Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aee0424-fbf7-3ee6-810f-5a39ea8feb93.roa
File:                     7aee0424-fbf7-3ee6-810f-5a39ea8feb93.roa (raw, json)
Hash identifier:          rG4X6TRYfv3e2q1+sH5SyI828rgPFf8MccXMUktKRIM=
Subject key identifier:   1F:21:DF:F4:B1:36:93:5C:D8:10:77:22:7F:1D:52:F4:DB:6B:A4:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCEAC7DC8DDACDC686D243800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aee0424-fbf7-3ee6-810f-5a39ea8feb93.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:ac:7d:c8:dd:ac:dc:68:6d:24:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=bc0e4664-b7d5-4591-aa77-a162f3dfd37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:69:2a:db:14:65:6a:c1:3c:e4:b9:b1:4f:
                    98:f0:d0:90:3d:bd:e3:f9:fb:a0:00:cb:b4:ab:1c:
                    0a:68:23:64:fc:ff:fd:45:02:3f:b1:c3:42:d9:e1:
                    0e:fa:eb:29:c9:cb:fd:f6:43:99:67:5b:c6:de:78:
                    d0:43:2b:fe:fb:ae:4e:0c:63:d8:65:d0:ec:b2:6d:
                    be:b8:0f:dc:d6:51:e2:38:49:7a:a0:95:24:1e:36:
                    0f:e2:07:04:71:ca:ab:a2:b8:92:d8:5d:bc:17:92:
                    d6:82:6b:11:c1:52:44:28:37:98:02:60:ef:85:82:
                    42:6c:76:88:84:ba:7d:1c:d8:87:41:9d:6d:a3:07:
                    51:ec:0c:7d:bd:0a:ec:cd:19:b0:43:90:fc:d2:6d:
                    cd:20:c9:6d:15:3d:d7:36:fe:58:e6:ee:c7:ba:0c:
                    53:71:87:00:8b:3a:c7:5a:57:cf:6d:37:51:e7:aa:
                    ed:db:0f:51:0c:2a:13:70:2c:62:1a:82:93:8f:c4:
                    75:7b:a1:2f:0b:1a:61:73:9d:9f:91:e9:be:9d:14:
                    bd:70:80:8f:be:4e:9e:1b:7a:9e:cd:46:d6:a4:16:
                    66:87:e6:04:50:ea:98:95:4d:54:c4:56:ce:ae:58:
                    41:1b:05:12:f4:d2:fc:f5:6f:a3:d2:51:32:01:38:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:DF:F4:B1:36:93:5C:D8:10:77:22:7F:1D:52:F4:DB:6B:A4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aee0424-fbf7-3ee6-810f-5a39ea8feb93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:5d:ae:a1:1b:f2:07:e7:c5:a8:68:10:8a:24:27:98:fc:
         ce:8c:15:ce:0d:8e:36:b8:2a:7f:d4:1e:68:f4:b8:1a:4c:73:
         11:af:7a:72:62:3f:25:12:35:73:1a:07:cb:84:27:00:f9:7f:
         22:b5:21:09:b9:fa:d0:b1:4c:ce:53:a3:a7:eb:29:93:bf:d6:
         d7:46:4e:d4:84:29:79:db:93:ce:28:0f:e8:1d:54:e2:ab:96:
         60:f6:64:a1:82:0c:b4:e4:fc:72:59:15:4a:ee:ce:84:20:a9:
         58:6c:e9:07:ad:da:3a:92:1b:1d:2f:f8:00:b1:c1:2d:50:50:
         94:07:31:7c:e9:fb:a1:da:87:fb:12:8b:c9:73:60:b5:25:cb:
         63:02:60:5f:78:60:94:77:07:90:9c:06:c0:73:61:21:77:84:
         e1:00:ac:38:0f:a0:19:6c:d8:01:0f:e3:93:ab:a7:0f:df:5b:
         0e:0c:d2:66:a1:35:02:3a:aa:97:00:64:29:9a:bb:74:c4:5d:
         27:98:e9:35:59:0f:cb:ae:5f:ce:55:ee:2d:89:a8:69:52:79:
         c0:df:89:1e:4d:c9:c5:d9:5e:1b:e1:63:95:9f:90:3a:a6:8b:
         d0:79:80:4f:ab:25:86:c1:1f:b6:31:7b:20:32:9d:99:10:a7:
         3d:64:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:31 2025 by rpki-client