Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97c98f0b-34cd-333b-8727-ba16cf163661.roa
File:                     97c98f0b-34cd-333b-8727-ba16cf163661.roa (raw, json)
Hash identifier:          F+pQt7htPGC4THLyG4+Q7Rn/EmMEoEgTUmuCxaIPsbc=
Subject key identifier:   06:27:8C:9E:C1:D6:22:B3:F0:69:5A:42:E8:AF:29:8E:ED:E3:DF:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF06DDE1EDC63A6674D6B0500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97c98f0b-34cd-333b-8727-ba16cf163661.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f0:6d:de:1e:dc:63:a6:67:4d:6b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=d2ab6117-30df-4f0a-b9ff-30fb86997c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:86:53:68:08:ae:c9:20:7a:47:02:b8:87:
                    d2:da:24:cf:22:c5:7d:1f:3e:71:e5:1c:2f:61:d4:
                    72:86:57:20:5d:9b:3d:15:a9:59:be:43:f0:c6:c1:
                    66:c8:96:3a:25:b4:ba:a7:f3:fb:d9:0d:33:db:bc:
                    8b:74:02:cc:36:a3:6c:22:2f:e2:a9:50:9a:5d:71:
                    c3:54:ec:75:f8:21:f2:e2:61:45:2b:77:41:dd:ea:
                    61:a4:fc:b9:98:00:13:93:e3:c6:04:24:d6:77:5e:
                    12:8e:6b:6f:23:7b:5f:36:65:ad:a3:7c:1b:e5:d8:
                    5c:b8:8e:c2:38:4f:32:90:e9:81:53:c5:46:92:14:
                    7d:d6:83:38:c2:64:9d:5e:84:5a:ef:dd:7b:55:0d:
                    a5:d0:b3:00:5f:00:32:70:7a:fa:ae:c8:92:ff:5f:
                    66:29:3b:2e:fe:94:fa:28:7d:ae:62:20:ac:10:f7:
                    16:58:b0:7d:25:a6:0e:b9:e9:ba:b6:4f:cf:f6:d4:
                    5c:6c:92:9e:94:ad:e8:59:53:f7:49:08:f2:b8:88:
                    b8:6a:62:69:06:b9:b7:14:37:72:88:7f:21:25:a8:
                    56:b8:99:08:d3:25:55:1d:ad:27:97:1b:ee:55:4a:
                    da:9c:51:4e:b7:7e:d8:a2:2d:94:ac:65:5d:1e:0e:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:8C:9E:C1:D6:22:B3:F0:69:5A:42:E8:AF:29:8E:ED:E3:DF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97c98f0b-34cd-333b-8727-ba16cf163661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c8:77:29:29:f4:fd:ee:cc:f4:7e:95:67:54:05:ab:1c:2b:
         f6:63:55:75:5f:d6:15:42:ba:15:84:57:ac:fd:0f:e8:ea:68:
         71:7f:7a:27:de:77:af:c1:11:ae:35:1c:36:6f:82:87:c7:e8:
         8e:0b:5f:74:05:34:ba:2b:0a:2a:94:95:47:a8:f6:14:3a:81:
         8a:3f:49:b5:9a:33:75:cb:b5:58:db:f9:1e:aa:b5:77:fe:02:
         2c:1e:eb:b8:f1:7e:2a:a8:e4:a2:6d:40:bb:62:27:d9:d1:f6:
         ad:a8:04:9c:ac:19:03:b3:8a:c1:ed:d0:e9:2f:38:4d:25:66:
         a5:a5:bd:ea:11:fa:bd:1c:ef:eb:a3:26:44:1d:47:d5:85:01:
         5c:0b:b3:9f:7e:96:28:54:f0:a3:4e:63:73:35:f8:64:b6:33:
         38:25:2a:93:28:21:5d:d0:c7:74:98:b1:c9:51:ed:d7:54:74:
         3d:06:1c:55:d7:77:bf:3b:92:fd:2d:fc:ca:4f:16:a5:f2:9d:
         07:87:4e:10:80:a5:8c:39:d6:75:e2:f0:51:04:89:1f:12:62:
         67:43:ab:3a:43:fa:fe:78:54:2d:1b:de:47:00:fa:52:f5:ac:
         51:6d:bb:8e:1a:99:6d:70:e9:f2:f6:72:26:54:a6:e3:80:72:
         d8:b5:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:10 2025 by rpki-client