Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd16d08-ea6f-328b-a501-9d8639559ac7.roa
File:                     7bd16d08-ea6f-328b-a501-9d8639559ac7.roa (raw, json)
Hash identifier:          NOCGLGF6XK/+jNOxKrpKZMgGyI4sGSDYbywsl/KZZ5o=
Subject key identifier:   F3:EB:1C:3D:CE:65:5F:C9:B3:32:77:46:14:80:FA:08:4F:BA:0C:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA47A5BF2CA7268B04ED2C740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd16d08-ea6f-328b-a501-9d8639559ac7.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.95.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:7a:5b:f2:ca:72:68:b0:4e:d2:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=65a7252e-2ee7-47b1-a990-ed01479be748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:64:09:b5:30:16:90:09:e1:c1:4a:ab:44:
                    c4:33:62:70:86:c5:e8:f2:f4:31:b7:54:4d:90:ba:
                    aa:fa:8a:95:9c:1b:a9:4c:07:df:cd:a7:32:75:e7:
                    64:86:19:ac:ac:d9:d8:49:8e:bd:e9:28:f7:5b:99:
                    19:d9:9b:e7:36:5e:11:4d:bb:33:22:e1:b6:68:06:
                    ad:e1:0b:0b:01:98:7e:15:b6:87:f4:19:c8:aa:8a:
                    50:b0:b2:ba:46:ad:cc:e7:1f:21:33:76:f7:10:29:
                    c1:28:38:e9:ad:48:58:ec:4b:b4:64:d3:e5:21:61:
                    27:b5:3f:9f:21:4d:83:7e:02:ef:72:d9:03:86:21:
                    d8:03:de:c5:87:33:9a:04:58:ee:47:79:a8:0a:a8:
                    18:8d:34:c4:29:de:6f:ea:b2:b3:c7:69:67:ab:99:
                    35:d3:e3:bc:31:6e:a0:82:e6:4a:68:58:51:c2:4c:
                    91:40:e0:dd:4a:92:cb:6d:da:d4:db:f0:4c:ef:bc:
                    ba:4a:bb:1c:9c:7a:ec:75:c7:15:e7:0f:6e:ab:28:
                    c0:48:1e:03:0c:7a:3c:6d:cc:88:1b:c3:31:19:84:
                    90:4e:a0:8c:67:20:60:8b:3e:49:0d:83:6f:8b:4e:
                    47:1e:b6:17:d6:09:af:f7:25:82:31:c3:59:9f:7e:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EB:1C:3D:CE:65:5F:C9:B3:32:77:46:14:80:FA:08:4F:BA:0C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bd16d08-ea6f-328b-a501-9d8639559ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:58:bb:0e:bb:74:1b:eb:a9:9e:b4:ba:f7:f3:eb:d2:63:
         9e:ed:42:a0:76:62:e0:df:2e:8a:91:39:9e:27:93:8b:d4:ee:
         30:ee:6d:00:4c:7b:c6:65:45:aa:42:fb:8c:fa:71:b2:74:fc:
         3c:66:9a:24:96:6b:0b:a5:98:8b:ad:61:84:29:de:1f:e2:f0:
         3b:f8:e8:5e:da:78:4a:79:e0:30:b6:27:10:ee:5c:b2:06:ac:
         35:55:cf:e5:25:5d:48:cc:67:ce:cc:98:69:3f:ea:de:85:c8:
         38:8e:ee:e2:a7:71:c8:4c:3f:30:57:3e:52:97:7b:a6:a0:4c:
         19:7f:6e:2e:fb:f6:fd:1a:64:6c:2e:7c:3b:e4:bf:4b:82:39:
         5f:e9:87:54:f9:18:4a:50:c2:37:4c:2e:38:7e:b5:c4:99:ec:
         be:e9:a7:5d:74:93:c8:29:6d:c7:11:5b:14:97:72:8c:83:0b:
         20:56:82:db:27:33:68:04:fd:b8:e9:f8:50:46:cc:7a:aa:ec:
         73:4e:1b:21:42:d8:df:59:c3:47:ad:4b:0b:f8:c1:7b:67:93:
         59:a8:96:7f:66:8f:30:a0:41:12:d3:4c:42:44:90:e8:32:79:
         36:a9:99:fd:98:53:81:1d:f2:74:88:d1:84:df:5b:2a:f2:00:
         8f:02:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:23 2025 by rpki-client