Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95e6f50c-cb6b-3382-b8e2-eb5da95cc7a6.roa
File:                     95e6f50c-cb6b-3382-b8e2-eb5da95cc7a6.roa (raw, json)
Hash identifier:          PQco29b6u0shG2rtxA4bnaH1Himrab5p46cvp2TyfOA=
Subject key identifier:   70:6D:79:08:13:4E:27:98:A4:9B:02:E0:B4:A7:D2:C4:0F:F8:81:1D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE0D31A84C8D9F3F984C139C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95e6f50c-cb6b-3382-b8e2-eb5da95cc7a6.roa
Signing time:             Wed 09 Feb 2022 05:00:00 +0000
ROA not before:           Wed 09 Feb 2022 05:00:00 +0000
ROA not after:            Wed 16 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e0:d3:1a:84:c8:d9:f3:f9:84:c1:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  9 05:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2022 GMT
        Subject: CN=91725069-8c24-4ae2-815b-94006ae3edd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:dd:75:61:13:cd:3d:e0:0b:f3:7d:3b:d7:
                    5f:16:1f:c0:1c:30:d3:21:be:b7:a0:52:8b:7f:2b:
                    30:22:b5:8a:cf:a7:9f:fa:4c:78:e4:dd:33:80:d0:
                    17:a3:f8:3e:c1:48:0a:06:4b:8c:f0:e2:b4:db:12:
                    69:80:ae:93:0d:80:27:29:cb:0b:b2:91:89:06:47:
                    ca:69:1f:fc:ac:30:95:00:f0:2c:71:bc:cc:21:7e:
                    0d:df:d0:18:ed:c2:be:b6:3c:04:4e:57:51:cf:41:
                    99:3f:81:4f:d0:41:92:6b:c7:86:1e:ba:da:20:68:
                    84:d1:f4:04:7d:44:d5:ad:7c:f4:a3:31:86:46:3c:
                    ea:a6:a7:a3:1f:4c:11:cf:fc:0d:0d:99:d2:4d:d3:
                    6f:45:75:8e:bc:a3:78:9c:3b:e7:9a:13:e8:8b:b3:
                    d6:5a:5c:bf:1b:db:04:26:3d:60:f0:f6:36:2a:52:
                    00:2a:a3:93:fc:d8:41:3f:d8:ed:8c:44:54:2a:39:
                    0a:05:df:ba:63:1f:1b:ff:a3:d6:a6:78:da:28:a6:
                    8b:cf:bd:7d:04:c8:4f:2e:fe:7a:6b:03:99:94:80:
                    a5:15:a9:3e:b1:d6:83:98:a4:f3:ae:ac:91:06:aa:
                    46:73:2a:b1:29:4b:43:bc:01:f5:16:ca:14:ec:20:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:79:08:13:4E:27:98:A4:9B:02:E0:B4:A7:D2:C4:0F:F8:81:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95e6f50c-cb6b-3382-b8e2-eb5da95cc7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:ff:f4:7e:18:c6:bb:d4:44:0e:f3:3f:46:b7:c8:e1:da:
         0b:4a:d8:40:81:74:ff:dd:27:4b:4c:d8:75:51:cb:f1:ce:48:
         76:ee:4f:2e:53:77:b4:d8:02:6f:5e:55:0a:05:58:a4:b0:fe:
         4c:40:8f:2d:96:fe:d8:76:59:b5:f8:9d:5d:18:d1:19:42:f2:
         b7:32:50:3c:c6:75:77:c9:bd:12:ba:01:3a:4a:09:4a:1a:5d:
         20:8e:29:57:c0:23:2d:06:1f:40:db:58:c7:22:77:e3:d7:e7:
         7a:70:3e:52:83:ed:34:e9:85:97:7e:9f:94:95:c8:99:d7:32:
         fb:87:65:b9:f0:f6:13:f4:33:ab:f4:00:a1:a3:b5:e2:0b:49:
         b2:66:e2:8f:1c:f7:25:ce:5c:1e:ce:fd:a2:6a:c6:e4:12:90:
         dc:15:41:ea:a2:ab:23:7a:c8:e4:26:89:28:b7:6f:f7:6a:0b:
         2e:0e:55:cd:ce:22:cf:76:97:c4:86:b6:0b:9f:0c:b3:51:ad:
         ed:76:19:43:a1:49:11:1c:32:5c:bc:9f:11:32:8b:4c:ee:8f:
         45:4e:50:6d:0e:38:f9:e2:b2:ea:eb:68:94:59:a9:f4:f8:71:
         ae:73:08:b7:96:3a:66:97:7e:41:68:00:b3:4d:62:df:f9:31:
         34:f3:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:14:50 2025 by rpki-client