Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8f76d7-07c9-3688-ae81-428b419f656a.roa
File:                     7a8f76d7-07c9-3688-ae81-428b419f656a.roa (raw, json)
Hash identifier:          Ac+hrQYSta5E2ts8SXLfptJ8VcGtN1SC10PHlmJetvk=
Subject key identifier:   2B:05:D0:2E:35:58:C1:B9:51:22:F8:C4:C3:E5:37:49:E3:16:27:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2F664BE093C5104C08388200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8f76d7-07c9-3688-ae81-428b419f656a.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.61.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:66:4b:e0:93:c5:10:4c:08:38:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=ed3f24f2-40b7-4f7a-87b0-1e4951ea59d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:cd:24:25:8d:88:45:d8:5e:79:04:db:77:
                    c0:38:b8:10:37:f6:f2:af:77:a7:44:2b:85:c4:2f:
                    8c:43:a1:14:17:1b:34:36:43:50:00:f7:8d:55:ea:
                    a3:6b:88:cd:ea:e8:96:64:df:d4:84:4a:8f:67:e4:
                    df:38:ec:00:0d:15:0a:96:1e:4d:96:5d:93:a8:e8:
                    fd:f8:06:95:1a:a6:93:82:93:86:9b:54:e2:f6:62:
                    3a:b4:00:b2:52:ac:dc:94:4c:aa:b2:1a:3a:f8:e5:
                    f4:de:f1:05:79:95:5b:d3:bc:16:81:de:bf:55:99:
                    54:f5:c3:02:c6:90:0a:c8:78:8f:6b:f4:4c:0a:8b:
                    c4:44:cb:2b:30:93:01:c0:aa:68:63:21:cc:da:5e:
                    8a:a0:a3:b6:33:78:c9:c8:b2:af:33:a7:ad:35:79:
                    0e:d6:93:7e:e9:26:84:13:83:c4:0a:ed:14:ec:c8:
                    a0:28:e2:1b:9b:63:bf:46:a0:63:a7:b3:30:aa:21:
                    bc:31:51:c4:c9:e2:55:bd:c0:89:62:b1:a1:c5:22:
                    55:86:d2:6f:99:ce:8c:b0:9f:4e:5a:0b:c2:6f:db:
                    69:6b:60:dc:6e:ca:3a:9b:b7:c6:7f:8f:65:44:46:
                    af:cf:c4:d5:b7:11:96:8d:04:e4:dc:80:04:59:a6:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:05:D0:2E:35:58:C1:B9:51:22:F8:C4:C3:E5:37:49:E3:16:27:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a8f76d7-07c9-3688-ae81-428b419f656a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:c8:96:f5:42:d3:34:a6:4f:7a:ce:7c:a0:c1:ba:02:af:
         7a:de:65:62:3c:84:10:b6:a3:40:df:a2:1d:3c:0c:45:b2:06:
         78:be:08:21:d0:af:e8:80:cc:ca:eb:62:02:01:97:63:5e:46:
         06:99:68:6f:a1:15:aa:1d:41:ed:79:d3:24:b3:24:47:11:a1:
         db:68:7e:27:0a:99:f6:3e:8e:e7:84:dc:75:ac:43:c0:a9:c3:
         d8:14:49:81:90:ea:e7:f3:92:82:f4:6a:2c:4c:45:5a:fd:f8:
         55:ad:d0:e3:60:d7:87:22:f2:e9:08:31:a1:66:32:2c:d9:3d:
         24:a5:0a:6e:be:a2:a9:17:ed:a5:6f:29:5c:6a:58:ab:4b:fe:
         cb:33:10:57:e4:e6:49:70:d3:e8:ac:09:4d:e7:5e:4a:f7:36:
         d1:32:56:99:2c:8f:cb:e4:18:bd:0a:99:6b:f4:97:2c:46:90:
         cd:e0:68:69:86:d6:90:a2:24:e3:6e:9f:39:e3:b5:5a:1c:74:
         b3:d3:ad:ef:b5:00:02:79:d1:fd:c8:1d:97:5e:58:96:0b:45:
         2d:6e:a9:3c:a2:40:df:84:2f:74:08:ca:75:9a:bc:e8:40:69:
         50:07:59:96:7d:8c:36:54:c3:a6:ed:4f:e3:e2:52:1f:8f:6a:
         15:79:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:19 2025 by rpki-client