Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b43b40-288a-3768-88cd-7cce7fa578e0.roa
File:                     76b43b40-288a-3768-88cd-7cce7fa578e0.roa (raw, json)
Hash identifier:          2S7OSS2eOoLq6Tm/cHId394QTDNgWMz82ZK1JxFyxXQ=
Subject key identifier:   71:1C:50:BB:81:EE:0C:FC:C6:EA:67:F8:DE:C8:29:59:2B:93:40:0B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9D7EB2FE7EBC75097E982780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b43b40-288a-3768-88cd-7cce7fa578e0.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9d:7e:b2:fe:7e:bc:75:09:7e:98:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=09362f75-84cc-45b4-ae23-a7ad510cc401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:a9:5d:f6:21:54:5b:97:86:b9:2a:41:29:
                    ce:0b:b7:86:22:16:88:c0:bb:93:fb:79:04:98:99:
                    63:43:b8:e3:c2:90:78:11:83:d1:42:43:37:e0:ae:
                    6b:fc:f5:80:95:92:cd:67:2b:d0:e8:32:df:26:d6:
                    34:f8:d2:8a:bb:66:3d:15:8d:f9:95:dc:f4:d2:cb:
                    83:c1:19:1c:b3:b8:52:57:47:39:56:88:ce:c4:56:
                    99:6e:91:99:9e:36:a3:9f:67:5a:28:8e:94:73:71:
                    43:52:09:b5:3a:02:70:a2:e8:bb:5b:24:99:cd:ea:
                    f9:3b:20:44:6c:10:9d:da:ce:f6:c9:fe:42:39:28:
                    d0:13:33:85:7d:db:3e:3c:0b:79:70:ef:b7:9d:f8:
                    a7:75:4a:39:9c:a6:23:e1:05:b7:3b:df:b4:88:58:
                    e0:7a:8c:9e:7a:9d:25:9d:e3:85:e5:55:f3:49:4c:
                    e6:23:c5:41:86:c0:4b:10:e3:1c:74:61:ee:65:75:
                    5d:b2:e2:da:71:22:57:82:c5:7a:fa:fc:d1:fe:63:
                    7c:e5:ae:54:e7:7c:be:99:cd:9f:bd:ad:08:3d:09:
                    99:22:f7:10:fb:ba:aa:6e:49:28:91:7b:57:2d:94:
                    d2:e4:b2:0c:ce:8e:0b:59:60:97:54:0e:16:b1:8b:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:50:BB:81:EE:0C:FC:C6:EA:67:F8:DE:C8:29:59:2B:93:40:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76b43b40-288a-3768-88cd-7cce7fa578e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:63:c9:2e:bd:11:a6:64:68:ae:33:e2:4b:69:a5:5b:18:01:
         0b:dc:a4:12:23:b7:35:ea:9a:67:4b:09:0b:62:ac:53:84:f1:
         b6:0a:39:c5:bd:fc:a3:dd:36:14:2d:b0:79:dd:16:92:c1:e8:
         26:95:bf:84:90:25:ad:c5:1d:49:cd:85:6a:ab:e7:0b:d9:0f:
         3d:96:07:25:4e:b5:cd:51:4c:46:c8:eb:47:c3:5d:d9:36:fa:
         59:81:5a:9c:90:7f:3d:f7:a8:0b:aa:95:fb:ca:da:55:e6:3e:
         93:e9:39:51:8a:c5:61:64:5a:c5:3d:91:63:42:fb:01:62:fe:
         17:55:da:90:ac:ba:12:d0:0b:c7:c3:77:11:99:8c:d8:ab:71:
         66:bb:ba:3c:b0:b9:e2:bb:5e:1d:0d:d2:26:65:87:40:8f:c6:
         6a:41:7a:ac:04:87:43:a3:4c:93:c0:b9:86:6d:31:7b:f0:e3:
         57:1f:82:d0:b9:4d:b3:91:a1:5b:7a:f2:5f:f7:55:66:7c:d1:
         d5:a4:a3:2e:fe:2f:9c:8c:d3:2a:28:b6:f2:6f:12:41:97:ee:
         62:ec:e1:e0:02:1e:e4:e3:47:6e:c3:da:1b:1a:84:29:dc:80:
         ef:27:47:8e:e7:19:e4:aa:37:cd:40:9a:fe:7c:db:d6:7b:5b:
         2d:96:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:37 2025 by rpki-client