Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7c3988c2-9b8e-38fc-a059-83562378bdf8.roa
File:                     7c3988c2-9b8e-38fc-a059-83562378bdf8.roa (raw, json)
Hash identifier:          pSROYruvtWPvpqqkXKdntDBGyUy1lLEw1b3SowIEr1k=
Subject key identifier:   60:B1:C2:D8:E0:CB:44:42:D6:AC:AD:1B:4C:BE:76:EA:C8:F7:DC:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFD31F6E8CF26FF5FBBE45E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7c3988c2-9b8e-38fc-a059-83562378bdf8.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Tue 27 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:31:f6:e8:cf:26:ff:5f:bb:e4:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Dec 27 05:00:00 2022 GMT
        Subject: CN=9c1772a2-00a6-43ce-936b-cef6c2385549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:ba:4a:e4:7c:95:f7:16:98:9f:6a:4a:0a:
                    f8:f7:a4:7e:7f:9b:ba:f2:1b:aa:01:8d:cd:23:d8:
                    1c:a2:3b:81:ec:8d:9b:f8:ae:a6:4b:21:7d:3d:c6:
                    92:10:da:07:6f:0a:cd:7d:5c:87:be:11:b4:11:59:
                    e0:04:5c:de:40:81:89:e7:69:c8:55:b6:29:d5:fd:
                    d1:69:c2:41:fa:0f:be:93:65:d2:ca:5c:bf:ed:d1:
                    d1:33:f8:f8:39:69:3e:32:9a:0a:69:58:56:4c:74:
                    52:72:1c:f7:19:ec:f4:c0:7b:a6:ea:06:54:a0:5e:
                    e8:12:43:97:2b:8d:50:c7:00:6d:f0:11:9f:75:14:
                    3d:66:48:4d:ea:6e:29:90:2c:6a:e6:73:16:71:4d:
                    ca:36:58:0a:13:fc:e6:92:dc:84:d4:18:97:5a:a4:
                    cd:86:37:7b:95:c2:18:fa:e7:75:19:03:30:41:6a:
                    c1:1d:a6:66:c5:53:86:bd:b6:7f:e6:37:80:3c:c7:
                    99:6c:d6:89:e2:6f:fe:4f:97:52:74:82:12:cf:fd:
                    0d:36:eb:49:c0:64:5e:58:a0:12:8b:05:ac:25:ce:
                    e2:0e:38:b8:3c:b9:60:3d:59:73:50:60:7b:95:56:
                    d5:f3:ce:98:b4:89:64:bd:05:59:54:35:cd:d2:4a:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:C2:D8:E0:CB:44:42:D6:AC:AD:1B:4C:BE:76:EA:C8:F7:DC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7c3988c2-9b8e-38fc-a059-83562378bdf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:24:e4:f0:e4:c0:2b:3a:6d:5d:56:49:ef:e1:17:fe:0c:
         a9:5a:38:70:e0:d1:b2:27:91:3b:0f:56:7b:35:88:5a:6a:e6:
         2e:29:28:e1:7e:97:91:4b:f6:e4:5c:b5:37:14:b1:ab:8d:24:
         f0:23:2f:4c:92:6c:fd:58:c5:93:d8:35:db:cc:3b:ff:20:7d:
         02:a2:b8:4d:5e:d5:90:8a:ec:06:49:ab:8c:83:f4:27:47:9d:
         3f:2f:67:e1:3c:d2:b4:5b:9f:1a:b9:05:cd:93:04:d4:33:26:
         90:92:05:c4:e7:f2:5a:e6:e9:5f:1f:e2:50:a6:25:b8:ef:b0:
         4b:64:59:e6:b8:c1:4c:ee:f0:f4:bb:c7:fd:63:7a:77:52:bc:
         99:ac:20:c1:fc:11:03:fa:19:b4:4d:12:5c:be:89:a3:47:81:
         2a:d8:97:9b:d6:97:c4:95:18:0f:03:74:b4:cb:62:68:39:a5:
         04:ab:d1:a6:44:39:cc:ec:9f:ea:64:18:f0:b5:6c:75:87:13:
         63:a4:5c:b9:f5:26:fd:78:85:97:ed:fa:29:b2:78:dc:12:43:
         7e:c7:0d:10:a5:46:a8:b2:3c:c7:fa:db:f0:78:60:82:f2:e8:
         be:27:81:89:3f:17:ac:f7:e0:fb:cb:02:6d:3f:83:a8:65:b9:
         72:19:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:48 2025 by rpki-client