Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756956ff-16bb-3a63-96bb-795e95bd1043.roa
File:                     756956ff-16bb-3a63-96bb-795e95bd1043.roa (raw, json)
Hash identifier:          34hBt9LCZqPxUojX+cL3U6B2p1hKRWaXetSbAhyPIIk=
Subject key identifier:   13:E1:13:B2:48:B6:E3:78:3E:F2:1B:4B:F4:C7:E7:ED:69:B3:E4:EB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DDA03F01966D5CD54046E6780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756956ff-16bb-3a63-96bb-795e95bd1043.roa
Signing time:             Mon 09 May 2022 12:00:00 +0000
ROA not before:           Mon 09 May 2022 12:00:00 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:da:03:f0:19:66:d5:cd:54:04:6e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  9 12:00:00 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=eb932b2d-6fbf-4c89-be12-17fa28856414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6d:4e:3a:65:f2:c3:14:b1:bd:2a:0c:dc:a4:
                    e5:f1:9c:5e:f3:05:b3:7d:16:b0:ae:8e:49:c9:c0:
                    3b:73:1b:22:06:b6:85:14:ec:71:c4:4b:5d:09:74:
                    8a:64:5b:96:63:5d:6f:b6:25:6e:59:09:b2:2f:ed:
                    7b:97:fb:4c:c9:b0:58:d6:78:57:3b:dd:44:09:69:
                    b7:42:80:83:cf:72:e5:e3:64:dd:85:8f:96:5d:31:
                    de:31:2a:da:f3:2b:f8:02:e5:a2:36:a9:78:59:08:
                    dc:b6:f5:42:6a:ce:29:ab:b4:9d:e0:a8:a2:b4:71:
                    12:c4:e3:9d:1d:d1:c4:93:e1:1d:7e:a5:2c:63:fc:
                    52:94:ea:91:64:73:2d:d3:c3:bc:ed:03:a6:60:38:
                    7f:73:4d:eb:82:ca:5c:c4:6a:21:70:ae:7e:a4:4d:
                    7c:9b:2e:1f:e2:b2:f2:4d:c6:bf:8b:91:2f:83:fc:
                    a1:5f:1c:63:ba:e8:8d:5f:89:a2:f5:6b:45:3e:b3:
                    27:56:c2:2f:48:dc:52:29:05:37:5b:a3:b6:ad:3b:
                    76:da:ca:90:94:d9:b3:4c:94:96:b1:91:3f:4b:bf:
                    22:68:6f:e8:ac:78:90:a1:44:9a:e1:51:cc:d0:e3:
                    b2:ab:54:b4:d1:20:78:79:32:be:0e:80:b7:7c:f0:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E1:13:B2:48:B6:E3:78:3E:F2:1B:4B:F4:C7:E7:ED:69:B3:E4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/756956ff-16bb-3a63-96bb-795e95bd1043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:df:f0:56:c0:5a:00:53:b0:fe:26:0f:89:ea:24:3f:ca:
         45:26:4c:f6:d5:77:ad:a4:96:63:f8:43:c2:34:01:7a:db:e7:
         83:e6:cd:34:83:5b:a4:a7:09:aa:7b:49:79:81:cf:8f:82:69:
         55:ad:e7:93:13:78:d4:33:35:bd:e8:88:62:73:de:84:3f:8d:
         95:6b:9d:78:d2:fc:8e:c9:bb:3b:ae:08:7a:36:b1:2f:5e:e4:
         7c:c1:04:3a:6b:b4:d6:d3:e5:14:13:ad:f6:09:cd:11:12:a9:
         b3:1f:d7:8a:6f:d5:83:53:2a:1f:47:7b:2e:c7:fc:0d:61:1c:
         29:aa:9d:60:85:dc:54:5e:43:e2:0c:e3:69:a1:2b:e4:ff:e0:
         02:a3:1d:5a:6a:69:f2:f2:7a:72:56:5c:b6:da:81:3f:1d:8a:
         83:b4:b2:ea:8d:0d:04:94:b2:dc:e6:92:d8:c7:59:ac:78:2c:
         46:5e:5a:84:0e:98:71:b0:66:54:16:ee:a6:4d:17:c3:c5:98:
         55:40:87:a8:75:5e:6e:b0:ab:e7:ad:51:17:7d:34:34:38:7b:
         0f:b3:58:47:ef:ed:2a:56:0b:aa:5f:7f:cf:19:b6:5f:db:0e:
         f4:03:3e:83:a2:f1:ae:6f:87:c8:01:d7:b4:27:4f:a9:03:17:
         d5:86:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:35 2025 by rpki-client