Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c32ad96-4b89-3c46-a9c8-297f73c359c7.roa
File:                     9c32ad96-4b89-3c46-a9c8-297f73c359c7.roa (raw, json)
Hash identifier:          p4u1visTDjtd9Z0DW7/9k8tHSS3P9cSd22GxLWl5zlA=
Subject key identifier:   E5:E9:9C:A5:D2:61:7B:F8:C1:08:F5:69:6E:E3:FA:F0:2F:9F:A9:DA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DFB7CE567511360BD365D6860
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c32ad96-4b89-3c46-a9c8-297f73c359c7.roa
Signing time:             Sat 21 May 2022 12:00:00 +0000
ROA not before:           Sat 21 May 2022 12:00:00 +0000
ROA not after:            Sun 26 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.168.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:7c:e5:67:51:13:60:bd:36:5d:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 21 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2022 GMT
        Subject: CN=500a0684-e33c-4b6e-a756-6da88b953d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:51:53:cf:dd:9a:f2:25:a1:85:f0:92:e9:
                    39:44:10:80:f0:ff:e6:9b:d3:9f:3f:e2:f3:9d:ac:
                    d9:97:9b:03:8f:f2:b9:ca:a5:fd:9b:ce:10:42:68:
                    51:21:78:7a:8b:5a:3d:f1:b1:f2:f9:ea:c3:59:4c:
                    44:2d:a8:c9:3f:2e:00:32:e3:fe:b3:e5:e9:fe:aa:
                    dc:47:cb:5d:68:42:1f:22:d6:e5:7b:db:78:fb:13:
                    5d:ac:5d:de:60:13:a0:b6:fe:28:93:33:89:78:85:
                    4b:0f:e4:ae:98:1c:24:52:5b:c7:7c:ae:85:80:96:
                    c4:ba:0e:d1:0f:0e:4c:1f:45:48:20:35:ff:d2:8a:
                    81:1a:2a:65:cb:5c:5e:b8:63:bb:83:5c:ac:6a:59:
                    79:18:86:0b:6f:b6:05:9c:4d:31:41:6e:cd:bf:58:
                    97:0f:80:d6:2d:fa:c4:ff:f5:db:e2:95:38:82:e3:
                    77:fc:ea:67:48:cc:d1:32:40:d6:37:67:e8:da:80:
                    8a:32:66:11:e0:56:6f:b8:17:e7:11:a0:2c:6c:14:
                    25:62:d0:fe:6c:d2:24:44:65:dd:62:16:ee:1e:e5:
                    ea:34:f7:86:cf:7f:62:3f:a7:af:bf:5c:b6:c3:99:
                    a8:a8:0b:e4:a5:2a:e9:81:e7:09:b0:6f:34:e0:ac:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:9C:A5:D2:61:7B:F8:C1:08:F5:69:6E:E3:FA:F0:2F:9F:A9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c32ad96-4b89-3c46-a9c8-297f73c359c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.168.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:63:2d:32:79:83:51:18:6c:ef:ab:94:6e:01:51:aa:5d:
         b8:7e:89:7e:4f:77:f7:04:a1:50:af:4e:d7:6e:b5:02:d6:c1:
         fc:fb:02:36:dc:bb:b8:24:0b:20:82:1e:4e:3b:2e:a4:b2:dd:
         dd:b9:1f:65:61:77:e5:49:82:d2:53:96:cf:84:43:ba:26:a8:
         f7:9c:5d:31:f6:df:d9:d2:71:86:2f:1a:16:ef:c5:31:ae:95:
         9b:42:76:32:26:7b:b7:ff:54:44:59:52:e5:86:14:83:af:2f:
         af:36:e5:32:57:8e:c9:00:02:ae:bb:8d:bb:b0:49:a9:e1:79:
         bb:69:9f:e7:5b:37:fb:d2:ff:ff:84:4d:b5:f9:7d:13:02:a9:
         6f:2e:91:74:f5:0f:9c:86:40:e8:00:31:65:0c:7a:11:a2:0a:
         11:c2:ec:aa:71:5b:16:c6:43:dc:a7:96:ce:71:a3:db:5d:16:
         99:a3:a3:d1:34:bb:ab:f0:ed:7c:31:05:41:91:07:f7:14:15:
         85:58:d1:d8:29:d6:26:09:1b:ff:b7:4a:22:e6:bd:28:6d:aa:
         ca:86:f7:15:33:10:0b:8a:85:41:5d:0f:fc:21:64:67:62:57:
         8a:8e:76:e5:e5:c3:72:d0:1d:e5:e7:3f:29:64:c0:9e:5d:53:
         c5:0d:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:50 2025 by rpki-client