Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83b8900c-9372-3c0d-9608-416a4e198920.roa
File:                     83b8900c-9372-3c0d-9608-416a4e198920.roa (raw, json)
Hash identifier:          5PAp3dtyu0K9YdVO5G/wdjxwc1MCauiqyrdLewm0alU=
Subject key identifier:   35:4E:77:8D:BD:15:C8:8E:AD:91:99:C2:8D:49:6E:93:17:09:A6:57
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1E0F98321BA3BC65F5BB2B4A
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83b8900c-9372-3c0d-9608-416a4e198920.roa
Signing time:             Fri 02 Sep 2022 15:54:07 +0000
ROA not before:           Fri 02 Sep 2022 15:54:07 +0000
ROA not after:            Sat 08 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.52.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1e:0f:98:32:1b:a3:bc:65:f5:bb:2b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  2 15:54:07 2022 GMT
            Not After : Oct  8 04:00:00 2022 GMT
        Subject: CN=b1ae6f63-6479-45ab-870e-3c609213c06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:e0:5d:fd:46:7c:4f:3e:33:9e:f6:83:25:
                    5f:a9:ed:58:09:4d:a2:10:4a:6c:ac:a0:b7:b0:62:
                    74:98:24:42:ee:10:29:ab:dd:71:c2:06:2a:3f:2a:
                    e6:62:0a:58:d9:91:b9:1a:54:52:24:bb:b8:6b:5c:
                    b6:62:6f:38:39:ed:31:e2:10:d0:14:d4:b8:59:17:
                    88:97:ac:e0:51:d3:97:af:02:e1:e0:d3:33:73:a3:
                    83:4e:cc:24:e4:db:61:7f:60:09:50:30:9b:37:0e:
                    30:2f:18:ba:3b:a1:40:1e:7a:e9:c9:86:ab:29:fd:
                    2c:4d:36:0a:d2:30:24:64:8c:b9:5e:36:53:33:b2:
                    94:4a:aa:ea:40:2f:eb:95:af:50:6f:bc:58:32:d8:
                    f1:d3:2a:24:8f:a2:98:e2:b7:c7:1e:f7:71:30:d9:
                    68:43:8e:96:4e:2e:25:21:2c:32:61:75:0c:98:27:
                    23:25:a8:fe:ee:eb:42:3a:78:ca:36:66:af:30:ee:
                    91:f4:14:9d:f5:eb:12:bc:ad:31:3b:8b:c1:5e:88:
                    91:4c:29:de:e3:fa:35:6f:f8:b5:79:51:8a:f1:fe:
                    6a:62:8e:d2:ed:4a:2e:df:a5:68:33:d3:3d:93:e9:
                    6e:31:d3:2e:b2:9e:f7:34:f0:eb:a5:3b:98:dc:4f:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:77:8D:BD:15:C8:8E:AD:91:99:C2:8D:49:6E:93:17:09:A6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/83b8900c-9372-3c0d-9608-416a4e198920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:32:7d:90:f0:f0:ec:c9:5c:0e:0f:ba:6e:76:55:3e:fb:
         6e:b6:55:f9:85:7f:31:41:ff:11:e8:93:18:20:e6:10:ac:c0:
         aa:cd:8b:8c:01:73:46:6c:dc:5c:f2:78:49:a4:5b:05:74:02:
         51:2f:15:c3:15:e5:6e:1d:ef:7b:13:9c:c7:d5:65:6f:e7:14:
         1b:09:65:05:fd:8c:17:73:92:14:8b:bf:38:e9:3c:b8:70:a0:
         40:a0:46:96:38:c0:de:48:c6:ea:69:f7:9a:82:7d:fd:ea:41:
         a8:8d:f7:d8:c9:23:76:c0:38:c5:a6:f4:7d:79:bb:27:fb:02:
         29:10:64:b3:f9:c0:68:a7:7f:8b:a9:ae:16:37:a6:28:33:bc:
         16:9f:f7:36:b2:58:11:e1:23:d7:6c:4a:60:c7:23:b0:50:60:
         6e:78:06:f7:0d:6b:f1:31:b7:da:6d:51:b2:46:13:99:27:5d:
         67:62:cb:94:ae:da:e3:15:df:16:0a:3d:9d:bc:a9:b9:75:4f:
         52:3e:e7:5b:1d:ca:c2:ca:79:97:af:a6:13:d7:cf:26:33:16:
         1c:b6:a3:d3:8d:68:09:62:44:1e:bb:ef:7d:ae:75:9e:33:32:
         85:60:4e:bb:69:95:ea:bf:67:20:6e:ba:ff:c8:38:27:99:a1:
         0b:8f:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:06 2025 by rpki-client