Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3e9781-940d-37dd-b732-6ae3386f4dba.roa
File:                     9f3e9781-940d-37dd-b732-6ae3386f4dba.roa (raw, json)
Hash identifier:          00tkRXHoIVUfUfjnOHhGbfuj/nxSsvJieiJGJ+H34OQ=
Subject key identifier:   1A:0D:DA:6C:32:76:31:09:29:94:F9:EA:AD:EC:B0:7E:76:CC:A3:23
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FBA13CFF1310132B254338080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3e9781-940d-37dd-b732-6ae3386f4dba.roa
Signing time:             Fri 28 Oct 2022 12:00:00 +0000
ROA not before:           Fri 28 Oct 2022 12:00:00 +0000
ROA not after:            Sat 03 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ba:13:cf:f1:31:01:32:b2:54:33:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 28 12:00:00 2022 GMT
            Not After : Dec  3 05:00:00 2022 GMT
        Subject: CN=2688cadb-86ea-44ec-a892-57504e56fd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:06:bb:f8:89:1c:2f:9c:c9:1a:58:b7:5e:
                    d5:9f:89:66:bd:3f:8c:bf:ac:ab:0b:c5:df:8d:a4:
                    7e:67:05:6e:22:e7:02:27:09:00:fc:c6:0c:2f:07:
                    38:0b:af:9b:95:03:3c:68:7e:8e:65:22:12:0b:47:
                    b4:2e:4a:b6:05:29:97:a3:09:f1:d1:e0:e4:36:8e:
                    c8:0b:20:12:24:e5:dc:85:23:b8:70:c9:81:4f:12:
                    a8:51:4e:e0:56:0e:8e:71:b5:e5:f3:77:2b:71:05:
                    0d:ff:a3:40:0a:c0:13:bf:9d:6a:38:9c:40:9b:1a:
                    3f:e3:f4:13:98:8c:dc:9b:14:90:dd:a9:4b:aa:79:
                    d3:af:39:ae:ee:66:c2:f5:84:b0:d7:cc:21:67:09:
                    1e:33:9a:91:be:26:11:35:00:1d:84:6f:49:7a:fd:
                    5c:a3:53:03:7a:eb:ff:ca:92:82:aa:1c:13:55:84:
                    23:d4:b1:88:a5:b4:23:eb:82:21:67:a2:b8:da:20:
                    33:92:41:a1:be:53:ad:6e:ef:65:e1:67:72:0a:ca:
                    71:d6:da:4d:e3:25:11:70:f9:85:78:a7:ac:b1:84:
                    62:0c:da:5d:90:49:8e:c3:39:f0:87:0c:a8:e2:57:
                    a9:d7:79:cd:96:46:d9:5a:d6:5c:bd:36:f8:60:91:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:DA:6C:32:76:31:09:29:94:F9:EA:AD:EC:B0:7E:76:CC:A3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f3e9781-940d-37dd-b732-6ae3386f4dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:b4:d9:52:82:a5:54:0e:97:7f:8e:6d:85:5f:8f:d3:84:
         c4:f5:7a:fa:43:e2:31:4b:39:4e:dd:c8:03:53:b5:00:94:4b:
         0d:1c:e6:77:17:be:91:bb:aa:0d:01:d2:12:4b:98:a4:92:23:
         cb:05:36:5b:39:94:01:ed:d5:b7:75:19:78:2e:2f:7e:68:37:
         bb:53:3a:82:77:8e:33:b1:0c:dd:c9:4d:1a:30:4e:a3:8a:28:
         9c:0a:8a:52:46:18:9e:0d:27:03:4c:2b:a3:cf:e9:ff:5d:21:
         23:ea:5a:65:cf:2b:22:e4:cf:dc:0e:68:ae:27:54:44:70:d8:
         f6:db:87:ed:3d:64:04:78:fb:42:52:37:19:ad:6b:79:8f:3a:
         57:cd:5b:ae:42:e5:a5:72:1e:7d:51:21:a4:d3:e8:bd:9a:c3:
         d8:a3:6e:5d:ce:f1:9f:e0:0e:8a:65:52:14:fc:f2:63:1e:a8:
         b8:2e:f9:4f:89:5b:ee:8b:82:2c:64:48:f2:dd:a5:7a:84:49:
         b3:68:05:6e:7b:ff:ea:78:87:8d:a3:bd:a3:8b:9f:a6:5b:f8:
         b5:61:45:0b:c4:85:ca:5d:36:1d:ce:a8:b5:ed:13:c5:73:57:
         52:6a:45:ce:db:5c:7e:0c:a2:8f:e5:da:c4:7a:9c:79:57:57:
         18:62:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:16 2025 by rpki-client