Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85823a65-b82a-3685-8994-54203377f11b.roa
File:                     85823a65-b82a-3685-8994-54203377f11b.roa (raw, json)
Hash identifier:          9gW8MY7sblGuNv5t+FFZsMSCROYjjMK8ARec2ZqY5r0=
Subject key identifier:   F9:9A:13:DE:86:77:A8:0B:C1:C1:E7:A9:6F:15:37:F6:73:F5:ED:B5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D64AD90733AEC7E16B341E800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85823a65-b82a-3685-8994-54203377f11b.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 03 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:64:ad:90:73:3a:ec:7e:16:b3:41:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : May  3 04:00:00 2022 GMT
        Subject: CN=12eee53b-d551-4f7c-94ea-0e875143ba64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:10:5b:76:a1:97:2e:22:c6:02:3f:3f:78:
                    56:28:0b:44:b0:dc:6b:e4:14:e3:f5:e0:09:17:b6:
                    c9:b9:84:f0:90:91:a2:9f:08:35:81:c2:f5:63:ec:
                    3b:e9:ba:05:be:28:63:54:06:1c:ee:f6:15:3d:77:
                    44:3f:e7:89:25:29:fa:e6:89:a7:12:cf:0c:7e:25:
                    f1:46:63:dd:5e:85:e4:7b:0b:fd:34:4d:d5:6a:0b:
                    8a:d8:e2:f0:02:1b:69:9d:5d:44:d7:04:2c:df:b0:
                    0f:6b:09:04:32:39:8f:91:43:b7:a1:b7:e1:d3:d3:
                    c6:2d:05:46:16:14:b0:0a:1d:65:8b:53:93:f3:a9:
                    97:6a:85:69:47:ec:9b:a1:8b:30:f0:20:d5:8e:b6:
                    7a:b1:de:e2:8b:43:b1:b9:71:fd:bd:3e:a0:ce:68:
                    cb:38:d2:ec:b6:68:d1:71:bf:89:37:5a:71:28:fd:
                    15:a5:56:2d:ae:90:25:5a:bf:bd:59:ed:ee:f9:08:
                    89:10:fb:0c:67:91:24:68:a8:10:f8:de:86:02:f4:
                    1f:bf:f4:54:e3:92:95:e8:81:21:2d:94:2f:a1:0c:
                    a9:28:4c:19:61:70:dc:16:83:b0:5a:a8:b7:69:0f:
                    94:2a:0d:37:be:b8:94:00:01:74:c8:e2:97:fb:ae:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9A:13:DE:86:77:A8:0B:C1:C1:E7:A9:6F:15:37:F6:73:F5:ED:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85823a65-b82a-3685-8994-54203377f11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d6:82:b1:5f:8d:da:cf:aa:1b:e1:7a:1c:0b:a3:74:61:da:
         69:5e:c3:4e:4b:f6:29:68:54:81:cc:d5:17:f7:e6:ee:3b:ca:
         49:3e:13:2a:d2:b6:e7:28:57:9c:48:c5:14:85:41:36:ba:81:
         25:50:7e:d9:01:90:3c:ca:c2:86:01:79:42:16:8f:51:59:c2:
         88:ab:8b:cb:c4:46:94:0f:e7:61:e5:82:7f:4c:d0:3b:b8:3f:
         19:0a:c7:e1:27:33:f8:9d:40:4c:79:17:4a:d8:69:69:b9:42:
         42:4a:ab:f4:1e:26:00:e8:9a:84:91:73:f6:d3:bb:b7:85:32:
         a8:30:5e:98:0a:86:71:0c:d9:49:b5:fd:dd:d4:50:71:1e:a3:
         04:70:5b:4a:d6:4e:51:a1:bf:01:aa:74:34:de:ba:61:c4:5e:
         5b:8e:4a:91:93:c8:c9:ec:0a:62:f8:4e:9d:56:3b:d1:87:02:
         17:54:ec:76:f0:a0:35:0b:1a:11:66:1c:c3:98:8f:b3:66:1e:
         c7:ae:14:56:1d:67:5f:a1:be:9e:61:9f:74:84:f5:71:35:a6:
         e5:8e:bf:c7:da:00:ea:07:8e:1e:4a:3c:b4:78:bd:be:00:a2:
         cd:7a:a8:d1:51:51:ae:63:dc:fe:97:ab:2d:68:ed:31:aa:f6:
         3c:74:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:31 2025 by rpki-client