Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8747e1f5-1f1b-384b-ad66-fecdecb61d24.roa
File:                     8747e1f5-1f1b-384b-ad66-fecdecb61d24.roa (raw, json)
Hash identifier:          sYOWVDwFrdd0h0ykQsl4rF/1QiVdTRKaxLK27cXmibM=
Subject key identifier:   62:89:A3:44:65:46:8F:1B:14:25:64:48:BA:CE:7F:B5:CD:61:AC:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C08F2395B9554AD2AD72C280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8747e1f5-1f1b-384b-ad66-fecdecb61d24.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:8f:23:95:b9:55:4a:d2:ad:72:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=3a782a5d-0751-4464-ba04-dadf2d3ccb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:71:05:66:cd:4f:b5:a2:48:b1:b7:ca:fe:
                    8b:cf:a4:51:fe:94:f5:c9:03:eb:c1:57:b4:1e:cb:
                    d5:30:51:d9:1e:7e:44:ee:1c:9f:89:d3:85:3f:b7:
                    de:08:80:ee:53:a4:ec:53:f7:de:31:02:b4:ab:10:
                    2d:cc:b2:3a:d6:4c:5d:72:4c:74:8a:b7:3d:30:cb:
                    d3:f6:47:a1:fe:0f:ae:d6:6e:ae:bf:f7:18:00:d7:
                    12:3e:3d:1f:e0:28:e0:83:d1:d3:b2:fc:b3:5b:f8:
                    47:09:05:d6:69:67:5f:3d:04:44:22:cd:f0:70:74:
                    05:06:02:c9:39:c8:7c:ad:58:eb:f1:34:70:4b:76:
                    25:df:6e:69:aa:d2:dd:d3:63:5e:ba:63:47:d0:86:
                    39:88:8d:99:aa:1e:aa:98:fc:fd:00:a7:9a:ac:ee:
                    33:af:e2:03:e1:98:9c:a7:f4:6c:45:24:c6:bd:50:
                    00:21:10:f0:80:cb:fe:f8:5b:29:67:80:7d:f7:69:
                    47:6c:c4:7a:3b:a5:7e:96:33:8f:8f:be:aa:ee:3d:
                    93:9a:b8:7a:eb:9a:89:d8:83:ac:0a:ec:ce:cc:59:
                    61:88:ea:b8:48:58:8d:a0:3c:0f:58:81:24:48:41:
                    a2:32:7d:cd:c0:72:f4:13:ba:1f:9e:b0:88:70:9d:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:A3:44:65:46:8F:1B:14:25:64:48:BA:CE:7F:B5:CD:61:AC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8747e1f5-1f1b-384b-ad66-fecdecb61d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:75:67:00:f3:b9:fd:73:e0:81:74:ce:24:fb:a9:61:82:89:
         49:4a:3b:7c:85:76:3d:ec:cf:8c:f3:f7:e2:1b:00:bd:77:e6:
         3a:48:86:1c:80:35:01:34:19:bc:ba:f9:9d:aa:98:bb:56:ac:
         24:4e:24:6a:de:28:93:72:25:84:c2:0e:63:ac:65:cd:d0:9d:
         89:9a:d2:81:80:5d:00:11:95:6a:0a:fd:f1:45:14:aa:6b:e7:
         e5:6f:83:21:06:77:e3:8b:78:cd:e5:70:9e:d2:0f:5c:cf:5d:
         57:87:c4:4a:4f:d3:5f:18:f6:4b:02:9d:0e:fb:76:2f:4d:12:
         0a:58:e2:00:25:b8:50:66:e5:8a:51:9b:49:a7:cc:0c:fa:de:
         63:6e:35:6c:26:65:25:56:32:33:65:2d:5c:7a:ec:bd:00:0a:
         67:11:fb:4a:b3:be:30:77:93:a5:0e:be:8a:b8:12:9e:56:b3:
         02:5e:4c:78:3b:d4:f2:38:d0:f4:6f:51:8f:17:33:d1:e9:18:
         d2:e9:ea:be:b0:22:98:da:4a:b0:34:a3:ea:29:db:38:c0:8b:
         06:47:65:c5:f0:9a:f2:c7:11:21:80:99:68:fe:c6:12:6d:fd:
         04:59:06:2f:08:82:87:a3:02:20:52:ac:ff:f9:cc:a0:54:50:
         cb:dd:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:58 2025 by rpki-client