Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4c124a-baef-3b3e-aebf-9f26ac5c211c.roa
File:                     9e4c124a-baef-3b3e-aebf-9f26ac5c211c.roa (raw, json)
Hash identifier:          19P1XZOv43s6mqk+2lGnHKbFJdU39z1A5PNdA4pMpuc=
Subject key identifier:   59:E4:0C:3F:87:A4:65:F6:6B:22:F4:CC:DD:B4:5A:9C:1C:D5:01:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE12C8B6A7C2DB60B263F4540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4c124a-baef-3b3e-aebf-9f26ac5c211c.roa
Signing time:             Thu 10 Feb 2022 05:00:00 +0000
ROA not before:           Thu 10 Feb 2022 05:00:00 +0000
ROA not after:            Thu 17 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e1:2c:8b:6a:7c:2d:b6:0b:26:3f:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 10 05:00:00 2022 GMT
            Not After : Mar 17 04:00:00 2022 GMT
        Subject: CN=a33300dd-959f-4a6b-a45d-db1cf6105018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:2c:d5:09:85:e3:37:f4:0a:63:d7:96:eb:
                    07:b6:62:35:94:b5:01:0b:fb:bb:fd:00:ed:f8:02:
                    f3:bf:3c:45:2e:7c:e8:72:e1:1d:00:23:e3:c1:bc:
                    a8:81:cf:ed:44:89:8a:57:90:ce:7f:8a:41:13:b9:
                    3e:3f:46:b7:57:93:b5:c4:32:e7:57:a3:14:78:ba:
                    67:60:81:be:14:7b:41:5b:c7:4d:8a:f1:04:85:df:
                    dd:72:cd:3f:68:44:df:9d:79:9d:3a:bc:39:ee:b3:
                    16:14:1f:68:cd:1d:b4:a3:6c:73:b9:d7:51:0b:a7:
                    dc:99:80:85:0c:0c:5b:08:19:f3:8d:be:37:ce:3e:
                    ba:25:7b:c1:9a:aa:9a:d8:ba:cd:e6:d9:58:71:07:
                    b0:75:e2:80:f2:c5:8e:8d:df:25:dd:f7:6b:e4:b2:
                    b9:60:60:7f:8f:c8:1d:c9:72:22:0f:08:73:22:cf:
                    c4:a5:64:11:42:b6:43:ab:70:68:fc:10:e4:56:1c:
                    50:53:94:1a:06:60:4e:7e:f4:82:34:34:bc:2e:13:
                    5d:68:9d:5c:c2:ff:ca:0b:9e:54:85:20:c8:4c:ce:
                    44:2c:cf:68:f3:55:41:f9:28:ca:f1:77:e1:4c:99:
                    76:7a:d1:ba:39:0b:f0:c1:20:2f:31:58:b4:e7:61:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:0C:3F:87:A4:65:F6:6B:22:F4:CC:DD:B4:5A:9C:1C:D5:01:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4c124a-baef-3b3e-aebf-9f26ac5c211c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:24:ee:1d:6a:8b:43:93:30:e9:b6:8c:15:8b:66:f0:fe:
         de:0b:07:8f:ad:6f:4b:d1:d4:55:19:b5:41:ed:72:21:47:a2:
         57:46:88:f4:f8:4c:62:75:79:8c:8b:54:77:a3:bd:88:52:08:
         3b:ef:37:8e:15:67:14:2f:e4:d9:6d:a8:cb:20:89:27:79:a4:
         ac:47:05:b0:26:66:95:3a:41:9b:4d:9d:83:d6:dc:f7:cb:2a:
         d5:c2:3d:e0:25:86:85:e0:a7:fd:0a:86:79:fa:7c:fd:21:f6:
         f5:ae:5a:47:21:c6:cc:5a:4f:20:d2:5e:5b:e4:01:9d:e8:fb:
         f1:6f:c7:e6:43:13:30:0b:b5:7e:10:3f:55:1b:65:d4:cc:f6:
         42:cc:24:12:8c:f5:3e:a2:df:57:24:0c:81:dc:58:e7:b5:cd:
         9e:46:f2:ba:5a:a4:52:ee:0a:4f:6d:eb:52:e5:d2:94:a2:86:
         ed:e3:6f:f7:80:c4:c0:4c:65:2c:b7:b2:fa:69:ad:39:4c:30:
         84:e7:e0:59:17:27:63:0a:f2:cf:2e:83:ab:40:d8:3b:8d:07:
         a7:4d:2d:07:6e:cb:b5:d3:d9:99:3d:ba:15:9b:a3:27:b3:12:
         4b:68:ba:6b:9d:d6:f4:f3:34:76:37:84:52:87:45:64:8b:78:
         e4:84:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:27 2025 by rpki-client