Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84abdad3-e842-34ae-b3a2-8dc97d080e07.roa
File:                     84abdad3-e842-34ae-b3a2-8dc97d080e07.roa (raw, json)
Hash identifier:          Ir2XJUt1gCEVhlrBdzJLgUrUiW9y9+uLT3WFvmM9ZL4=
Subject key identifier:   54:FC:56:A0:8B:55:85:90:18:E2:8D:38:42:66:7C:C1:08:77:14:FF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3D63706CAE4B6E6529CE1F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84abdad3-e842-34ae-b3a2-8dc97d080e07.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 19 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:63:70:6c:ae:4b:6e:65:29:ce:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Apr 19 04:00:00 2022 GMT
        Subject: CN=8cd6844a-7963-43cc-98d3-5d514e3fc518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d3:da:99:c0:87:bd:2b:39:15:39:4b:75:34:
                    5d:5d:75:68:b9:70:d8:0f:6e:e3:09:f1:ab:6c:8f:
                    c6:df:25:d4:11:9c:b3:e1:5f:bc:af:57:fd:76:46:
                    84:b7:5c:3c:3a:21:39:61:3e:25:3d:e9:3b:63:5c:
                    33:d2:19:56:c0:87:fe:9e:73:12:4a:8b:80:f9:a8:
                    b8:f6:69:31:c7:52:e9:3e:f4:2d:02:2c:c0:f2:9e:
                    e8:cb:a0:c0:58:49:5f:90:87:f4:a6:78:81:c8:2e:
                    d4:44:89:be:91:08:80:b3:53:d3:64:af:44:47:de:
                    4d:64:f4:d6:b8:5f:9b:a0:0d:91:f7:60:11:b6:46:
                    e7:c9:e3:07:af:e8:5a:60:36:6c:0b:a9:35:22:d8:
                    68:69:e1:84:80:7e:c8:f5:5b:77:cf:6f:65:33:80:
                    b4:61:e8:42:3f:f2:33:74:0b:98:36:f5:5a:86:d2:
                    dc:4a:d7:0c:1d:77:e4:e2:6c:e3:a4:cf:99:b4:f1:
                    e2:fc:e1:40:9e:be:72:e7:f2:c0:06:57:3f:87:27:
                    f9:65:ab:0e:1d:28:b1:52:2e:5a:bd:b4:13:7b:35:
                    4d:2a:f2:42:cf:de:8b:ea:58:4a:11:b2:46:55:0b:
                    94:95:43:88:ce:46:75:6f:f0:39:bc:da:de:59:7d:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:56:A0:8B:55:85:90:18:E2:8D:38:42:66:7C:C1:08:77:14:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84abdad3-e842-34ae-b3a2-8dc97d080e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f3:8b:50:1f:90:6f:96:0b:e6:d3:a5:4c:52:8c:f9:d2:84:
         c0:74:90:3a:76:24:81:4b:bf:28:03:d6:f4:07:f1:f8:07:44:
         6c:e2:91:b5:33:0b:c3:4b:6b:35:5a:0b:9a:6a:d4:93:87:17:
         f1:d4:73:df:e4:46:1c:ce:2e:7b:82:f3:41:26:eb:1a:ed:df:
         73:64:53:63:92:73:5c:d3:0e:22:53:34:78:a7:f0:99:d3:c8:
         42:41:15:5f:de:25:44:81:21:7b:f0:b8:07:5e:4e:9d:47:73:
         f6:b4:70:9b:50:8f:5d:86:2e:65:04:c7:40:9f:48:39:c0:5b:
         ea:9f:ec:a7:b4:71:99:25:bc:3d:9e:9b:a4:e8:3a:e0:53:86:
         69:34:02:50:13:ba:df:7c:62:24:d2:33:71:ee:27:73:c4:9a:
         d9:50:7f:5e:a3:49:bb:a4:6d:8e:6b:eb:8a:38:fd:47:5a:be:
         c7:2b:77:92:fa:35:eb:3d:03:3f:59:18:2d:d8:86:04:47:f4:
         8b:2b:42:c5:0d:bf:93:dd:59:08:2d:a5:ed:99:df:77:95:18:
         a5:4d:33:a1:7d:ca:35:c4:9a:b6:04:6f:b0:b5:87:5d:be:96:
         43:4b:99:90:8c:8b:74:f2:4a:19:60:aa:f3:07:e9:d4:1f:72:
         4a:41:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:35 2025 by rpki-client