Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96475220-e0e1-316e-a1c4-5d78845df3b6.roa
File:                     96475220-e0e1-316e-a1c4-5d78845df3b6.roa (raw, json)
Hash identifier:          5GmbDn88FTgiHlCdHKMBx9DNEF4b3aAc3c2T4iSV6dc=
Subject key identifier:   FC:FA:6C:5E:3F:8A:5D:AA:5C:22:C3:B1:FD:A5:76:63:54:72:C6:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCB97A17642CA01BFF5DDBB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96475220-e0e1-316e-a1c4-5d78845df3b6.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.69.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:97:a1:76:42:ca:01:bf:f5:dd:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=634052de-cdbf-412c-855a-1a2b58e48ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:de:7a:da:c0:dd:60:0a:f7:21:c0:df:89:
                    71:a6:c8:2e:73:af:20:73:e1:17:13:63:c7:51:13:
                    20:79:b2:67:6a:35:1b:ce:de:c5:6f:08:ac:e2:8a:
                    b2:b0:da:6f:d3:67:c6:a9:27:be:4b:e1:89:65:e0:
                    f8:d5:65:d1:91:60:d2:49:db:e5:1e:b4:b5:e2:05:
                    ba:65:17:ad:39:43:cd:4c:86:6b:8a:56:d5:ab:85:
                    2b:07:a5:e8:3e:f7:0f:52:c0:ed:de:4b:ba:10:0e:
                    ad:07:92:44:aa:c4:8f:62:41:77:c7:b9:ab:58:37:
                    dc:b5:2c:9e:a1:f4:77:d2:7f:a0:9d:1e:35:cd:14:
                    8f:62:82:4c:73:e1:17:2f:80:ec:bf:f8:5c:ee:c9:
                    0d:3a:e5:41:01:ea:ac:fa:61:22:0d:b2:9f:25:1e:
                    55:54:6d:df:7d:26:cc:5e:8d:64:94:86:c0:32:19:
                    c5:33:ad:19:63:a1:5a:78:9b:4b:45:26:26:5d:48:
                    a2:81:29:04:59:9e:3b:67:82:86:4a:43:bc:2e:72:
                    ce:99:8c:f0:8c:4c:14:56:4f:bb:88:ed:a7:80:c0:
                    a7:b9:af:c6:b8:b1:69:94:b6:0e:5a:27:aa:85:a7:
                    c4:94:ba:3d:0a:fe:b8:1a:40:7e:90:ec:bc:98:f6:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:6C:5E:3F:8A:5D:AA:5C:22:C3:B1:FD:A5:76:63:54:72:C6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96475220-e0e1-316e-a1c4-5d78845df3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:42:8a:ad:e3:ba:64:a5:7f:22:70:c5:e9:fb:ca:7b:40:d2:
         53:a6:a2:6f:0f:38:c7:3c:81:86:e2:19:1b:ba:96:d7:a0:52:
         fe:64:d4:0d:ab:20:b4:87:7c:c1:3e:2e:cf:e7:82:05:24:ba:
         9c:a8:06:d4:97:0f:d1:ef:d7:70:d0:fb:25:8f:cc:b5:74:e5:
         f0:8f:45:92:2c:e8:e1:4d:67:f0:e3:f5:2d:9f:a3:a7:33:c1:
         0a:84:cc:42:aa:86:c7:c7:45:dc:d4:38:4d:6d:3a:92:7e:92:
         0b:d9:03:6d:84:19:48:77:8c:ce:ab:ae:1c:e8:73:d7:d9:da:
         12:dc:f4:a6:69:2d:97:a0:13:69:8e:c4:21:37:4f:a8:10:35:
         2d:3d:5e:69:74:95:42:60:3a:d4:07:b1:c8:8f:e3:d3:2a:8d:
         f1:ca:9b:9d:e5:75:5d:f3:0a:56:9d:4a:7a:fe:13:80:c2:1b:
         58:a6:b9:94:90:3e:36:a1:dd:e6:28:85:9a:52:2f:e7:df:0b:
         ad:a1:96:f4:7d:73:c2:60:53:39:31:c6:27:b7:22:c0:d5:d5:
         bb:b8:84:8b:f2:3e:91:a0:e1:11:25:f2:df:c7:8e:e9:45:15:
         49:d9:41:cb:d6:f4:e3:7d:34:0a:8a:f0:d6:b9:d6:1f:84:86:
         1a:a8:71:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:40 2025 by rpki-client