Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87591e6f-a53e-357b-8b6d-4cad64356bde.roa
File:                     87591e6f-a53e-357b-8b6d-4cad64356bde.roa (raw, json)
Hash identifier:          f7UcBRu6UWacUbHBhB6O903oog5wqsPkTn4tSCCkCQY=
Subject key identifier:   E0:B6:2A:10:21:30:9F:98:64:FB:FA:4C:81:DD:E6:9A:C6:50:83:8B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6864F146D60072FE5F9113E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87591e6f-a53e-357b-8b6d-4cad64356bde.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.121.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:68:64:f1:46:d6:00:72:fe:5f:91:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=055ff60c-c1df-4e66-a872-fb34a198ee14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:3d:0c:ed:63:a8:3d:ab:81:ac:be:11:bf:
                    95:a5:b6:24:3f:c1:a4:6a:76:3e:f8:8a:41:c1:b8:
                    84:15:b2:e0:1a:17:37:c2:a3:a5:03:f8:1e:39:d4:
                    64:12:9a:fa:83:38:fe:ec:55:33:e4:5d:78:8b:e9:
                    0c:a3:21:1e:c1:cc:74:68:fd:40:7e:fd:c2:c8:1e:
                    7a:48:be:59:cd:4c:7a:97:f0:db:f9:30:b7:2e:40:
                    56:34:e1:7b:44:44:70:ac:0e:4a:44:38:9a:cc:33:
                    7e:fc:cb:de:93:29:b2:9b:87:ed:18:87:5e:30:7d:
                    c6:03:b2:e5:2b:5c:65:c8:e0:83:b5:99:d4:4c:f7:
                    7f:2e:3b:39:b0:fd:eb:b3:f8:3b:47:f9:b7:52:36:
                    b8:18:26:31:8f:8c:1b:74:f2:3e:9d:a4:d6:fe:48:
                    fd:2e:9e:79:6f:8d:6d:a4:34:a7:c6:5f:a1:4e:c7:
                    9e:b4:07:fb:e0:ef:a5:a4:26:e0:57:6e:a0:ef:b4:
                    aa:ea:70:c7:ef:31:04:17:78:1f:52:2a:c0:23:52:
                    e9:e3:73:b3:ce:d6:e5:05:66:82:ec:b1:0f:f4:ab:
                    f3:59:d5:7f:fd:91:60:b7:a4:9c:13:53:27:1e:08:
                    22:0b:5e:ee:d4:2f:b8:ad:cf:b2:c7:1a:6a:24:4c:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:2A:10:21:30:9F:98:64:FB:FA:4C:81:DD:E6:9A:C6:50:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87591e6f-a53e-357b-8b6d-4cad64356bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:ac:54:d0:f9:9b:72:3a:7c:73:64:55:09:c1:7d:ea:58:
         c9:f4:44:8b:05:30:e5:2a:1f:62:44:1d:6b:27:3e:d2:2d:91:
         eb:38:90:2c:c5:10:75:3b:a6:1c:d7:7d:27:ef:04:6b:25:df:
         b7:69:9b:f6:0b:b4:33:bf:73:d4:ae:48:65:65:70:ed:07:d4:
         1c:32:93:f9:5c:fc:6b:b2:b2:7c:5a:15:77:81:32:22:54:c8:
         f9:1f:78:b0:fb:24:f7:f2:fa:dd:ee:ac:30:46:ed:41:87:cf:
         d3:4c:35:9d:34:99:f5:c7:f9:88:c0:15:56:1a:e4:15:da:72:
         6b:21:54:1b:f8:18:4a:4e:eb:1f:4f:a5:84:32:74:7d:9d:d2:
         3e:0c:81:ee:c9:b5:64:2a:3f:ad:18:a1:ca:88:18:3c:0b:60:
         56:6f:f5:79:7d:fa:fb:94:69:50:29:e2:89:ee:aa:93:4f:04:
         56:a0:ea:79:5b:fd:10:12:9f:c6:ea:2c:f3:d4:3c:1d:e0:2b:
         37:2f:e2:25:c0:fb:37:1a:40:4a:14:90:6f:7a:7b:00:a1:68:
         8a:c3:57:d1:7c:b2:19:70:ad:51:af:24:66:77:62:2d:98:55:
         29:2b:3d:a0:7a:6b:62:89:df:ce:f3:e1:29:b2:7f:e2:2b:2c:
         c7:1a:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:33 2025 by rpki-client