Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b34149-faa6-338a-a36e-ac3f20718486.roa
File:                     76b34149-faa6-338a-a36e-ac3f20718486.roa (raw, json)
Hash identifier:          tFkPiyu2q0tYv4rjJJDACFl4NXvcDgOpPh+WfFQL58Q=
Subject key identifier:   3B:0F:23:FC:88:4D:68:82:25:44:68:A1:A3:25:18:83:84:47:32:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D6487D4A0C2F675F8C9951B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b34149-faa6-338a-a36e-ac3f20718486.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 03 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:64:87:d4:a0:c2:f6:75:f8:c9:95:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : May  3 04:00:00 2022 GMT
        Subject: CN=c1c1a946-04ca-4243-83a9-df4f84c2e763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:78:98:7e:bf:97:b0:e1:d1:03:8c:31:46:
                    10:dc:d7:d7:a4:c5:7e:e9:9a:95:04:f2:0e:48:97:
                    44:98:cf:2e:b3:1b:47:a6:3e:25:b8:0d:0c:c5:1d:
                    8e:62:5e:93:d2:59:bc:87:16:70:8e:c3:05:ec:b7:
                    34:9b:e5:f6:9c:81:86:5f:84:f5:24:7a:fa:4f:0a:
                    61:46:b0:3c:93:ac:9c:ea:ca:cd:53:8b:df:ec:77:
                    de:51:73:1b:75:39:b5:16:57:19:d7:2f:8e:4c:4a:
                    0e:b7:34:f8:fa:9c:fe:38:df:9d:f4:cd:c0:51:65:
                    2c:4a:7a:ce:6e:d6:20:c3:fa:05:d0:dd:f3:61:41:
                    08:74:e1:92:65:91:19:81:3e:2d:d6:bc:40:ea:96:
                    ff:76:87:8b:9a:e9:e2:71:f7:b9:f4:64:5b:77:aa:
                    03:13:6b:90:b0:72:4f:2b:e2:6e:d4:ad:99:06:62:
                    70:bc:ee:73:61:4d:29:b9:05:7c:c2:2b:8e:31:96:
                    ef:a2:1a:13:04:71:92:86:38:76:aa:cf:8f:88:62:
                    bc:61:7a:db:02:c2:fb:e5:36:a9:af:47:d6:73:13:
                    2f:ca:75:bd:27:33:63:b3:ce:cc:85:b3:c9:66:e8:
                    73:f3:f4:d6:52:1f:32:12:68:b2:33:c8:b3:e6:2d:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:23:FC:88:4D:68:82:25:44:68:A1:A3:25:18:83:84:47:32:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b34149-faa6-338a-a36e-ac3f20718486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:34:f2:bc:88:53:d5:d4:a8:6c:be:b3:4c:16:a5:9c:1a:
         55:20:31:17:17:3e:55:93:3c:e1:52:44:bb:73:d1:bf:0d:f4:
         a5:47:be:75:b9:2b:1a:2a:66:8c:d4:cd:db:38:34:86:38:f2:
         a8:a0:5b:78:ef:4b:55:96:36:2a:02:b0:8a:2c:fe:4a:2e:09:
         03:4b:82:df:e4:9f:e8:2f:d8:ee:ff:13:ee:29:f1:dd:af:06:
         da:35:60:c6:5c:73:77:93:32:c4:8b:65:50:72:5c:77:21:0c:
         92:70:c4:e6:bb:db:1b:fd:c9:ac:98:73:7f:ee:86:24:90:7f:
         23:5f:3c:f4:01:e9:15:d8:fa:8b:ec:fe:47:2f:1e:a4:57:a8:
         b4:7a:7e:62:32:d7:58:51:cb:27:02:80:65:e9:5b:96:01:d2:
         49:2b:d5:f8:a1:c6:6f:08:c5:36:8f:2b:b3:36:33:51:d9:aa:
         b7:ea:6d:0d:0a:a0:29:de:97:35:b5:e3:cd:c0:77:36:34:17:
         f8:c3:16:04:47:d1:91:da:d5:60:69:38:27:29:85:97:48:c9:
         ee:fa:9a:85:fe:fb:88:8c:50:38:63:4e:66:df:66:7f:6c:d2:
         52:1b:70:2f:57:1e:c0:80:e4:1d:ab:16:c2:01:70:1a:e0:33:
         b5:cf:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:15 2025 by rpki-client