Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/965c6673-5213-3883-b73f-06a098c21955.roa
File:                     965c6673-5213-3883-b73f-06a098c21955.roa (raw, json)
Hash identifier:          /R2URqRmAxXW4B5rZDy8qnEY5zo7JiFvgwnUBCfpftw=
Subject key identifier:   5E:90:15:AA:13:64:21:15:BE:B4:30:69:AB:A7:19:4A:E1:CD:22:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584064B9017638A7AD2DE53CA080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/965c6673-5213-3883-b73f-06a098c21955.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.119.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:b9:01:76:38:a7:ad:2d:e5:3c:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=29316135-609e-4a44-b2a6-553e7b9b4cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:18:8e:8c:42:62:97:88:a9:82:1e:7b:c9:
                    c0:9c:76:16:d8:aa:77:4b:f7:de:78:d3:68:23:82:
                    a7:15:6d:e2:dc:dc:a5:a4:f3:36:c4:0a:93:a4:30:
                    aa:51:e8:5c:a6:99:1f:07:1b:c4:0d:91:56:b7:a7:
                    ef:90:e9:e4:ad:e9:19:b2:e8:9d:b8:3b:b8:38:29:
                    a9:85:e2:3b:04:d9:44:ee:91:67:df:3a:4a:d1:21:
                    a8:d5:3b:00:36:bc:37:c6:ed:dd:9f:38:cf:b5:6a:
                    a5:fb:8f:4a:7c:d3:a0:c7:90:7b:27:9e:84:f4:df:
                    9e:7e:b1:17:ff:de:84:87:6f:ab:5c:75:52:fa:21:
                    9c:50:c2:be:1e:a8:58:64:1a:ca:8d:e4:f9:f8:4f:
                    e4:5a:fc:9b:2d:ff:7f:b0:9c:f8:d1:07:86:3c:6f:
                    71:d8:4f:3a:50:9d:2d:8f:14:73:22:03:ef:eb:7e:
                    5f:77:03:d9:00:2a:46:8d:b1:00:af:27:70:17:6c:
                    dc:a7:fc:6b:c4:3d:8e:a8:07:10:73:cd:44:d4:f0:
                    41:74:bf:7b:67:75:29:05:ab:70:4f:b7:f1:64:32:
                    d4:0d:58:24:07:97:cb:b0:5a:95:75:a8:3b:74:f8:
                    6a:75:ed:0d:46:42:ac:30:1c:47:a3:cf:9c:8f:f1:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:15:AA:13:64:21:15:BE:B4:30:69:AB:A7:19:4A:E1:CD:22:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/965c6673-5213-3883-b73f-06a098c21955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:3a:87:38:a1:12:ba:77:4e:0e:4e:f4:5d:21:b6:44:80:
         16:16:69:cb:ad:61:39:27:3a:a9:84:d2:01:fe:07:4a:67:ff:
         b2:8b:e7:df:e5:37:bf:1e:aa:fe:d2:07:c3:0d:2f:ec:83:39:
         b2:47:df:d0:06:aa:05:58:a8:38:cb:01:ae:41:df:66:ff:a7:
         54:98:41:17:80:73:71:8e:74:8e:14:86:a5:68:78:87:15:1a:
         ac:00:a1:f4:df:15:b4:61:10:71:27:c9:de:6f:bb:d6:8d:a3:
         e3:c3:49:71:19:22:31:a5:d1:19:9f:28:38:7e:79:e6:3b:40:
         33:d4:a0:bf:18:b0:16:e9:75:d0:c3:55:1b:01:25:fe:2e:99:
         67:65:95:27:a5:3c:14:52:40:e9:c7:c0:c4:44:d8:11:13:62:
         8b:79:6a:e8:29:60:e5:02:6b:1a:a5:18:22:ce:37:c9:01:44:
         35:79:6c:6b:79:6a:b9:31:2a:aa:f2:8e:fb:ba:39:32:21:c5:
         38:b9:ac:b4:22:ea:4d:44:97:56:f9:49:c8:74:f6:13:0d:95:
         cd:3f:25:85:a2:d1:87:6a:96:5c:ad:e6:1a:08:5c:3b:c2:dc:
         77:d8:87:09:ed:06:0e:e5:ea:6d:6d:b8:61:fc:bf:67:31:10:
         2b:e6:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:57 2025 by rpki-client