Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d39b4a-6005-3643-9388-65422a130d1e.roa
File:                     80d39b4a-6005-3643-9388-65422a130d1e.roa (raw, json)
Hash identifier:          wZRnESRNxbBVv1ksuuM3Taqe5wjPAkBnQkUDaKuOjMY=
Subject key identifier:   EA:6E:4D:8C:B6:7D:EC:EC:31:81:98:7D:CA:33:46:79:44:A1:B8:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6BD56ADD136F5DFEF646F600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d39b4a-6005-3643-9388-65422a130d1e.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:d5:6a:dd:13:6f:5d:fe:f6:46:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=b8458c8b-e929-4d16-aa2c-b1859da14081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:a7:9a:ff:83:bb:a8:58:e8:db:c7:ae:58:
                    a5:1d:b6:fa:c4:7e:55:5c:97:ca:99:3d:60:e9:d4:
                    02:6b:a4:09:35:61:41:36:24:cd:a7:04:e0:8a:77:
                    60:07:b0:61:a8:17:3a:e8:d6:46:61:3b:ec:8a:b4:
                    9d:2e:ce:8a:8f:0d:76:bf:f5:65:5e:83:ae:57:73:
                    45:cd:18:f8:0f:3f:08:53:46:4b:99:88:02:09:51:
                    2f:b7:ee:9b:16:f1:49:58:8c:c0:68:1b:ae:59:7e:
                    27:6d:98:b3:e1:f6:c7:09:7d:ab:bf:3a:78:8b:38:
                    e2:89:d2:07:4c:8f:bb:17:02:ef:fb:b2:82:8d:38:
                    d4:4f:34:ff:65:79:e2:70:b8:10:85:87:bb:93:32:
                    49:f5:ed:74:d8:1b:4d:9c:34:b0:c8:a9:86:22:d8:
                    b9:60:09:fb:1e:2a:43:54:cb:4b:e9:3e:be:b8:1f:
                    5f:46:60:cc:e5:21:c7:17:26:df:25:e4:3d:cb:02:
                    7a:d8:b7:a4:5a:8e:70:51:9f:93:40:b0:e3:5b:68:
                    72:a8:d0:7d:a0:8d:2b:1c:15:ce:41:d6:dd:ec:29:
                    20:39:69:a0:4b:27:52:ac:26:9c:4e:7c:fe:67:81:
                    bc:b3:4a:ab:d1:b1:5f:86:b3:b7:80:06:8e:18:be:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6E:4D:8C:B6:7D:EC:EC:31:81:98:7D:CA:33:46:79:44:A1:B8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80d39b4a-6005-3643-9388-65422a130d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:7c:54:d9:f4:9e:5f:e2:c0:12:da:54:bd:34:12:45:20:
         71:c7:14:2c:94:ac:81:f1:d0:99:2c:97:cc:b8:53:11:85:36:
         3f:a2:86:4e:e1:2c:c3:c8:0d:fd:89:94:03:dd:29:b2:b8:b2:
         2f:5d:a1:ab:c6:61:e7:73:7b:23:e6:5a:a6:df:1a:64:8c:49:
         94:3a:d0:e5:b7:14:b0:de:d2:6b:f2:8d:3d:41:f4:e4:fc:41:
         21:71:85:e3:11:ec:9d:f6:a8:fb:ba:d4:97:10:3d:79:90:f8:
         dd:fe:74:81:93:86:61:55:06:3b:24:65:5f:29:e8:74:11:e1:
         eb:40:ec:0d:2d:28:27:48:0c:9a:43:e0:d2:a7:71:88:e9:d0:
         ff:41:27:c4:74:47:fa:c5:e6:dd:60:57:7f:27:8b:78:e2:c1:
         58:be:4d:b7:9a:75:30:71:f5:26:ac:2e:95:cd:d2:f6:f6:0e:
         8a:18:b7:9c:16:d1:b3:22:dc:16:f2:8a:f3:54:17:0a:63:a8:
         16:81:b7:d7:d7:82:4b:05:66:4e:09:72:ad:8f:ad:5d:04:58:
         42:cd:aa:bd:e3:60:7e:ad:10:4e:eb:22:e6:c1:3c:3e:11:b4:
         d3:08:dc:15:2c:d3:ea:c1:ad:0b:c7:c5:00:28:54:81:38:2c:
         56:cf:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:05 2025 by rpki-client