Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f59af53-7309-3668-ac1d-9bcbb3b57c84.roa
File:                     7f59af53-7309-3668-ac1d-9bcbb3b57c84.roa (raw, json)
Hash identifier:          +yK26IAsC7llWQMe1qarm6u/KdcSH3x6L6tNIm3fHNE=
Subject key identifier:   AC:98:C1:49:77:E2:7E:F3:29:77:7B:10:28:DE:C9:E6:ED:B9:5B:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E011979CC5365009F8E86A700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f59af53-7309-3668-ac1d-9bcbb3b57c84.roa
Signing time:             Mon 23 May 2022 12:00:00 +0000
ROA not before:           Mon 23 May 2022 12:00:00 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:01:19:79:cc:53:65:00:9f:8e:86:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 23 12:00:00 2022 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=a389cb90-fa01-4e89-b227-40e0ad116ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:c8:e9:f5:11:96:b4:ce:fc:40:93:1b:cf:
                    3c:bc:37:68:fd:e4:a7:cb:1f:66:28:37:c9:8f:a3:
                    fe:f3:61:c7:a8:cd:da:d9:dd:c0:26:b2:29:3d:84:
                    df:84:e0:46:86:d8:29:e0:dd:bb:71:91:ca:d4:12:
                    91:e8:e0:40:6e:9e:67:a5:6e:3d:3a:bc:e6:79:ab:
                    77:70:32:5b:19:70:11:7d:22:25:d3:10:54:c8:03:
                    4a:71:f5:51:f8:40:5a:f1:73:9e:b0:4b:3a:11:43:
                    6d:ad:f5:91:f8:3c:3a:be:fb:63:8c:b1:08:5f:45:
                    3a:82:ee:cb:e0:48:82:71:f5:bd:5f:77:aa:56:27:
                    b2:03:d5:76:af:53:4d:6e:d4:a9:7e:89:1b:25:d0:
                    3c:0c:1a:fc:83:43:fd:10:00:35:78:ec:0d:c9:e1:
                    5e:5f:73:11:d6:28:46:f7:da:d5:0e:1b:35:42:19:
                    62:b2:d4:0e:e8:31:95:37:55:ee:a7:40:60:65:50:
                    a8:36:25:1e:5b:81:55:c3:fe:d6:97:ab:18:0d:1c:
                    19:88:fa:7c:c9:3b:c1:1d:22:64:0d:39:68:ae:b8:
                    a5:47:37:51:0c:21:96:73:ee:9d:ac:83:30:7d:6a:
                    2d:93:9c:4e:34:56:ac:36:8b:10:2d:16:01:cd:1c:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:C1:49:77:E2:7E:F3:29:77:7B:10:28:DE:C9:E6:ED:B9:5B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f59af53-7309-3668-ac1d-9bcbb3b57c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6e:b2:cb:88:0a:42:7d:af:0c:6e:89:cc:f0:bf:28:dc:41:
         27:85:a2:4c:b6:7a:dd:8d:5a:0e:30:38:b8:4a:f4:3f:b7:3c:
         b6:58:5f:64:88:83:f3:d1:4c:71:3b:08:3c:41:98:59:f5:2c:
         85:5d:1c:9d:af:21:3b:ea:84:37:5b:f5:8a:39:57:6f:1b:52:
         d8:39:f0:68:2f:fc:bd:22:f8:33:f5:a5:52:8c:6f:24:9e:29:
         22:2e:10:8a:31:0c:a7:a8:b5:fe:d7:ee:60:11:76:46:58:b9:
         51:03:be:a0:fe:49:8c:b8:0f:87:1a:24:5d:b0:9a:9b:64:4e:
         a1:24:36:6d:c8:ac:ec:d8:88:5a:76:ea:67:2f:ba:d0:7a:f4:
         6b:97:39:24:ec:3e:20:e1:b5:25:38:81:fc:71:b1:9e:f2:6f:
         9b:7b:75:ad:69:cc:ec:4f:7b:45:f9:70:4e:ea:da:13:5e:f0:
         c2:b6:07:5c:14:e4:42:19:be:e4:bc:c4:ba:ac:35:be:c1:c9:
         e9:a3:a0:7e:ae:75:f3:b5:e3:bc:e0:ea:73:11:e3:d2:6e:0d:
         cd:af:5a:71:5e:b0:c1:ae:26:b1:83:38:c9:37:9e:6d:97:da:
         fa:f1:d4:1d:00:c7:c3:d3:f4:2d:49:10:68:12:ac:c1:f4:60:
         12:69:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:01 2025 by rpki-client