Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d4f668f-8154-3fc7-9658-d02ede73a41e.roa
File:                     9d4f668f-8154-3fc7-9658-d02ede73a41e.roa (raw, json)
Hash identifier:          ZqQunpLZx7BNxmucuRHo7W5UA6d7C/bEoIpAKkBWiCM=
Subject key identifier:   B1:AE:F4:1B:55:36:BF:17:D6:A8:F4:1B:41:C5:D7:9F:91:73:F1:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E50ED01A586AA5D3F5E4B3940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d4f668f-8154-3fc7-9658-d02ede73a41e.roa
Signing time:             Mon 20 Jun 2022 12:00:00 +0000
ROA not before:           Mon 20 Jun 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:50:ed:01:a5:86:aa:5d:3f:5e:4b:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 20 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=d201ddbc-a028-423b-8aec-b111797ffc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:d5:ba:e9:50:6f:ce:25:6c:3d:ef:c3:2b:
                    e0:3c:01:27:d6:ed:d0:ab:51:16:cd:93:8f:2f:13:
                    f9:9c:ac:31:18:d5:1c:1c:be:f2:10:3a:86:39:42:
                    8c:1f:bd:e7:29:26:85:8a:87:cf:94:eb:bc:6c:59:
                    1d:7d:96:5a:9f:03:04:4b:02:2b:59:5d:9f:43:bb:
                    a5:ea:4a:a6:35:2e:e7:22:14:77:16:b2:cf:37:53:
                    c4:1f:4a:37:dc:b5:bd:9f:6b:fc:5f:26:65:8c:e6:
                    42:17:ce:8a:9d:70:82:ae:eb:dd:24:1f:6c:38:b9:
                    fc:51:01:09:c5:0e:e3:46:48:1c:fa:8d:e4:20:f6:
                    75:40:cf:d0:df:ef:ac:e8:6a:c6:e7:5a:4e:9f:cd:
                    79:48:63:c8:4e:0b:b7:d9:29:75:a8:c2:38:e8:fa:
                    48:f0:c1:83:5a:7e:89:e8:c6:97:94:40:23:5d:39:
                    1e:69:0c:17:3d:d7:9d:49:d0:9c:3f:0e:e0:05:d8:
                    99:4b:d3:29:54:58:f3:6e:b7:f8:f1:cf:45:4d:33:
                    8f:84:91:53:3a:65:85:6b:48:f9:97:d7:00:34:3b:
                    15:62:ad:92:bd:b7:94:e1:9a:ea:a6:99:15:8f:06:
                    59:5b:26:37:4f:82:e3:8b:fe:ca:19:5b:5a:b4:b0:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AE:F4:1B:55:36:BF:17:D6:A8:F4:1B:41:C5:D7:9F:91:73:F1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d4f668f-8154-3fc7-9658-d02ede73a41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:10:6b:f1:d4:92:8d:a1:32:ed:10:af:fe:d8:c7:2b:f1:65:
         29:f9:73:54:e0:18:5c:b1:ce:8f:eb:64:2d:f2:b9:0a:8a:96:
         54:20:ff:12:9a:70:e0:97:55:3a:8c:d7:b8:e4:ae:9a:f0:de:
         48:c9:28:f4:8f:69:30:83:e9:3a:30:af:4d:7c:fc:48:9f:ed:
         b8:50:d3:7f:53:36:86:42:af:90:9b:e8:72:b1:ef:48:86:0d:
         ba:e9:e1:1a:2d:2d:df:54:ed:3a:b2:a1:06:01:50:5f:fe:d0:
         87:af:10:5e:13:4b:d6:57:30:a9:68:cb:f4:f5:f3:42:5c:45:
         cb:ae:c6:f5:1e:d6:e6:b3:56:08:2c:4c:00:1e:94:c8:07:ff:
         bb:cb:f1:6b:90:ec:a8:07:63:ca:db:d5:6b:60:d9:58:96:83:
         e9:b6:42:9b:27:f0:a5:bf:0d:20:fb:af:68:16:52:cc:4c:86:
         aa:2d:e6:e3:49:d6:3e:33:c0:5c:d0:49:14:94:d4:b3:af:ab:
         80:80:bd:3b:5e:55:84:08:25:f2:3e:89:ee:74:52:e6:d5:eb:
         4a:c2:1e:07:0b:d6:e2:3e:5f:4e:aa:50:d6:38:9a:c1:f7:4d:
         23:e1:0d:9f:70:a8:18:99:3d:29:b5:56:64:a7:1a:45:89:dd:
         d4:b0:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:46 2025 by rpki-client