Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b43dd35-a824-392b-945f-3e58444e3b6f.roa
File:                     7b43dd35-a824-392b-945f-3e58444e3b6f.roa (raw, json)
Hash identifier:          4tQCYLD022nzRcJ82O/2jAoZEGBmeDdwETYBfC6b/uA=
Subject key identifier:   0F:29:EB:67:D1:5A:DB:9D:F2:F2:F7:C5:F0:A5:D6:2D:04:2D:35:CF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB3E422145C2200100894DA8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b43dd35-a824-392b-945f-3e58444e3b6f.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.75.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:3e:42:21:45:c2:20:01:00:89:4d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=51ca7409-d5b6-4362-9c82-77bc4429b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:75:4b:f6:ff:3c:68:b5:da:66:e4:0b:6c:
                    f0:f3:34:b9:fa:bc:57:de:5a:b2:ca:e4:6e:a5:1b:
                    82:e7:5f:56:7e:30:c6:1c:b2:b1:0d:0c:10:2a:a7:
                    c4:ee:a6:fd:6e:c0:ed:8d:85:e2:e5:e9:77:27:b8:
                    a6:61:66:c2:60:80:de:ec:0b:7e:ca:d8:f6:93:d1:
                    25:4d:14:ed:08:ad:1b:90:2f:fa:2a:01:c2:3e:ec:
                    39:2e:fe:b3:92:fd:0f:ba:5c:d1:64:a4:6e:82:7c:
                    69:86:5e:35:87:37:b3:09:de:ce:38:c9:1e:52:8f:
                    5f:01:d5:07:12:50:0c:ae:33:c3:4e:f6:35:98:a3:
                    45:d6:50:2d:4a:0f:57:7c:e9:9d:df:41:b4:7c:02:
                    af:d8:b2:25:76:d3:00:87:84:78:e3:4a:0e:0f:50:
                    6c:db:ef:84:00:01:a6:fc:30:34:ed:55:47:0f:af:
                    94:15:5d:c1:cf:09:3b:8e:88:81:b4:a5:dd:79:1b:
                    9c:13:b6:be:e5:b5:d9:98:50:b1:1e:57:07:5f:75:
                    ed:33:b1:ca:c1:91:9d:95:07:f4:79:f2:66:08:eb:
                    bf:53:3a:13:56:74:85:fa:da:1e:d7:b6:bc:63:b6:
                    74:40:db:b5:61:4c:32:33:69:0d:29:3c:b4:3c:62:
                    20:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:29:EB:67:D1:5A:DB:9D:F2:F2:F7:C5:F0:A5:D6:2D:04:2D:35:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b43dd35-a824-392b-945f-3e58444e3b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:be:e6:78:50:9b:cc:0d:8a:84:20:3f:96:a7:7a:dc:2d:d8:
         b1:99:05:9c:a7:9a:57:1b:1e:c1:d6:00:fa:75:82:e7:4f:1f:
         72:dd:96:aa:de:8c:94:10:25:a9:a7:56:1e:b6:8f:f1:af:6b:
         1e:af:71:27:a5:fe:2b:6d:99:f1:e1:e7:86:63:f1:74:22:95:
         cb:54:8f:b2:d7:4b:df:ee:95:2d:d7:18:b2:b1:30:02:f3:8d:
         f4:de:c6:e8:2c:ff:03:58:10:d5:1a:11:92:ec:e4:3d:d0:a2:
         92:e6:e6:30:89:e5:f8:2e:e5:5f:5a:3c:c8:b7:59:89:d2:09:
         47:ba:38:af:92:fa:98:bd:7b:66:a9:05:2c:c7:a2:3a:5b:54:
         ed:0b:4e:2a:e9:9d:eb:1f:a0:78:9a:48:e7:ef:25:85:45:b1:
         bb:1f:fe:d3:bd:6c:da:d1:f6:24:34:9f:8e:a2:11:49:09:78:
         bf:a7:60:68:4d:24:25:1b:00:33:5c:bd:fa:8f:77:f2:ad:f2:
         06:bb:97:13:44:fd:f0:9d:42:bd:a2:39:69:55:bd:35:79:42:
         42:6d:a2:62:ee:a4:64:57:7a:6c:71:ec:2f:4d:e0:43:16:42:
         08:a4:68:13:b4:da:64:ad:89:5f:e2:e2:74:03:52:35:d1:0a:
         8a:fd:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:34 2025 by rpki-client