Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953313e6-a5e7-3c44-b574-80b0d82367d7.roa
File:                     953313e6-a5e7-3c44-b574-80b0d82367d7.roa (raw, json)
Hash identifier:          tPyU6FVOvAQ4ntAvntfPWf0cGnY0T3C7zKcvR08/bag=
Subject key identifier:   C8:18:9F:81:CA:CC:3D:BB:7C:9D:FA:06:B1:B3:4C:AB:41:7F:9F:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB6A63F6DF827CBD5A7A4EB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953313e6-a5e7-3c44-b574-80b0d82367d7.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.62.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b6:a6:3f:6d:f8:27:cb:d5:a7:a4:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=d361aad2-1653-402d-b7d3-45d375b7d1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:9f:a8:c6:d3:24:03:a5:93:0b:ae:e2:53:
                    a8:ee:f8:c3:80:9f:a7:01:be:2b:4b:ae:cb:63:43:
                    6f:5d:7b:00:a5:fe:0b:82:47:e7:71:2c:d1:99:f0:
                    c6:8b:39:63:79:3a:cb:07:53:a7:06:87:c5:c7:f0:
                    d6:f6:ff:7b:f0:8d:43:7a:6e:13:c7:3f:2c:0e:e0:
                    0d:69:85:a3:73:ae:55:94:bd:2d:07:47:c3:0e:32:
                    be:cb:5f:b9:d6:c0:fe:04:76:55:c8:56:05:e1:5e:
                    19:15:00:4a:fb:4e:b5:1d:be:a8:a3:0c:89:cd:8d:
                    7f:59:59:94:db:d6:65:cd:ed:98:92:83:59:95:4e:
                    c2:02:e5:35:45:fc:80:83:1c:96:4d:7c:a0:fe:dc:
                    81:51:18:de:53:96:fd:1e:37:6d:8e:e5:71:c1:eb:
                    2c:44:5c:7e:7b:90:c0:b3:00:9e:80:49:9d:57:d3:
                    d6:b3:b5:d1:fd:66:e1:4a:fa:8c:97:f4:e1:f2:07:
                    75:c0:bf:6c:32:42:2d:23:60:0a:0d:fd:0d:5a:de:
                    30:f1:f4:d8:31:41:52:19:d2:eb:c0:2a:df:a1:d4:
                    a0:6b:bc:ec:78:5d:21:dd:86:8c:ce:ac:b8:7d:76:
                    f9:01:e0:f2:ac:5c:d5:84:e9:d4:70:08:d7:76:72:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:18:9F:81:CA:CC:3D:BB:7C:9D:FA:06:B1:B3:4C:AB:41:7F:9F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953313e6-a5e7-3c44-b574-80b0d82367d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e5:ff:e3:3e:99:da:e3:0e:4d:9d:23:bd:b3:fa:7f:8d:03:
         19:7f:86:fc:08:ef:91:d9:ad:c8:0b:5f:a9:57:54:dd:35:cc:
         cc:29:81:b4:11:63:27:6a:9b:72:79:a3:06:0e:b8:f5:76:d1:
         2e:65:34:b7:32:19:9d:88:5c:6d:f4:9b:e3:38:a8:81:40:72:
         97:92:79:96:d7:af:52:c1:a5:31:bb:32:52:70:58:ed:e8:93:
         e7:ea:9e:bc:f3:a8:ed:3d:52:77:72:0a:28:15:15:46:ab:6e:
         b9:12:2e:8e:a6:84:05:c8:36:6f:f3:46:5c:2b:d4:65:14:dd:
         fa:38:68:07:4e:54:a1:1c:80:d4:47:47:6a:73:6e:ad:e7:0c:
         1e:90:12:8b:e4:cd:da:3b:1b:c6:af:31:ea:a5:d3:11:b5:95:
         a0:f3:db:45:b6:b2:0e:e0:2b:96:bc:21:2f:fd:11:99:4b:2d:
         e1:03:44:11:d7:09:d2:b3:73:11:ea:28:92:c3:29:c7:b7:b4:
         d2:c4:90:11:09:19:b4:01:68:16:4c:be:f2:cb:c0:84:4d:a7:
         cf:d1:13:ee:86:62:aa:63:65:87:47:31:9c:3a:f3:ae:06:9a:
         38:cf:8a:a8:30:d8:ee:93:d4:68:3d:ce:16:7a:b4:96:6e:1f:
         4d:b5:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:30 2025 by rpki-client