Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80e78dc4-4006-3395-98d7-bc3a7bdb86af.roa
File:                     80e78dc4-4006-3395-98d7-bc3a7bdb86af.roa (raw, json)
Hash identifier:          Yroc/Ke8y12FkJCIYsODW3O1RgQr7cjvB9ROgAcWbhM=
Subject key identifier:   3F:2F:01:59:13:75:48:19:5B:C2:D8:A4:44:AB:08:3B:39:8C:CD:68
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584041A6A4B95ECACD1D74D797C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80e78dc4-4006-3395-98d7-bc3a7bdb86af.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:a6:a4:b9:5e:ca:cd:1d:74:d7:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=6c005772-0479-4d15-822a-6137b3c40a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:f5:e2:77:e2:b2:44:6e:45:ce:45:c5:48:
                    b9:bc:cd:07:36:32:b0:b5:2d:c7:4b:5f:ca:0e:fc:
                    29:f0:99:12:19:cf:01:e9:ca:75:96:30:8c:a5:ba:
                    52:e1:48:07:78:14:c4:49:83:6e:88:f5:92:9c:71:
                    d7:ae:de:ac:50:c3:d3:3e:49:ef:00:30:5a:dd:a1:
                    5c:62:29:2f:97:f4:69:ad:7b:a4:61:31:f5:66:fc:
                    b3:19:6d:a1:6b:bf:13:4d:30:4a:c0:a6:2d:62:8b:
                    c2:4e:cc:01:1b:92:3e:f3:74:89:3c:be:b6:a1:61:
                    ea:3f:e2:d9:0a:3f:8e:bc:ac:df:67:48:43:cb:d5:
                    bf:f4:f8:ac:fb:d5:27:c2:5d:bc:d8:34:39:52:5c:
                    bb:d3:e7:10:a0:98:45:61:4b:fc:d2:f0:9d:24:5d:
                    de:97:96:19:d1:26:12:1a:88:53:07:0a:fd:c4:69:
                    81:9c:a1:cf:29:9b:54:70:15:ef:d2:ef:84:30:ef:
                    35:0e:a1:97:41:f7:5a:c5:22:46:d0:7c:eb:d3:22:
                    de:72:34:4c:88:b0:ad:2c:33:cd:7b:76:92:13:5b:
                    42:8e:10:a7:a9:64:c1:b5:3b:a7:01:ee:ab:71:96:
                    ca:dd:c2:a2:78:56:97:f6:db:6d:b3:34:f6:7c:0b:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:01:59:13:75:48:19:5B:C2:D8:A4:44:AB:08:3B:39:8C:CD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80e78dc4-4006-3395-98d7-bc3a7bdb86af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:51:2c:27:e9:07:f9:0b:d7:1b:76:c7:8c:11:2a:df:43:85:
         1f:00:09:8c:4b:ae:11:34:e0:00:aa:13:44:fc:05:de:98:5c:
         99:a4:e8:94:40:e6:7c:74:cb:0b:ca:c0:e6:28:3d:22:e3:06:
         8b:49:36:68:0c:77:1e:28:08:7d:d7:08:b2:2a:3d:d8:46:25:
         e4:12:22:c0:49:fe:df:0a:91:1a:da:07:92:a7:69:65:be:d4:
         72:fb:b3:87:1f:1e:24:27:12:fd:e1:f4:30:04:cc:15:96:23:
         fa:e9:11:3a:bf:8e:8b:1b:a8:a9:cc:59:82:b2:bc:87:72:b7:
         0f:cc:b7:86:f0:d9:7c:09:0a:9c:53:7b:61:9d:08:b4:94:e1:
         84:0e:44:0c:a1:25:7b:42:72:0b:b0:57:0f:e8:c3:73:ac:51:
         38:3c:8b:dd:ac:c2:f5:94:a6:67:1e:25:11:84:f6:ab:81:07:
         da:4b:ca:89:5c:e9:61:64:79:6c:85:e8:30:18:58:e7:01:47:
         82:77:57:c8:1d:14:f1:8b:be:22:5d:8f:ff:8c:a6:39:53:da:
         ea:28:ce:31:3a:2c:e9:97:99:ab:99:0d:d7:0c:45:77:89:43:
         af:8a:f4:d8:27:d6:81:c2:b9:ec:f9:b7:a0:a8:3b:e0:8e:27:
         56:14:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:23 2025 by rpki-client