Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dcc9003-0729-3e82-b8de-11557a0bfb66.roa
File:                     9dcc9003-0729-3e82-b8de-11557a0bfb66.roa (raw, json)
Hash identifier:          C9AKiVR0p59Xm1l3b3ctnjy0zFEOddsxbqK4k3zsFIw=
Subject key identifier:   DE:C1:F7:4C:54:B6:1A:31:0F:1E:39:CB:8B:D5:E6:7D:C1:DA:F0:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E41E416E948B6ACE3AC5241C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dcc9003-0729-3e82-b8de-11557a0bfb66.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.151.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:e4:16:e9:48:b6:ac:e3:ac:52:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=6529427f-97fb-4ace-9b0d-32b0a7522c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:c6:ad:df:90:45:c7:44:2c:b3:7d:31:17:
                    f1:66:47:60:fd:ad:7f:52:2e:b7:1e:32:e6:b5:6e:
                    be:94:fa:32:b9:e8:2e:57:93:21:15:85:a8:95:bb:
                    ba:ae:1d:d3:0c:a5:61:11:e2:6e:27:db:36:ee:60:
                    ef:a0:dc:c4:92:fe:ff:94:a0:4b:ee:07:f8:de:a4:
                    bb:9b:fe:36:58:77:be:27:3a:93:86:3f:c1:ed:b8:
                    d2:fa:67:ff:03:89:78:fc:80:da:b3:7d:f0:ee:a2:
                    5a:78:5a:ce:ad:ae:fa:d5:03:6f:db:5a:be:58:a9:
                    e8:e7:71:9e:5d:a6:16:ed:6b:a1:87:92:df:67:6f:
                    64:25:18:fb:8b:1e:0c:a6:0f:c4:9c:60:16:8a:53:
                    0e:e5:e9:f1:cb:40:9c:c5:84:fd:54:50:d0:dc:35:
                    53:2c:42:ef:1d:39:90:9b:32:d0:22:ba:87:a3:c0:
                    ed:35:7d:f5:94:07:48:b5:19:f7:2a:21:13:de:b5:
                    c7:b9:54:ca:07:3e:fa:55:56:ae:96:71:15:8f:a0:
                    ec:f7:fd:80:ad:ec:01:14:5b:52:f9:e2:d9:48:4f:
                    af:75:17:c9:a1:38:f3:ee:32:cc:a5:84:33:05:e2:
                    ea:c6:59:b8:e8:be:2a:d7:64:59:59:c9:f2:19:d8:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:F7:4C:54:B6:1A:31:0F:1E:39:CB:8B:D5:E6:7D:C1:DA:F0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9dcc9003-0729-3e82-b8de-11557a0bfb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f5:fc:60:f8:53:ef:9d:ab:00:ce:38:b1:5a:1a:40:12:1c:
         55:26:fe:f0:e8:23:88:8a:f6:14:53:54:6d:6c:19:41:53:e9:
         db:d7:92:3a:fa:6e:ed:22:a8:96:d3:73:8a:9b:5a:45:16:73:
         d1:db:f0:a2:52:7a:e9:22:8b:95:9b:df:4d:a8:3c:a8:eb:b4:
         71:e2:31:dd:80:62:93:db:cc:9c:33:ad:dd:82:c8:eb:f4:ea:
         f8:f5:4e:8e:04:d1:a9:7f:34:ca:69:e4:e2:d9:97:f0:41:3e:
         47:64:1d:fa:21:8a:68:b7:8d:a4:4d:dd:d8:00:bd:59:a7:f2:
         45:c2:20:13:8c:34:3f:42:8b:d5:dc:c2:00:d4:01:b4:b3:37:
         19:a9:63:fd:6f:ea:0e:bf:57:e9:76:01:24:b9:40:c9:38:43:
         a3:1b:9f:3f:24:1c:93:4a:d3:d1:f1:a3:19:c7:23:7f:35:8d:
         df:de:69:b9:37:32:67:df:80:0e:44:4b:a5:35:80:00:be:8d:
         3d:b4:e5:1c:a1:e2:6e:14:26:36:cd:e2:41:fe:07:75:70:51:
         c4:69:b7:ce:53:d7:16:96:73:dc:fe:74:22:34:d6:92:c0:42:
         05:d3:d6:af:84:e8:59:69:12:56:9c:0f:24:39:23:f0:f2:af:
         72:76:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:51 2025 by rpki-client