Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ee935f8-386e-3b01-92ec-c71c92ff4675.roa
File:                     9ee935f8-386e-3b01-92ec-c71c92ff4675.roa (raw, json)
Hash identifier:          ut8J3OlI5YTh0W1s5kLxUF2/cx3B7k26luUbEof6RZk=
Subject key identifier:   0F:89:2D:07:5E:FB:F4:AE:D7:B3:E8:9B:B0:FD:A8:9C:08:C8:0E:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403EA803EB2F122DB96FF7BC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ee935f8-386e-3b01-92ec-c71c92ff4675.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:a8:03:eb:2f:12:2d:b9:6f:f7:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=afc9f19a-0121-4e62-ae82-15a9d4c5cac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:a8:7a:06:f5:36:f0:cc:57:b8:d2:00:45:
                    52:65:41:f4:16:61:75:86:66:5d:03:16:8a:99:c2:
                    1a:89:3c:15:13:ae:ee:75:44:e9:44:03:bb:3d:f6:
                    fd:14:62:a7:6a:d4:c9:6e:ad:49:1b:97:05:30:3c:
                    99:2d:92:24:d0:f7:39:7a:07:90:c2:e4:8e:8c:0a:
                    3c:66:f0:5a:be:df:30:77:cb:98:e1:2b:39:b2:fd:
                    33:f6:fc:e7:13:89:ae:b7:a6:50:ae:6b:4a:98:a9:
                    41:8e:31:21:a8:da:05:c7:6e:e7:3c:0d:66:5c:33:
                    e2:9b:eb:a7:13:44:ce:cf:e5:b9:c1:79:bf:1d:c6:
                    82:8f:7a:37:b9:35:8b:51:e2:fc:73:6e:03:c8:7c:
                    9f:40:f4:61:de:35:75:c3:89:8c:fe:4e:30:f0:24:
                    60:96:5a:c4:9d:78:b3:80:96:ec:55:fb:ea:43:11:
                    6c:c4:8a:fc:5b:7c:50:54:b0:bc:2d:42:0d:a6:e4:
                    6d:d2:90:65:bc:ea:dd:43:f3:2a:c9:9e:d9:c6:a4:
                    b8:5b:9d:78:17:07:c4:a0:0d:74:95:c2:89:07:52:
                    23:4e:e1:fe:d9:e2:85:7e:e2:ea:6d:be:62:06:ba:
                    6c:78:99:42:77:e0:f3:2b:8a:4c:57:b7:af:9b:86:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:89:2D:07:5E:FB:F4:AE:D7:B3:E8:9B:B0:FD:A8:9C:08:C8:0E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ee935f8-386e-3b01-92ec-c71c92ff4675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:16:57:02:30:a1:8f:87:4b:ab:9c:7b:17:74:f7:ff:f4:d3:
         8f:8f:3a:72:8f:a5:36:39:84:86:a4:c6:e9:76:1d:05:09:38:
         cb:4b:ad:8c:4f:b6:67:2d:a3:92:e5:98:d3:61:46:c9:5d:e9:
         75:be:c9:87:2c:f3:7b:08:a7:7a:95:01:17:ed:b9:bf:46:9f:
         97:be:2d:fe:16:ef:b1:80:00:31:b1:9c:c7:e9:81:ab:96:f1:
         8e:60:b7:95:3b:a0:fe:f3:68:af:88:01:bd:9b:63:3e:b5:ea:
         d8:8b:97:12:f3:99:4e:29:d7:d0:6b:02:06:dc:a4:ee:f8:2f:
         ee:18:b6:4d:34:85:e9:7b:92:b2:f2:4f:5e:a2:82:3c:ac:a3:
         bf:3e:c6:43:e8:f0:f9:12:19:c7:3c:e8:3d:f1:04:8f:1a:fc:
         17:a1:06:97:87:50:bc:44:8b:62:ee:3d:ce:55:35:8b:8b:c3:
         60:ae:60:91:6a:52:83:c3:60:03:05:92:a0:4d:21:ed:60:08:
         cd:1e:e2:f3:13:c8:6e:6f:77:3c:ab:05:ea:1b:8c:c5:88:7d:
         06:ba:64:6d:43:5f:87:ef:bf:d8:b5:35:fe:2d:f7:22:0e:6d:
         03:2c:ed:4f:5e:40:4e:12:6a:8b:fd:9e:f9:c3:b4:45:58:9d:
         3d:a6:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:23 2025 by rpki-client