Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95b92510-de26-3387-a02f-c46c6d84fd7b.roa
File:                     95b92510-de26-3387-a02f-c46c6d84fd7b.roa (raw, json)
Hash identifier:          frT+eZBPi3zaxrwvPkRMHUwDrtMZJ3Khen71fUCNi2k=
Subject key identifier:   FD:C0:08:9B:3B:79:26:2A:B5:21:79:38:90:DB:CE:F5:43:FF:DD:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F62C703A65CA0DC4BE9BBD300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95b92510-de26-3387-a02f-c46c6d84fd7b.roa
Signing time:             Tue 27 Sep 2022 17:27:07 +0000
ROA not before:           Tue 27 Sep 2022 17:27:07 +0000
ROA not after:            Tue 01 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:62:c7:03:a6:5c:a0:dc:4b:e9:bb:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 27 17:27:07 2022 GMT
            Not After : Nov  1 04:00:00 2022 GMT
        Subject: CN=537ec4ca-e943-407d-814f-8307c050dd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:87:64:96:86:c8:eb:af:d6:38:13:ba:d3:
                    02:d0:0e:cc:54:cd:d6:e6:47:d3:4e:81:f9:e2:e0:
                    b0:5d:86:7d:7e:f6:19:3e:ca:7a:0f:bb:04:78:67:
                    04:2c:d1:ed:44:7d:a1:55:e7:7e:73:74:98:ab:32:
                    e2:7f:26:7f:f8:9d:ff:96:2d:7e:dd:d9:48:1a:a1:
                    e0:97:31:d2:5a:0f:59:01:76:dd:04:8b:57:84:ca:
                    69:55:98:a2:9a:64:a2:88:3f:7e:6b:38:c5:09:47:
                    d3:86:6a:0c:ee:47:c6:19:1f:b1:cc:6f:09:0b:66:
                    17:dd:b1:eb:8d:8f:8d:b7:97:b7:ef:19:56:a1:b1:
                    36:09:2e:12:57:5f:85:95:e4:c6:6d:6a:50:53:50:
                    a1:a4:d8:21:a5:3f:17:8f:32:9a:8e:68:24:c4:45:
                    74:76:23:f8:c3:34:70:fa:20:96:d2:04:54:da:70:
                    d4:da:cd:ae:23:33:db:80:59:2e:41:f1:ca:86:49:
                    03:81:45:bb:99:53:bc:2a:29:bf:55:f1:60:ae:e5:
                    7a:02:59:6a:34:84:32:3c:60:25:86:95:20:49:ea:
                    cb:dc:55:29:6f:0b:79:0b:f8:64:99:23:32:3f:dd:
                    2b:54:d0:bd:bb:8a:7b:5d:2b:59:10:7e:36:dc:02:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:08:9B:3B:79:26:2A:B5:21:79:38:90:DB:CE:F5:43:FF:DD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95b92510-de26-3387-a02f-c46c6d84fd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:26:63:6d:06:41:8b:77:88:c2:0c:3f:85:da:92:80:ff:
         81:13:cf:08:0c:50:e0:9c:f6:16:e3:85:89:6a:fa:79:1d:df:
         9d:b5:96:2f:a9:dc:78:fb:eb:1d:ee:11:0b:24:58:9f:12:5e:
         3a:d2:75:22:67:7d:02:bb:30:b8:06:7d:55:45:fe:57:5f:b7:
         b1:a5:c6:0c:a6:6f:80:b0:29:2b:51:17:73:10:fb:60:6e:ee:
         d5:d8:80:da:53:62:37:df:ae:9d:19:41:7a:b4:0b:42:8d:90:
         47:27:7a:e4:26:d7:ef:14:f9:40:bc:5d:ba:e3:cd:90:07:fc:
         7d:38:5d:1b:3b:b2:9d:d1:7d:24:b0:54:c3:87:bc:81:43:b4:
         fa:b2:00:8e:f9:58:a1:5b:06:5b:e6:a0:b7:e2:f6:e6:52:99:
         cf:db:fd:ad:c1:db:4d:4d:07:60:41:11:3f:85:09:30:6b:4c:
         83:5e:b6:00:8b:62:7a:f8:2d:1f:f1:c1:ee:85:4c:bd:54:40:
         7b:46:5d:39:b5:be:78:51:5d:25:87:83:6f:4e:13:67:fa:17:
         30:1b:b0:fa:2b:81:d7:a6:01:64:2b:0b:bf:c5:7d:a2:cf:e1:
         30:43:e0:d0:c9:0b:08:12:57:30:d5:98:60:e6:b1:a9:70:23:
         9d:f7:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 05:13:08 2025 by rpki-client