Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b5d9cbd-643c-3935-8440-30a83edd9530.roa
File:                     7b5d9cbd-643c-3935-8440-30a83edd9530.roa (raw, json)
Hash identifier:          GgLByLjWWqkfR5yHN85dQ3RcQ4+pMrbkjRIHpj1QZC8=
Subject key identifier:   EF:EA:31:F9:2E:5E:C2:57:90:9F:EE:D9:94:05:88:27:81:2F:01:C7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2E9B5E18F07D25B2E8524A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b5d9cbd-643c-3935-8440-30a83edd9530.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.124.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2e:9b:5e:18:f0:7d:25:b2:e8:52:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=eaa946e2-2f5c-4707-90d5-1a71a647f742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:38:c3:0d:f2:8c:45:f0:e3:d3:84:e3:ef:
                    f0:35:7c:3c:a5:09:ff:fb:f7:b7:ac:3e:c6:1b:d1:
                    d8:4f:39:6e:98:f0:5f:85:ea:25:a3:01:56:71:5f:
                    90:67:0d:54:b9:f6:ed:d6:71:48:e9:9e:15:15:e6:
                    5e:68:e7:bf:52:13:9a:95:dc:29:2c:8c:9c:87:e2:
                    d8:e9:e5:9f:dd:bb:4f:d5:5b:00:39:02:42:6f:ba:
                    1c:65:8a:c4:35:3c:46:b1:44:01:f8:fc:28:ef:51:
                    eb:a9:40:f2:51:df:9c:cd:f8:88:2b:88:89:ed:0f:
                    16:72:51:88:12:c8:64:da:d3:8b:6b:13:72:0e:77:
                    d9:4d:5a:01:a6:fd:e9:d0:a7:d8:38:b8:b0:70:92:
                    33:b8:12:01:87:52:e8:d8:8a:b3:41:0e:50:e5:b5:
                    82:11:a0:28:ee:2c:8a:e6:2e:ed:0e:df:83:f1:12:
                    19:76:c4:1b:bf:9b:9a:79:33:ca:fd:3e:45:f2:33:
                    94:c9:f7:19:28:7f:9f:70:e4:28:9a:e8:fc:18:68:
                    9b:52:b3:ad:12:0f:27:af:a8:a8:1a:0a:14:f7:85:
                    b2:99:b8:ea:6a:9b:79:e0:6f:85:9d:11:ec:30:5e:
                    88:d3:f4:8f:bd:6b:21:f7:dc:74:dd:45:f6:7b:d8:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:31:F9:2E:5E:C2:57:90:9F:EE:D9:94:05:88:27:81:2F:01:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7b5d9cbd-643c-3935-8440-30a83edd9530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.124.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:11:a4:c5:e1:72:64:1b:5a:bb:91:2c:ae:27:23:1a:0d:
         9f:21:da:1a:42:df:c8:3b:31:65:2b:db:52:34:01:92:fe:26:
         a9:5e:69:12:a4:9d:f7:45:52:64:60:21:cb:dc:7e:16:6b:53:
         a5:a0:e4:85:17:dd:3c:1e:c6:0c:1f:79:36:13:0b:1d:5c:d1:
         8f:15:63:15:56:cb:dc:70:f4:5f:18:9f:02:0d:26:f4:af:49:
         67:55:99:b6:94:32:d7:f0:2c:64:8f:c8:4f:28:92:ab:80:d3:
         1e:32:ff:c3:18:fa:0a:fb:5b:1a:26:1d:ac:e5:80:b8:0b:3e:
         ac:1e:93:63:fb:51:8a:ee:8e:d2:21:ee:89:19:c7:61:d8:e8:
         cb:29:c3:7a:cb:ee:78:12:c4:2a:45:17:0e:0e:3f:f5:ce:33:
         f6:6e:6a:93:12:1d:27:f8:57:b0:1c:47:96:d5:12:df:d4:a7:
         cd:68:94:05:6f:2b:f0:dd:50:69:42:d7:89:e5:f7:6e:a5:05:
         28:22:63:11:5b:1d:85:e4:99:48:ae:e2:bd:60:86:47:46:b2:
         e6:e6:03:47:78:b3:c3:9d:18:32:38:a5:b6:ad:ab:5a:2e:23:
         96:bb:da:22:b4:18:4a:d0:40:77:db:68:16:81:7b:98:3f:e2:
         1e:53:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:04 2025 by rpki-client