Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ecd8c5d-815f-3225-8594-8fe43ae0f284.roa
File:                     7ecd8c5d-815f-3225-8594-8fe43ae0f284.roa (raw, json)
Hash identifier:          GFFqDx8lZaqFMkmgVRYd+TabX9hswc4aZTVtL5wFwl8=
Subject key identifier:   C1:6C:B9:A8:3A:2A:23:41:FE:6A:B0:0E:EA:38:30:C1:F4:88:2F:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEBA9DD3ADC26ECCFE5D0BF90
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ecd8c5d-815f-3225-8594-8fe43ae0f284.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:a9:dd:3a:dc:26:ec:cf:e5:d0:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=9fad6578-246f-46e6-b1de-e7b37bf3ce89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:75:e4:5e:35:57:e1:05:51:55:c1:39:73:
                    a3:66:02:fb:cd:e8:76:2a:c9:15:22:96:eb:99:ac:
                    f6:6e:4c:4c:bb:74:08:79:ab:48:0f:74:41:32:b5:
                    43:ed:91:25:42:8c:a6:50:0f:23:30:36:00:bf:87:
                    8f:a2:94:08:ef:a8:62:2d:45:f2:22:ce:8e:7c:95:
                    20:1f:94:98:1d:11:be:2f:35:57:62:a8:48:31:e0:
                    43:b5:19:62:c6:60:db:4f:e9:eb:1b:85:dd:c3:08:
                    99:1c:54:e1:2c:4a:41:4d:f4:d0:5f:02:9c:42:fe:
                    88:90:37:d4:cb:1e:09:c5:7e:fa:13:70:29:85:e3:
                    50:26:44:6c:36:59:78:b0:32:f1:f7:e1:55:7c:39:
                    dd:f8:01:de:8b:85:91:16:6a:d1:e8:3d:9c:7a:cc:
                    1c:b5:68:1a:d4:79:66:1f:2f:44:ef:e0:3c:d9:22:
                    da:1f:52:3f:9c:71:18:b5:6e:4c:53:f9:30:d1:13:
                    e6:c2:9e:4a:6b:b4:e6:a6:05:91:59:76:98:83:cd:
                    75:29:f9:af:08:86:cd:ec:15:2b:12:a5:24:85:b2:
                    66:26:cf:0e:72:7d:90:40:b3:51:9a:f5:8f:f2:9a:
                    99:47:b8:2e:f7:15:fe:25:76:40:e0:8c:52:de:bf:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:B9:A8:3A:2A:23:41:FE:6A:B0:0E:EA:38:30:C1:F4:88:2F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ecd8c5d-815f-3225-8594-8fe43ae0f284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:63:16:3b:da:cb:8c:55:ff:cd:24:ba:10:03:53:4c:f5:
         56:3d:8a:33:d8:1c:d7:b3:f2:df:ac:bf:09:a8:36:5d:be:20:
         85:61:c1:d9:c0:ee:d4:ab:55:07:5b:f1:0e:58:b2:f0:80:21:
         2a:22:43:1e:23:1b:ec:2a:92:5a:ba:08:e5:ca:af:65:64:51:
         f8:04:f0:0d:08:08:d7:7c:cd:70:ea:05:a3:a4:90:2d:40:7b:
         3c:a2:7c:61:a3:82:4b:91:32:11:54:d6:08:b0:88:ca:99:7b:
         dd:a7:7f:85:9b:3b:f7:99:50:d2:a2:67:b1:0b:55:ee:34:78:
         f9:bc:c1:e9:0c:33:47:54:ff:0a:b7:a8:5a:2d:3c:9e:47:1c:
         b1:08:ba:11:53:8a:b5:ac:51:a6:d6:cf:3c:ae:74:71:fe:f7:
         41:20:a1:2e:3f:a7:dc:24:bf:83:74:c6:19:bc:0e:90:56:e2:
         39:71:20:7b:33:78:fa:5a:e6:62:75:a1:60:b2:87:cf:4f:d7:
         f2:1d:a3:f4:4c:a4:0e:55:23:d4:9c:19:7a:f3:e0:2e:7b:3a:
         17:84:66:2f:c9:bd:a6:c9:d1:5c:cf:70:c1:cf:a8:83:0b:55:
         69:03:2b:03:aa:be:d7:32:8b:ab:b7:d0:cd:7b:0a:58:0e:a6:
         5a:c9:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:10 2025 by rpki-client