Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9238e24d-52c1-381b-83e0-91927b725dcd.roa
File:                     9238e24d-52c1-381b-83e0-91927b725dcd.roa (raw, json)
Hash identifier:          ChqiDBPbb4Ef7LWWIPTWjh66HRF3tXeAAYeG3EIO2Zc=
Subject key identifier:   DB:F4:52:88:A8:B7:78:47:65:A1:2A:05:AB:CD:D7:1D:BC:B3:B5:43
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2F495D9B7D87DF4FF581E640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9238e24d-52c1-381b-83e0-91927b725dcd.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.23.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:49:5d:9b:7d:87:df:4f:f5:81:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=d456a97f-8dcf-4a12-a647-a7fcdd4652b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:34:24:9b:df:99:dd:4d:7f:b9:04:1a:dd:
                    d5:26:91:d5:fe:3e:28:0c:df:06:be:aa:a2:79:61:
                    65:bb:63:5d:10:85:98:b7:ba:39:ae:5e:5d:76:f4:
                    eb:58:c0:0d:c1:8f:ac:b1:c3:5e:7e:3c:99:ac:f1:
                    2e:6b:77:25:a0:d4:61:e4:e6:d4:0a:19:18:55:f8:
                    6b:bf:4a:9b:64:64:e0:70:a8:21:21:71:41:c5:5a:
                    64:83:8b:38:08:e1:5e:00:ff:a2:d2:1d:29:da:17:
                    9e:cf:b6:ea:02:8e:e1:df:11:23:8e:0f:06:4b:e4:
                    44:37:60:6e:43:55:be:fc:cb:c9:7a:fc:f8:9a:05:
                    d2:ee:c3:f6:71:9b:b0:5c:5c:e7:5e:e1:25:b5:69:
                    e3:10:3d:d2:52:f3:99:c7:19:f8:7b:f1:75:28:1b:
                    e9:e6:46:b2:fd:96:f0:f1:73:de:6d:d5:f3:9e:34:
                    ef:6c:89:3a:2b:5f:f2:d3:41:4d:70:63:b6:14:4e:
                    a4:ae:99:35:5e:ad:c2:08:e4:b2:4b:7d:5f:86:ca:
                    8a:71:28:cd:3a:d6:40:d2:90:85:93:a1:81:f1:d3:
                    24:cf:12:fd:3a:42:0c:20:e0:66:3b:5a:83:89:75:
                    52:35:00:b4:22:9f:01:6b:7d:a3:b1:7d:1f:1f:77:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:52:88:A8:B7:78:47:65:A1:2A:05:AB:CD:D7:1D:BC:B3:B5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9238e24d-52c1-381b-83e0-91927b725dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:31:d6:6d:ac:f4:93:2d:8e:0d:ae:67:03:30:08:a0:c2:76:
         eb:9d:74:de:2d:4d:9f:c5:6f:5b:4b:ab:40:2f:25:78:78:f3:
         19:40:55:b8:f3:83:04:86:1c:91:70:2b:b7:24:39:99:53:91:
         e4:a7:be:7f:9f:22:d2:a8:ec:4e:ea:49:97:e0:5f:fc:a4:c5:
         fd:5d:c7:03:d2:15:20:fe:07:67:1e:c6:9c:fd:35:74:6c:4e:
         55:84:a6:ec:1a:5b:28:9b:15:97:6c:ff:2b:46:b9:a1:79:85:
         ca:96:90:76:b0:98:bc:30:be:1f:aa:b1:84:ff:4f:ed:67:a1:
         85:32:47:dd:54:ee:1f:4b:17:a9:d3:82:28:4c:53:b9:f1:05:
         b0:70:83:3e:02:5d:55:54:83:3d:51:a9:d8:46:04:88:05:23:
         a4:f4:e7:9b:78:13:73:65:fb:14:e5:07:57:24:d5:58:57:dc:
         b4:80:68:ff:f0:9e:66:f9:ac:b3:76:22:52:a5:03:4c:2d:7e:
         92:e9:5c:85:c8:ea:7b:6f:20:e1:7b:e7:e6:d4:50:e2:23:a6:
         af:38:45:11:7f:81:ba:85:9b:a3:4c:4b:9b:b9:fe:c5:ce:fa:
         9e:54:c9:90:78:67:c1:14:a2:88:e2:9b:71:74:64:bd:eb:01:
         ad:23:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:39 2025 by rpki-client