Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9f66b8-eeab-3fcc-911e-fbb767cbeaa0.roa
File:                     9e9f66b8-eeab-3fcc-911e-fbb767cbeaa0.roa (raw, json)
Hash identifier:          qSJyB/JliowgwzxD4Av0eLZlQ1G3/WMODFmU38X8z0I=
Subject key identifier:   46:46:48:E6:C5:F7:A0:BF:F8:E3:11:58:83:E0:87:F7:61:23:6E:07
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD615279FF097EDFDB4458380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9f66b8-eeab-3fcc-911e-fbb767cbeaa0.roa
Signing time:             Mon 07 Nov 2022 22:33:08 +0000
ROA not before:           Mon 07 Nov 2022 22:33:08 +0000
ROA not after:            Tue 13 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d6:15:27:9f:f0:97:ed:fd:b4:45:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  7 22:33:08 2022 GMT
            Not After : Dec 13 05:00:00 2022 GMT
        Subject: CN=045a1de6-9f43-4813-b884-fc402761a152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:af:73:54:40:25:cc:f4:83:f4:6d:cf:0e:
                    ae:77:4f:b8:b0:28:76:42:c7:dd:c5:a5:10:ea:f1:
                    29:de:1e:ad:3c:97:6e:5d:01:1b:56:bf:e2:44:1a:
                    2f:f3:01:d1:4c:c4:0c:99:4d:3d:3f:d5:fd:a2:ad:
                    e3:6e:11:88:7e:1b:29:54:75:6e:8e:62:bd:c5:fa:
                    9e:16:82:8f:d0:20:d4:c2:cf:c4:c7:5b:e2:37:27:
                    db:c3:c1:a9:a1:fd:6c:09:34:b0:e4:5f:83:07:d4:
                    17:54:48:34:45:db:32:18:7a:c4:ba:d0:f4:d4:2a:
                    b9:f3:b4:22:58:ad:2f:14:3b:61:ab:f5:8e:07:d3:
                    7c:5a:3c:58:39:c6:ca:18:d6:23:55:2c:98:fe:66:
                    7d:11:17:ae:13:11:d8:4d:67:e7:f3:6b:c1:00:32:
                    a4:7b:74:18:c9:b9:fd:2b:ba:f9:c6:75:cb:12:f3:
                    ae:79:51:a8:40:e0:d7:7d:9a:04:ca:66:8c:77:9c:
                    bd:c7:c0:d7:f5:b5:5c:d0:3c:04:4f:b3:70:10:51:
                    37:6c:e5:6a:b1:31:47:97:20:99:87:fe:fb:da:de:
                    95:db:18:4a:db:80:1a:98:3a:63:4a:92:73:e0:77:
                    8d:1f:0b:d8:ef:66:6e:d2:39:6e:18:62:90:37:67:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:48:E6:C5:F7:A0:BF:F8:E3:11:58:83:E0:87:F7:61:23:6E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e9f66b8-eeab-3fcc-911e-fbb767cbeaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:13:dd:51:ce:bb:da:98:f9:fe:50:7a:25:cf:4a:6d:ba:1f:
         8f:65:24:3c:8d:29:d3:89:03:29:b1:c5:c9:e0:c3:85:3b:37:
         36:fb:75:f1:99:b2:2d:a0:ec:03:14:fd:1b:21:4a:24:7e:71:
         db:01:d3:60:98:d2:10:31:1c:34:ab:ef:14:00:9f:d2:92:af:
         b3:5a:da:2c:42:f6:7e:59:92:c4:36:87:fd:c7:ab:c9:d5:9a:
         3e:26:35:0f:4e:bf:99:5b:a6:23:45:a6:00:f7:47:da:1b:4d:
         40:49:be:87:32:a6:21:11:dc:85:38:af:0b:87:de:f4:d2:3a:
         ab:9b:00:1e:5b:10:a9:58:2d:bb:20:6a:62:33:90:3c:0b:49:
         78:0e:69:13:c6:ed:4e:ac:55:8d:61:a4:15:76:be:ae:ce:54:
         5e:b1:fd:de:89:da:fe:67:b8:fb:b7:e2:02:7d:86:3b:62:8c:
         97:a9:3f:af:12:f1:fc:b8:76:ba:9d:00:2d:b8:d3:34:ac:00:
         94:14:ed:e8:2e:35:a2:c4:12:7b:bf:ba:d3:fb:10:60:99:46:
         d6:6c:e2:a9:bc:a5:df:90:5c:a9:78:b3:80:10:af:90:5f:58:
         74:a9:77:bf:55:05:97:99:c5:0c:4b:c4:9d:18:af:23:22:a4:
         27:80:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:57 2025 by rpki-client