Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8617caac-4da5-31ee-a106-9765dcd31089.roa
File:                     8617caac-4da5-31ee-a106-9765dcd31089.roa (raw, json)
Hash identifier:          O/w1NpHR2X2oc8Xt3nZPbfehLZUf70+mSL1WOhg9d5c=
Subject key identifier:   54:F5:14:F4:F3:36:9A:2C:62:7D:9D:8A:81:B6:0F:38:F3:8C:14:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840141C591D5E9A067820AF20F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8617caac-4da5-31ee-a106-9765dcd31089.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Wed 04 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        137.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:14:1c:59:1d:5e:9a:06:78:20:af:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Jan  4 05:00:00 2023 GMT
        Subject: CN=f1b90f87-fb31-465a-9d51-fa43c3d88ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:40:00:9f:b8:c9:cd:00:f2:d0:7e:b8:ea:
                    dc:e3:86:ab:af:36:55:2d:39:cf:ac:7e:c7:3e:dc:
                    9b:4a:05:48:9b:73:55:9d:da:98:13:c6:3a:38:a0:
                    4a:a6:2c:a0:1c:ea:42:e7:d1:50:a4:82:61:69:6b:
                    46:c1:de:63:0c:96:0a:77:71:86:90:54:a4:43:d7:
                    ac:3e:fe:e4:ab:48:72:b5:46:a5:ab:20:37:81:29:
                    fe:45:2a:81:f6:78:eb:42:d6:1b:87:46:5c:9f:85:
                    ef:7f:10:0a:2c:17:03:88:b6:18:63:6e:81:58:22:
                    75:67:fa:ee:96:82:36:c4:ae:91:cb:7e:d2:2e:65:
                    a5:18:29:03:a9:ca:e2:3b:d9:ab:6e:ae:95:57:96:
                    27:74:ab:a3:27:00:d0:85:7b:eb:34:04:4b:77:73:
                    1b:e2:49:34:c6:1c:0d:d8:68:d2:12:f7:9b:7e:50:
                    4a:f8:9c:41:5f:b6:72:e4:67:66:3f:9f:b9:be:57:
                    29:7b:1f:4b:0b:7b:15:4f:7f:26:3c:6f:65:12:59:
                    51:51:9b:06:15:cc:ca:84:f0:b7:30:48:4c:da:96:
                    e9:4e:b6:76:8a:22:52:00:5f:3f:33:77:35:e5:1e:
                    4d:93:78:4b:7b:dc:8e:3e:bf:ab:32:8c:0e:80:47:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:14:F4:F3:36:9A:2C:62:7D:9D:8A:81:B6:0F:38:F3:8C:14:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8617caac-4da5-31ee-a106-9765dcd31089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:1e:19:90:16:41:9f:03:23:48:48:1f:6f:99:8d:fd:7b:
         74:e7:96:23:01:07:2e:13:fa:ff:cb:b2:a7:12:83:d2:44:65:
         b6:ad:2b:28:9d:6c:f2:39:55:29:ea:11:03:b9:98:f3:01:6c:
         53:c6:0f:d6:55:b4:a1:86:b7:a0:1d:1d:7d:88:da:0b:84:4b:
         05:84:bf:b2:f0:b3:61:f6:a2:35:5f:d3:8f:45:49:f5:d5:c6:
         45:e1:5f:5a:4a:22:e5:bd:4f:d2:5a:53:10:53:91:5a:c3:cb:
         19:f3:29:9a:6b:27:ab:2f:40:82:71:db:18:21:9f:74:11:a3:
         bb:6f:42:35:63:08:09:45:54:aa:c7:58:56:8a:13:96:31:3e:
         8b:8c:65:d7:36:11:8f:b3:65:e3:a1:ae:bd:9c:d2:ae:6c:d0:
         71:89:13:97:79:a8:db:94:99:35:d2:50:8d:6d:ea:5a:d9:c6:
         16:92:e2:3a:17:29:6f:c4:51:40:0e:4a:ff:2b:e1:a1:88:88:
         dc:64:ee:30:1f:15:74:c0:6e:dd:d5:fa:9b:fa:b3:c1:8c:9d:
         43:c9:d8:2c:a6:18:b7:4c:b8:b2:5f:35:27:89:6d:86:a3:d4:
         6b:be:c9:7e:f9:ed:3f:df:b3:86:1c:d8:30:03:b2:31:4d:7a:
         55:68:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:05 2025 by rpki-client