Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a4df75b-acb3-3071-9c98-6bcaa5eca621.roa
File:                     9a4df75b-acb3-3071-9c98-6bcaa5eca621.roa (raw, json)
Hash identifier:          h5KPHexwjBc6rd0/FLxK5/caKRRwUXNfD7kjL3qVr6M=
Subject key identifier:   E9:6E:E6:D2:BB:2F:5F:42:8E:FC:5D:79:DD:F5:8E:DB:6E:82:D9:A8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2C99C926EED14DB1A7AB7380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a4df75b-acb3-3071-9c98-6bcaa5eca621.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.142.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2c:99:c9:26:ee:d1:4d:b1:a7:ab:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=4c64c228-09d0-485d-a3a3-4dca31917b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:2a:14:25:3b:06:65:bb:e5:b8:c7:87:70:
                    ca:8b:02:33:df:ec:e7:3b:43:c0:c2:cc:f3:0d:58:
                    f3:88:1d:13:5c:3c:1a:91:28:a3:c3:89:02:85:66:
                    fb:09:e6:88:6c:f9:e6:06:73:ab:43:56:f4:87:5b:
                    2e:4f:27:4d:bf:9b:74:16:93:e0:ba:b2:a3:68:8f:
                    3b:dd:1d:65:c1:15:d7:33:81:d5:43:1a:de:a4:d9:
                    1b:c5:f6:28:9c:66:49:d0:a2:02:da:08:4c:c4:3b:
                    f4:95:e5:b5:55:b3:94:90:5f:37:58:3c:05:e1:63:
                    7a:da:de:1a:2b:85:57:d8:7a:2a:f4:85:1f:8e:d9:
                    46:58:ec:f2:e0:e8:88:a9:b3:de:53:27:65:f1:f4:
                    54:f7:4b:9e:3e:81:1b:14:43:f7:dc:2d:3e:75:8d:
                    e1:8d:9f:86:ca:cf:4f:f6:68:9f:a8:21:46:29:39:
                    43:d6:f8:97:32:2c:16:08:ad:d2:f9:3a:fe:f2:26:
                    90:ef:ff:5b:e9:a5:4f:fc:82:48:e6:76:35:32:0e:
                    f3:cb:5a:02:9a:95:7a:6e:fe:51:df:10:84:54:15:
                    70:b6:a5:6b:59:12:ac:49:87:82:94:24:6a:27:aa:
                    57:b2:3a:fa:df:bc:9d:b9:a9:e8:9a:37:9f:7e:a8:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6E:E6:D2:BB:2F:5F:42:8E:FC:5D:79:DD:F5:8E:DB:6E:82:D9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a4df75b-acb3-3071-9c98-6bcaa5eca621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:51:a7:a4:80:d7:c6:94:a2:82:be:a6:61:71:71:b9:ae:bf:
         ba:f2:20:2b:e9:75:e6:65:f0:16:f2:31:de:bf:1e:da:05:98:
         f3:9b:a7:ce:29:17:dd:11:a5:19:9b:12:c9:96:7c:b9:e4:a3:
         45:05:7a:4e:5d:76:63:d5:20:7c:99:ce:92:0e:62:4f:60:0e:
         fb:a0:43:2e:0e:de:6f:89:23:2b:8f:af:98:e4:db:be:62:b9:
         52:34:28:a7:d0:21:19:94:3d:75:c3:97:12:88:23:fe:12:56:
         db:95:78:b6:aa:a0:b1:fd:e9:07:b0:64:73:6b:21:69:04:3a:
         5b:7b:be:e8:bf:37:5a:81:90:7d:f6:f8:f7:3f:d9:df:42:62:
         a4:22:00:93:54:d1:d5:aa:7b:d9:ad:c5:3d:48:9c:a1:52:c3:
         38:51:62:a3:f6:c2:79:9e:f1:fb:17:3f:1b:45:fe:c5:80:f5:
         c0:1e:b3:28:70:2d:1e:95:fc:6a:c9:29:b7:21:ba:07:c7:12:
         1f:f5:44:e2:93:1c:7f:78:b1:90:ce:43:28:46:42:71:6d:42:
         fa:84:2b:32:44:68:e1:79:9e:ca:70:63:5f:15:82:ad:9c:97:
         12:ec:65:13:1f:ed:20:78:32:de:1e:af:0b:a9:30:26:6d:03:
         d7:0b:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:24 2025 by rpki-client