Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4d9a03-cfda-3365-8188-66c3a089dd91.roa
File:                     9e4d9a03-cfda-3365-8188-66c3a089dd91.roa (raw, json)
Hash identifier:          l1E62z/Vn9JM0Lnko1M7l34HRuDhhQC1dXT5WpU8koE=
Subject key identifier:   CE:7D:FC:DB:26:9B:EB:D1:07:47:AC:9C:F9:07:97:9E:59:61:E7:72
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA8A9A9B93CE67EB0C6B528C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4d9a03-cfda-3365-8188-66c3a089dd91.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Sat 27 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a8:a9:a9:b9:3c:e6:7e:b0:c6:b5:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Aug 27 04:00:00 2022 GMT
        Subject: CN=6cd728a8-1a82-4e42-a437-45ec675e118b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:5d:32:d1:00:f1:5b:58:6a:4f:92:77:74:
                    17:60:27:df:d4:92:91:27:12:23:72:65:f5:8f:ae:
                    5c:19:6e:90:76:f5:5c:39:f5:cc:7c:b5:49:88:44:
                    e7:11:42:1a:58:2f:81:85:9c:1c:10:cb:ca:fd:b5:
                    96:47:c2:04:ad:30:a3:c4:53:00:08:5f:18:05:79:
                    9f:56:e5:c6:56:f1:99:e2:39:3e:c1:01:aa:1b:b7:
                    89:23:55:fa:02:46:14:93:40:b0:7a:32:67:bc:ec:
                    0b:2c:f2:c2:bc:96:76:21:3b:a9:63:69:03:98:0f:
                    7e:a9:2c:43:35:72:f3:91:50:b8:f2:cd:c1:e4:66:
                    9f:0f:b2:7a:60:59:6f:a8:73:b3:5e:3b:ce:27:31:
                    27:1c:42:ae:e1:37:77:79:5a:06:e6:51:6c:16:48:
                    29:41:91:8a:1c:e1:5e:1e:44:8f:48:01:d5:50:98:
                    6f:9a:b3:a7:d2:ee:8b:58:cd:b0:f8:b3:e1:d5:79:
                    00:f0:c7:13:d7:4b:41:bc:12:ab:81:b7:24:7a:de:
                    d9:f1:2e:5f:e0:2d:88:62:69:09:75:58:17:36:27:
                    11:0a:80:4b:d9:f5:5a:1a:53:d5:f4:f9:33:77:79:
                    35:62:2c:04:8d:2f:26:86:40:7a:6b:e4:20:36:db:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7D:FC:DB:26:9B:EB:D1:07:47:AC:9C:F9:07:97:9E:59:61:E7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e4d9a03-cfda-3365-8188-66c3a089dd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:30:81:58:77:80:cb:a7:7e:8a:dd:38:60:f0:47:fc:87:6f:
         99:92:a9:be:cd:0c:ea:71:4e:f7:c8:e3:bd:f2:f5:6c:87:84:
         99:35:18:79:8c:26:41:2a:db:99:7c:bd:72:67:98:94:05:e9:
         58:90:50:a1:95:f7:0f:61:36:81:6f:ad:fe:fd:b7:6a:67:61:
         e3:1e:c1:fe:b2:14:03:24:1d:72:a9:28:66:d8:8e:64:1f:04:
         e8:8d:fa:20:91:0b:a1:b0:45:4b:3d:1b:13:5e:64:40:21:e7:
         41:8f:78:0b:04:4e:d8:f4:1a:8e:4e:5a:20:19:46:b5:7f:ef:
         e8:51:27:6d:05:b5:4a:bf:e0:80:5f:2e:e7:95:84:52:b1:7d:
         53:94:fb:6b:a9:33:56:a9:f8:c6:a9:02:43:90:01:d3:7e:98:
         ff:17:84:66:0b:b2:1c:9a:d7:fd:48:85:f9:70:4f:20:c9:fd:
         0d:74:85:02:e1:53:e0:eb:a5:c6:82:7b:6d:57:8c:e5:c3:ce:
         77:11:9f:ad:15:fe:6e:dd:b9:dc:ec:61:bc:32:b4:78:d9:ad:
         2f:3d:e4:a6:75:21:2c:72:32:e9:e5:f9:72:d2:3f:2f:74:9d:
         db:63:37:e3:7e:76:cc:f2:d2:a1:e1:c2:6c:4f:d4:dd:80:5d:
         05:86:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:47:39 2025 by rpki-client