Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84518ccb-22a0-319f-8884-282e1b49c68f.roa
File:                     84518ccb-22a0-319f-8884-282e1b49c68f.roa (raw, json)
Hash identifier:          tOHjUkQBlJ9tCYgySCcsTpLAtdmK3VMEpYAONqWnUa4=
Subject key identifier:   99:E3:7F:7D:5E:D6:5E:8D:D1:07:05:F7:8C:1A:C2:93:0F:73:AB:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C92FA04352967691CAF979000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84518ccb-22a0-319f-8884-282e1b49c68f.roa
Signing time:             Thu 13 Jan 2022 05:00:00 +0000
ROA not before:           Thu 13 Jan 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:92:fa:04:35:29:67:69:1c:af:97:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 13 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2022 GMT
        Subject: CN=d144fe28-477f-403d-8e88-7cea66e84a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:73:5f:ba:75:ed:2c:0c:eb:8a:0b:32:bc:37:
                    b1:dc:ae:89:73:d3:83:00:ed:07:5c:bf:04:21:c1:
                    32:41:4b:93:8c:f5:4d:ed:4f:24:d2:91:5a:34:a3:
                    c9:75:b5:76:8d:d9:32:99:1f:8a:55:32:92:46:a3:
                    a1:0e:3e:2f:44:1e:41:e1:6a:32:30:09:cd:9d:e2:
                    c4:15:ed:5b:b3:09:30:26:ff:95:45:a4:81:f9:98:
                    17:cf:96:da:6e:64:76:91:98:fe:bf:20:21:11:7d:
                    55:b3:98:b1:ed:b0:11:76:b9:00:01:ef:56:ff:29:
                    40:da:8a:23:20:c0:a5:72:1f:20:18:5f:ff:fa:98:
                    63:a1:01:ff:75:41:2b:1f:87:c7:9b:13:07:60:4c:
                    ef:ee:c7:e5:d4:84:a9:55:df:5b:8e:16:27:6d:9c:
                    59:d4:69:f4:20:56:88:ac:c9:27:12:1d:38:0b:cb:
                    3a:2e:17:9a:65:0b:ae:44:57:47:86:bc:bf:c2:41:
                    96:72:44:63:53:2e:04:cc:15:51:88:e9:31:60:75:
                    a4:76:c3:c0:8f:4e:24:0e:a7:2a:db:61:79:f7:24:
                    e0:76:2d:20:3d:d1:41:93:57:b1:9a:33:89:b9:3d:
                    03:19:5b:b8:fc:ee:2c:f1:e4:fe:3e:07:3f:dd:cd:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:7F:7D:5E:D6:5E:8D:D1:07:05:F7:8C:1A:C2:93:0F:73:AB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84518ccb-22a0-319f-8884-282e1b49c68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:f6:31:27:31:9a:57:47:5d:d1:58:20:c1:b6:48:b3:9b:
         79:39:4d:e7:b2:2a:8f:3c:7d:11:dc:7a:c2:5b:c6:e1:03:8e:
         4a:ba:29:9b:fe:a0:74:49:2d:5a:20:9f:c0:4c:19:83:f1:85:
         83:d7:e4:3e:57:22:07:e0:93:0b:c1:65:8d:90:f0:92:39:ef:
         cf:f6:e0:fe:1a:4f:c5:0e:eb:db:03:e9:52:f1:a6:4e:46:b0:
         b6:af:60:eb:15:ec:69:63:bd:39:ab:c5:dc:04:ac:c9:36:f5:
         0d:85:d2:1d:99:24:c7:1c:bb:d8:12:ba:08:c1:72:6e:6e:19:
         18:9a:fa:37:b3:a3:fe:76:a1:f1:24:78:eb:c6:aa:fe:71:04:
         11:90:3c:61:81:f3:c8:84:5a:ba:43:13:9f:1a:1d:68:0f:59:
         75:8a:8a:87:7a:f5:6a:ac:3d:5a:e5:30:0b:bc:cd:2a:6f:27:
         5b:8c:77:f3:87:84:22:6f:36:f3:4f:cb:31:57:99:fe:47:10:
         2d:3b:db:9b:39:79:14:ea:15:16:a5:11:06:01:24:7b:96:37:
         18:55:85:e3:da:64:46:6c:f5:9f:90:4f:9b:47:53:dc:98:0d:
         34:63:32:7d:da:a3:be:b6:0e:51:cd:a7:0d:61:62:c6:99:9c:
         f7:f0:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:37 2025 by rpki-client