Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77660e78-4c29-3ff6-bd68-574909868f93.roa
File:                     77660e78-4c29-3ff6-bd68-574909868f93.roa (raw, json)
Hash identifier:          bfWvTW3h286K39LEGONSlMi9vNouRy30O9CeaJNdoOE=
Subject key identifier:   0C:66:2A:AF:69:6A:90:08:4F:B2:71:E8:FC:DA:F6:EF:CD:CE:60:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584094E8A8EFA20A4156A75B4148
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77660e78-4c29-3ff6-bd68-574909868f93.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.219.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:e8:a8:ef:a2:0a:41:56:a7:5b:41:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=3f358895-a3bd-4c8e-869d-55928fe1cb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:cf:7b:b2:81:3d:b0:30:76:8f:20:8d:c2:
                    17:78:1a:21:23:9c:94:0a:c7:ad:c0:a9:a7:39:16:
                    02:54:80:b3:45:03:60:43:c9:4c:0f:a6:ad:6a:d9:
                    ee:e2:14:29:d4:9f:1e:68:33:4b:12:83:2d:d6:ff:
                    82:99:28:8d:ad:73:05:c2:86:86:c9:65:7b:8a:b1:
                    a0:68:a1:1a:a4:a4:78:7b:4e:aa:d5:14:1d:75:95:
                    44:b9:51:ae:df:a5:32:77:3e:84:fb:23:03:9a:d7:
                    e5:2b:78:97:e0:0c:8b:3b:b5:15:44:f2:37:6e:10:
                    9a:35:da:47:b7:28:ff:d9:8e:56:ba:8c:d9:ca:c9:
                    62:27:d8:d8:49:74:c8:9e:b0:a0:da:16:ae:61:cf:
                    33:bc:34:af:1d:41:2f:e5:30:ed:40:0e:1b:1c:e1:
                    20:ba:2e:67:ea:38:01:5b:b8:3a:df:db:fa:d2:56:
                    fb:95:e3:de:09:5b:35:1e:6a:d6:49:79:57:79:02:
                    48:df:a7:f1:d7:63:d4:35:10:a5:9a:b6:83:96:66:
                    b8:80:09:a2:92:b6:7a:7b:ae:e7:94:35:40:4f:d8:
                    1a:f7:e2:e2:57:7c:10:96:9a:b9:4a:12:94:ce:bc:
                    aa:76:6f:96:4b:f1:c9:71:68:c3:3f:e1:fe:38:05:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:2A:AF:69:6A:90:08:4F:B2:71:E8:FC:DA:F6:EF:CD:CE:60:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/77660e78-4c29-3ff6-bd68-574909868f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:2a:38:8a:73:c1:2b:86:db:b3:fc:c1:82:d2:63:57:d4:
         a4:1f:a6:48:b0:c4:98:7b:d6:6f:66:2d:dd:3f:49:58:a9:85:
         4f:7a:7e:fa:b2:5c:fa:e6:32:77:a4:3e:b5:83:74:dc:4a:4f:
         5a:b1:5f:15:8e:c9:87:df:26:76:ad:17:5d:bb:e8:4e:e9:83:
         30:d5:a6:e9:e2:31:d8:11:ba:19:ba:cd:41:6c:f9:a3:3e:d0:
         8f:f6:79:b2:ad:48:f6:27:61:65:77:49:d4:53:4f:48:21:53:
         09:00:6e:00:4c:27:da:d0:67:b0:78:a3:8e:b7:e0:fe:a7:23:
         5d:4d:43:de:fe:b2:7e:44:7b:84:0f:2f:4e:8e:fd:af:79:e0:
         ca:09:8b:96:be:7f:2f:1f:4b:f2:7f:8b:94:fc:61:ba:a7:61:
         95:b4:18:65:02:bd:e8:9d:0f:dd:7e:92:87:18:05:4a:cd:41:
         29:a6:d0:66:53:1d:a0:0a:11:3a:81:9c:f3:0c:b7:37:0c:0c:
         38:b8:85:6c:27:4d:77:d6:12:29:10:69:a4:12:11:f3:ba:59:
         4f:1c:f2:8b:07:1e:c2:b4:99:96:3c:5f:54:f1:f3:b2:03:99:
         ed:fc:65:b0:38:1d:5a:71:68:00:3e:3b:a4:02:75:d9:3c:98:
         a6:ea:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:37 2025 by rpki-client