Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94b719b1-6c38-3a73-b8a6-649e416ec80d.roa
File:                     94b719b1-6c38-3a73-b8a6-649e416ec80d.roa (raw, json)
Hash identifier:          NqcK7Vmi0J85JFDuqjWvY5ORF25vH9mEfblhyraTK8A=
Subject key identifier:   20:B9:15:DC:18:DD:20:9E:07:BD:D2:BB:EC:A4:84:47:20:6E:0E:54
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584017B013711D96DA610565F240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94b719b1-6c38-3a73-b8a6-649e416ec80d.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.24.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:b0:13:71:1d:96:da:61:05:65:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=1a71816c-b443-4ab8-a695-24c1050a3545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:fd:74:1b:dc:dd:c9:a1:cd:cc:b4:fc:f9:
                    b5:f9:af:55:c8:58:3a:d0:32:9b:4f:ff:bd:20:b8:
                    b3:ce:5a:9a:81:67:12:61:26:4a:0e:3c:f0:6f:82:
                    6a:7b:54:05:39:50:80:bf:14:16:99:7a:7e:2d:0b:
                    38:ae:09:61:37:49:7e:21:09:ff:93:31:10:d7:22:
                    7f:17:62:3a:d4:53:9e:47:36:96:39:4d:ba:5f:d2:
                    73:99:a6:27:03:cc:0b:31:20:b2:1f:31:af:1a:cb:
                    3b:1c:a3:1e:7a:ba:52:92:58:e3:26:4a:d6:0f:52:
                    40:15:9e:a1:f1:b3:2a:d6:38:c3:6c:b0:3c:44:e4:
                    fb:cb:28:13:a2:ac:f2:1d:fd:2f:fb:7c:2c:24:01:
                    e8:34:e7:79:0e:f8:05:b1:c5:0b:ce:56:f6:25:59:
                    d4:7f:cc:97:68:44:0b:d7:b5:bc:a1:bd:b7:1c:f8:
                    4d:5a:b5:03:79:39:56:ee:72:9e:c8:af:bc:1b:c3:
                    2a:0b:4a:4c:e6:f9:c3:26:be:ca:42:49:fe:8b:0b:
                    f8:cc:78:b3:22:2f:40:5a:b0:15:78:6a:5a:93:00:
                    34:6b:2b:0e:ba:fa:6c:1c:f8:3f:fd:d3:8d:ea:17:
                    ab:27:ae:4a:fc:e6:23:f5:32:b2:92:4c:b0:20:71:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:15:DC:18:DD:20:9E:07:BD:D2:BB:EC:A4:84:47:20:6E:0E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94b719b1-6c38-3a73-b8a6-649e416ec80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.24.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:30:8d:2a:fb:5f:0a:6a:cb:7b:59:1b:20:ff:76:95:d7:a8:
         69:92:b9:67:7e:43:8c:7c:48:ae:77:9b:b8:ac:de:52:05:30:
         58:5b:d9:c6:66:c7:e6:ac:9f:00:b8:f1:79:44:00:b2:e7:96:
         ce:e6:5e:13:03:59:fd:5c:98:38:75:dd:59:3a:19:ff:b0:49:
         07:0d:b5:d5:01:a8:29:b8:e5:f5:c4:1e:0a:ee:c7:50:38:35:
         c5:3f:fc:ae:43:82:2b:2a:a3:13:e2:73:e5:5c:c5:e3:c8:a7:
         eb:b7:99:a5:0b:7e:a6:01:d3:40:a1:8a:98:c8:39:d6:9b:01:
         d7:fc:00:a1:24:e7:d6:a4:16:54:b1:fc:36:cc:2d:6b:c7:64:
         ed:0d:d7:0a:57:21:e1:b7:f3:7b:22:6b:83:6c:4c:ba:3a:d2:
         68:b9:f7:8e:14:18:90:68:47:33:72:f6:0d:dd:bc:ea:3f:83:
         72:41:af:55:ed:9b:58:1e:43:1e:6b:a3:53:e9:6d:96:4d:d4:
         31:57:9a:65:f9:13:51:f4:5a:c0:a7:cf:ea:8a:f3:3e:a7:8f:
         67:45:f6:a9:80:6a:6d:d7:1f:cf:12:62:26:fa:53:c2:56:e2:
         6e:6a:90:24:62:46:3b:e3:ce:60:53:d3:8c:6e:6b:b0:e6:ee:
         63:d4:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:39 2025 by rpki-client