:24:27:f0:92:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BC:36:9B:F1:F5:71:BB:A7:5C:E5:F6:A0:48:5F:66:66:FB:F7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74dd4227-b141-36f3-8b8e-db5984518d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:ed:14:5a:ea:45:b6:a9:f1:ee:5c:22:83:9e:7a:ed:c7:
         a0:ee:35:62:f0:59:07:fe:3a:bb:1f:79:43:2b:df:df:ff:fa:
         10:05:4b:29:b9:c7:e0:38:99:df:52:57:cd:e2:a8:06:4f:e6:
         70:e2:7f:ac:64:94:ab:48:fe:70:e9:b9:03:57:02:89:14:54:
         f1:76:7e:f0:3e:1a:a2:8f:09:c6:77:b6:13:30:c1:8c:4c:d5:
         6d:e6:1e:6d:d8:26:8a:95:c9:98:a1:98:18:af:ff:69:54:48:
         69:59:cc:7c:c0:d5:5d:ee:4d:30:cd:d2:ed:b8:99:b6:e2:b0:
         3e:ee:65:9c:b7:fd:cb:fa:27:3b:aa:20:53:fe:17:7d:ce:40:
         85:a1:f5:ad:51:a2:0e:fb:e6:27:f1:46:c2:e6:00:7a:2d:fb:
         e0:63:f9:75:9d:97:cd:1b:ca:47:78:80:56:d1:64:71:52:a4:
         09:ee:20:90:0d:e2:6c:37:40:07:a9:a7:1a:ad:a9:ee:30:f5:
         41:19:76:79:43:93:7f:6b:34:1d:7e:0e:c0:9a:58:4d:b5:d1:
         5e:0d:00:39:e9:93:b9:6f:36:e5:36:1c:f7:3e:d7:10:10:2a:
         40:7e:da:78:99:c5:0f:ee:ed:0c:af:87:8d:98:85:5b:8b:0e:
         d0:72:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:30 2025 by rpki-client