Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78de2dd5-2def-37d0-ac40-6a68a22552a7.roa
File:                     78de2dd5-2def-37d0-ac40-6a68a22552a7.roa (raw, json)
Hash identifier:          pUERimPze28zZ20eaZlUL+nuTEO5THOrOEQhSRRsx3s=
Subject key identifier:   8E:69:DC:CB:8F:2F:71:53:AD:BC:6B:CB:47:38:F4:0E:55:16:FE:2D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D319C2DAF0FE182BCF6CCDB40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78de2dd5-2def-37d0-ac40-6a68a22552a7.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:31:9c:2d:af:0f:e1:82:bc:f6:cc:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=e84c1681-57af-42c7-ac52-ee14887a5060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:dc:45:52:77:00:0d:7e:4e:12:61:62:9f:
                    cd:58:25:7a:f5:90:0a:21:30:da:4c:51:f1:39:ba:
                    92:ae:b4:f6:77:3b:c9:dc:43:b0:7c:72:03:77:73:
                    c6:ab:7e:98:c6:07:10:04:62:ea:55:3b:ef:5d:5d:
                    f0:9d:9f:18:be:81:e9:0b:c3:5e:34:c9:f7:d4:79:
                    f2:a6:d6:1d:9e:78:2f:f9:8d:bc:24:fb:78:24:fe:
                    a1:49:48:c2:41:1b:a8:92:dd:92:70:67:5c:95:d7:
                    28:7c:c1:60:d3:8c:df:40:74:45:0d:af:2b:e4:8f:
                    06:cd:6a:31:85:ac:02:68:cd:63:1d:a8:41:9a:2f:
                    93:96:73:58:da:22:66:70:cb:9f:65:79:40:4d:21:
                    75:3d:5e:82:a2:4f:e0:c3:b9:d3:bc:10:69:ed:7e:
                    fa:54:92:bf:c0:45:c6:6c:c8:dc:a5:70:8c:fe:04:
                    ee:e5:d9:77:31:66:f1:6d:e7:2e:35:43:e9:67:65:
                    77:f2:f3:b2:73:ee:c6:a1:70:48:8b:fe:f7:49:13:
                    5a:99:8b:64:22:ac:67:c7:43:ae:d9:9f:7c:5d:e0:
                    e0:cb:84:46:93:01:5f:ca:d4:df:0e:89:a5:c7:21:
                    37:f3:3f:36:bc:94:ac:70:dc:2a:b5:c0:34:81:ec:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:DC:CB:8F:2F:71:53:AD:BC:6B:CB:47:38:F4:0E:55:16:FE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/78de2dd5-2def-37d0-ac40-6a68a22552a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:68:37:9c:71:9a:9d:59:08:d0:3f:bc:8e:67:f4:f9:fa:cb:
         a8:9d:6e:b6:20:e4:54:33:d2:9e:a5:0c:e6:f0:7b:87:da:b7:
         a6:e2:af:c1:61:83:05:14:29:f6:f9:fa:88:78:36:c2:f4:bc:
         15:8b:0e:81:99:73:bb:8b:e3:44:38:22:97:7c:a9:fd:a4:de:
         04:4e:cf:1d:c0:ba:20:65:68:14:8b:51:2f:b2:bd:0f:c6:d9:
         2f:1a:d2:52:9c:54:e8:0a:2a:c0:92:00:5b:de:db:50:b1:17:
         70:c7:8b:99:42:9c:d7:0c:08:2b:49:19:5f:42:c1:b8:71:5d:
         c6:0d:7f:87:f3:2c:d2:f0:23:04:52:dc:27:cb:5b:1a:c9:1b:
         9c:1c:40:d1:81:03:9b:b9:84:5c:d8:6c:15:c7:ae:fa:41:c1:
         22:25:a1:7b:7d:9d:58:c6:2c:30:45:a9:6b:22:a6:fd:6a:1c:
         83:07:dd:b5:80:78:ad:c5:3f:16:cf:b5:79:a1:f8:8e:ec:65:
         91:89:62:2d:0d:f5:ec:18:ee:ad:d8:46:11:bb:ea:f7:9d:63:
         1e:8c:c4:4b:c9:a8:d8:a7:4d:85:36:ab:47:42:88:68:0f:86:
         38:5e:b8:59:93:67:7e:ff:ea:91:18:e7:d5:21:f5:45:bb:d8:
         ee:b0:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:09:17 2025 by rpki-client