Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f8295f3-03fa-35f2-8af6-e7c50bf1bdbe.roa
File:                     8f8295f3-03fa-35f2-8af6-e7c50bf1bdbe.roa (raw, json)
Hash identifier:          cAmaNJc2iudqfWh1TdSXL/QbNwkFvqOAZAiPe4uDwAE=
Subject key identifier:   30:9B:B4:B9:99:4B:A4:FA:61:DE:6D:69:E7:C7:5B:2B:09:D4:86:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2EAA39D2E573667C8604AB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f8295f3-03fa-35f2-8af6-e7c50bf1bdbe.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2e:aa:39:d2:e5:73:66:7c:86:04:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=c264397a-4a35-473f-a1e5-37ca784c68d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:8a:1d:6c:33:e3:ba:61:9d:d4:1a:8d:12:
                    d3:d0:57:c7:3f:95:03:f5:09:97:87:cd:85:0f:6f:
                    49:c7:f4:8c:13:54:ff:2a:4d:07:23:20:66:51:3b:
                    8f:bd:8a:52:26:30:4d:66:42:93:27:34:ff:76:19:
                    78:93:e4:1f:11:96:27:e9:ea:97:37:fa:08:a8:d1:
                    24:01:51:99:0e:02:e8:50:58:3c:0e:8a:34:51:19:
                    85:2c:e8:8a:59:20:b8:70:5b:d9:d7:60:fe:73:e2:
                    f3:30:b5:32:71:97:b0:a7:29:5c:84:c0:8c:55:b4:
                    f5:41:35:cd:94:33:50:76:e4:6e:4d:7d:05:02:89:
                    f8:10:34:ba:fa:8a:ee:d4:3b:29:89:a3:e2:53:81:
                    d2:e4:ec:fc:47:b2:f3:7f:61:a6:54:5d:d9:cb:16:
                    78:5f:75:cf:31:89:01:4d:96:02:dd:64:9f:23:e9:
                    09:dd:5f:41:fb:e1:8c:bb:22:be:3d:6b:53:0e:ba:
                    25:0a:f0:38:6a:7d:b6:9f:34:79:af:98:81:98:bd:
                    e3:55:6c:e5:97:cd:1d:68:a9:4c:51:40:8a:9a:2c:
                    98:6f:37:09:07:44:09:f5:04:65:18:a2:37:86:d5:
                    32:8b:d9:ed:43:8a:01:c4:2a:ff:bb:c6:f2:93:4d:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:B4:B9:99:4B:A4:FA:61:DE:6D:69:E7:C7:5B:2B:09:D4:86:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f8295f3-03fa-35f2-8af6-e7c50bf1bdbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:53:82:b7:2b:d6:a9:0c:ad:de:4c:c4:db:d4:49:f4:b9:de:
         81:b7:02:3c:50:cd:33:4b:85:7b:49:8c:8d:86:07:86:ca:3a:
         e7:2c:c9:28:40:93:59:4f:e3:00:36:82:83:b6:d7:23:0b:b0:
         b3:51:b5:bd:5f:a4:1f:95:39:45:86:33:94:9d:a4:35:fc:f7:
         59:d4:1f:a8:69:03:68:fc:50:85:e4:3e:eb:ec:aa:e0:c0:58:
         ea:d2:d2:15:28:86:24:59:14:d9:e3:97:51:12:ae:39:29:f7:
         4a:a3:22:18:67:05:5e:3c:c6:6e:91:5d:03:a7:c9:00:c5:84:
         7a:8f:db:c6:42:5c:de:40:19:d1:dc:d9:f5:05:a5:7f:c5:e3:
         df:9e:7d:c0:ef:bd:e4:46:af:fb:27:fb:2d:ed:82:ec:4e:42:
         fa:be:b9:ae:d6:a4:27:dd:85:b6:33:97:ee:a0:dc:57:c3:2a:
         e2:a0:e1:a0:8f:f4:71:09:7b:b9:1a:40:07:71:e4:54:85:0f:
         fb:40:72:43:f3:42:c4:7f:46:82:b3:52:7d:7e:11:e9:2c:c7:
         77:47:98:6c:7b:f3:d9:6e:29:5a:32:8e:8b:e2:d2:83:f3:ef:
         f3:46:65:97:a8:84:c0:93:ac:35:05:1e:2c:b5:6d:33:f3:96:
         f7:37:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:34 2025 by rpki-client