Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8277a912-ca05-3fce-8618-bb0c145e49d6.roa
File:                     8277a912-ca05-3fce-8618-bb0c145e49d6.roa (raw, json)
Hash identifier:          Ae8zQeT6XoUmx5ErdBbm7fX8OV2ov55iR4Pn6rAd/x0=
Subject key identifier:   D8:4E:25:05:DF:F7:06:B6:22:17:3D:99:8C:E3:9A:BD:75:B7:20:B0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DFB7CDEBC3EE12EE3DB91D320
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8277a912-ca05-3fce-8618-bb0c145e49d6.roa
Signing time:             Sat 21 May 2022 12:00:00 +0000
ROA not before:           Sat 21 May 2022 12:00:00 +0000
ROA not after:            Sun 26 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.168.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:7c:de:bc:3e:e1:2e:e3:db:91:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 21 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2022 GMT
        Subject: CN=9f29a75e-c301-4031-94b4-1ae562a29665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:5b:ec:77:7b:5a:74:b2:62:da:3c:c2:76:
                    42:aa:c3:f0:17:97:0d:96:c9:69:6c:c6:f8:8e:fc:
                    16:4c:d9:11:e2:26:a8:c3:75:bf:c9:ef:93:d0:1c:
                    68:ba:7f:5a:e1:dd:5a:21:98:dc:a3:7a:a1:a4:f8:
                    85:30:11:10:2a:f7:6c:f8:2d:09:93:e6:77:11:a3:
                    c9:14:5e:68:aa:f0:21:9f:9a:bd:24:a1:45:03:2f:
                    90:ce:bf:7a:fe:b2:a4:78:76:05:85:4a:85:51:13:
                    70:bd:29:72:15:ec:36:a3:4c:e5:ce:39:a0:c3:ca:
                    23:71:5e:02:c0:d1:c7:96:d6:17:ce:2b:08:3d:39:
                    31:f0:c1:f1:c0:f1:7a:71:29:1f:bb:35:b3:e9:5a:
                    38:25:c6:45:12:c5:38:22:e7:bf:3a:42:04:9b:34:
                    56:71:55:2d:2b:f8:95:32:e3:ed:0d:6c:be:67:97:
                    67:36:99:7f:0d:c5:bf:f5:fe:ff:36:bf:d5:96:47:
                    46:b8:a9:d6:a0:40:dd:a9:74:60:f6:fb:de:fc:33:
                    1b:59:47:d4:81:d3:25:3e:2b:29:ee:f0:7c:c3:79:
                    8f:8a:41:29:16:47:ee:d5:d4:5f:b0:54:30:95:42:
                    67:94:2a:d9:f8:6f:1f:ef:c1:02:d0:40:56:8c:ab:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4E:25:05:DF:F7:06:B6:22:17:3D:99:8C:E3:9A:BD:75:B7:20:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8277a912-ca05-3fce-8618-bb0c145e49d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.168.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:75:64:16:85:e2:7f:ff:20:8e:78:32:61:02:e5:26:e5:74:
         a5:c3:1c:e2:e9:c9:4b:67:13:28:7c:5d:05:e7:9a:52:9e:22:
         b1:c4:c9:df:7b:3d:be:d7:ab:1c:ca:e7:7e:d5:47:2a:ce:47:
         5d:61:e1:00:52:34:91:f5:45:57:17:54:2f:76:7d:58:3d:11:
         6b:5d:d1:0a:7e:c9:c5:0c:3f:cc:6a:d7:7b:ab:f8:8f:05:59:
         55:9d:97:be:8a:01:e6:b2:df:55:f9:9d:7f:24:88:0e:98:db:
         80:70:f5:a6:0a:bb:c5:f4:37:6e:7f:7f:8e:7e:cd:4d:e6:a7:
         24:74:e8:42:ef:d5:e3:51:0b:4c:a8:47:b6:8f:3e:81:0e:31:
         7e:5a:e5:79:4c:80:2b:f6:a6:9b:7c:86:e0:e7:90:7f:49:af:
         81:2a:26:1d:4a:07:a2:03:1e:dd:c6:7b:fb:75:c2:04:89:41:
         38:dd:54:7e:f0:02:3e:ab:ca:af:bd:59:ce:80:0e:8f:0d:0a:
         ee:0d:3f:fb:bb:b4:31:b1:e5:a9:62:27:9c:67:62:14:de:79:
         2c:dc:d5:4f:7d:7a:13:9e:47:dc:7c:60:15:66:9e:8c:d1:cd:
         ca:37:15:28:95:d8:94:fe:7b:f6:c5:17:71:40:a2:7d:da:7a:
         27:5c:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:29 2025 by rpki-client