Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8420dc85-d46a-3deb-aa36-d581506f960d.roa
File:                     8420dc85-d46a-3deb-aa36-d581506f960d.roa (raw, json)
Hash identifier:          x+8blePH76kXLu18ubsZ0oRGyR4k4HLpd4BfkfdMzfQ=
Subject key identifier:   F8:57:F3:BD:71:CF:74:FE:E0:59:5A:0D:07:AB:21:1E:2E:25:61:E3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E917C1203E5E3ACF0CD449130
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8420dc85-d46a-3deb-aa36-d581506f960d.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:91:7c:12:03:e5:e3:ac:f0:cd:44:91:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=920edeed-8eef-470c-b365-a1f272ec75b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:8d:28:8a:07:4d:c7:af:2e:93:0a:4c:85:
                    d7:5e:58:03:a2:ad:58:01:9b:e0:66:f5:e0:b5:8e:
                    fb:47:fd:61:dc:ee:c7:70:98:bd:30:90:c4:ea:50:
                    51:b0:35:dc:ed:bd:42:7e:bd:cc:b6:a3:86:86:89:
                    04:45:f2:6b:dd:00:b2:09:35:f6:67:c1:6b:47:d2:
                    ff:44:8f:64:eb:18:4b:92:d1:ba:0e:48:ad:8d:44:
                    e9:79:24:be:d5:04:c2:cc:87:9a:28:e0:e3:df:97:
                    39:e1:de:51:fc:af:e3:83:41:64:aa:33:23:94:92:
                    89:61:65:ce:fb:a5:36:ee:75:b8:a8:ff:81:46:94:
                    d4:7a:bd:b1:fd:94:68:7f:63:72:70:70:c7:dd:68:
                    85:23:a5:bb:29:da:fb:b3:19:b8:59:f3:7f:8b:a5:
                    9c:1e:95:27:0a:52:f0:97:a6:2b:c2:52:e7:2a:54:
                    3a:0b:b5:27:01:5e:b5:53:e2:e1:86:7e:44:05:a0:
                    98:a5:ae:8a:e7:5b:3d:f1:dd:4e:d4:d9:de:17:6b:
                    1c:11:59:f8:cc:5e:d9:85:e5:6c:37:c7:d4:78:c8:
                    50:af:4d:bd:ca:4c:01:7b:34:0b:25:43:a4:03:ae:
                    0e:23:13:62:56:4d:ab:5a:51:ab:44:76:40:fa:1d:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:F3:BD:71:CF:74:FE:E0:59:5A:0D:07:AB:21:1E:2E:25:61:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8420dc85-d46a-3deb-aa36-d581506f960d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:3a:49:42:fd:ee:f1:a6:a7:63:62:2d:fd:b5:e0:1b:d3:
         af:e1:0c:b3:41:39:59:ce:03:e3:46:6e:00:e6:bf:6c:73:34:
         2a:b9:a0:67:ac:ed:a3:64:96:ec:71:0e:9a:15:be:84:5f:32:
         e2:8f:ca:4b:05:3a:a1:77:e1:a0:5b:64:80:64:41:e1:36:3c:
         8b:e2:d0:3c:10:f8:25:c1:7b:16:89:f0:43:ad:bc:51:21:50:
         a1:2e:4f:da:b2:57:6e:ec:36:e0:33:79:8c:8e:c0:c1:6f:bb:
         f0:6a:eb:45:98:a3:58:b2:38:f2:90:13:b1:e0:56:db:a9:e4:
         00:8e:1a:75:e5:31:0a:a8:e6:f0:7e:21:eb:e6:d8:1b:0f:66:
         0e:6a:44:0f:ca:22:dc:0f:e9:1f:af:11:a2:4e:e0:c0:7f:fb:
         b3:be:60:95:93:5a:0f:72:e4:46:f7:a6:b9:1b:2c:16:1b:f3:
         94:52:93:f4:c4:d1:64:35:b3:f7:99:18:49:e8:fb:ee:fb:ef:
         65:9d:4e:ea:63:a3:4d:7b:12:6e:7f:7b:0f:ff:58:6e:5e:f6:
         c2:a8:27:d2:54:00:1a:58:c1:c9:af:cb:bf:2f:44:2b:1a:1c:
         59:cb:bf:78:83:7f:de:bc:bc:ff:6f:93:bc:05:bb:2a:10:6d:
         e5:96:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:13 2025 by rpki-client