Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82a47b5f-d5c6-3a28-a2a7-26c60f4757d1.roa
File:                     82a47b5f-d5c6-3a28-a2a7-26c60f4757d1.roa (raw, json)
Hash identifier:          KRP1uRTuk2klbtjNrVwUN+WI4RoxgmT/anLUrVe5g/Q=
Subject key identifier:   21:34:0B:C8:5E:70:8D:BE:03:97:5B:DD:91:98:70:6D:42:D2:DA:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CA11C3E5DB4DCCA02BA4D4100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82a47b5f-d5c6-3a28-a2a7-26c60f4757d1.roa
Signing time:             Tue 18 Jan 2022 05:00:00 +0000
ROA not before:           Tue 18 Jan 2022 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.152.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a1:1c:3e:5d:b4:dc:ca:02:ba:4d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 05:00:00 2022 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=99245f7c-3154-489c-a957-a07ed9aa060d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:64:f1:ca:4c:84:40:62:23:c3:a3:67:e2:
                    97:7d:6e:87:e5:b1:2b:15:e6:7d:50:30:39:91:d1:
                    48:c4:76:73:8d:76:37:98:cd:6f:0e:72:34:26:d2:
                    5b:ba:12:a0:d4:45:66:11:e6:fa:f6:d1:c7:af:2b:
                    ef:16:57:ea:5f:32:91:dc:ba:3e:c0:fa:9e:21:41:
                    f5:a7:13:69:7f:22:1a:b7:37:81:c2:9a:6d:8f:1b:
                    37:07:96:b8:22:c9:0b:c3:cc:ac:11:2c:65:f1:04:
                    ae:69:34:d5:b2:a1:17:49:ca:a8:26:33:46:96:57:
                    4e:5b:b4:bc:db:66:f5:93:cb:b0:48:5f:5d:9f:0c:
                    f7:8f:dd:9d:2b:05:0a:0e:de:cb:31:cf:70:5f:4e:
                    5a:d7:f4:8b:4e:12:94:34:03:42:aa:b7:2b:83:88:
                    e1:f7:4d:49:92:8a:f2:58:4e:b7:7a:3a:2c:56:d8:
                    de:0e:ab:23:d3:75:e7:b1:ef:eb:d5:f2:44:ba:5e:
                    33:fb:6b:51:cb:a9:e4:b8:3d:4d:ff:f7:e6:dd:9d:
                    0d:09:65:76:b9:1f:a7:01:b1:f4:5e:81:0a:e7:1c:
                    b2:d1:be:ea:8d:81:5b:81:56:6b:b2:c5:44:94:81:
                    a2:d8:b5:e6:d8:22:79:0c:9e:10:1d:a6:e0:b3:e2:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:0B:C8:5E:70:8D:BE:03:97:5B:DD:91:98:70:6D:42:D2:DA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82a47b5f-d5c6-3a28-a2a7-26c60f4757d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:ab:09:5e:47:6d:04:a7:ab:e5:be:c8:b1:47:64:21:71:
         aa:ef:3a:eb:ee:82:09:8b:17:d5:e1:ba:99:60:e3:18:1c:9f:
         89:f4:41:0b:ba:68:36:eb:22:b7:59:d3:58:5d:72:52:fc:6c:
         91:d8:29:49:00:80:06:72:90:d9:98:39:43:19:04:45:f3:4a:
         ad:a4:fd:ae:1d:17:5c:ce:7e:45:65:d3:8c:a4:8d:04:52:d6:
         d1:d1:fc:17:d1:7e:5b:5c:df:3d:1c:c6:f8:f7:85:57:7b:5a:
         33:9b:b4:de:c8:08:08:15:eb:fd:5b:51:13:f9:cc:c9:f6:86:
         47:b4:a8:72:b3:cd:1d:98:e3:61:c6:46:48:37:08:02:13:11:
         0b:f2:88:3a:17:d2:f1:3c:f8:55:25:79:13:78:e6:5d:ee:25:
         f0:00:78:bd:6f:95:83:eb:08:e1:4a:a5:66:24:a4:97:37:af:
         1a:0c:9b:0a:59:ed:2a:f4:0f:f1:c8:87:10:7e:dc:aa:f9:45:
         41:67:27:64:a4:4d:58:a3:2b:bf:c9:9c:89:50:33:b1:35:2a:
         38:f9:57:0b:69:4b:99:de:2b:6d:a8:9f:20:43:d7:e4:70:ef:
         19:c4:e5:65:95:f2:ad:73:80:35:65:99:a2:ef:03:62:96:39:
         0d:b9:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:44 2025 by rpki-client