Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0626406-e635-38ab-b784-c1cf072a04c7.roa
File:                     a0626406-e635-38ab-b784-c1cf072a04c7.roa (raw, json)
Hash identifier:          CZOMM8pkhsMyJpeDPaxBjUHkdQZDY4dlcXm062ukm/s=
Subject key identifier:   F6:30:88:34:D6:BB:10:52:76:6F:89:7A:4F:35:6B:AD:FF:AC:78:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DDB95E80D72027D22A5AAAB40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0626406-e635-38ab-b784-c1cf072a04c7.roa
Signing time:             Tue 10 May 2022 16:21:07 +0000
ROA not before:           Tue 10 May 2022 16:21:07 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:db:95:e8:0d:72:02:7d:22:a5:aa:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 10 16:21:07 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=efd94485-5524-41df-aee4-ad084d1b98ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:51:6b:5b:65:28:df:d9:44:8d:82:0e:fc:
                    b9:d4:16:7f:46:ad:32:88:d0:c9:c4:2e:32:9d:aa:
                    a3:f7:7e:50:7a:28:b2:a8:a6:e7:1e:01:c9:88:01:
                    ed:55:6c:88:63:d6:c5:a3:26:09:f1:16:54:b9:a5:
                    1d:a4:76:96:e8:85:3e:05:fb:69:08:1c:a5:a8:66:
                    65:38:c4:c9:1e:8f:e4:1d:c0:97:e4:6c:f6:8f:11:
                    88:f4:1b:c7:59:89:b0:c1:f6:ed:b9:bd:ae:ec:a6:
                    ee:92:84:61:47:f2:fe:45:99:cb:62:01:3b:33:b5:
                    92:b5:e8:9c:8e:ce:75:b7:55:b0:4c:6c:51:8f:a8:
                    50:a6:00:af:a8:90:07:3e:3a:f3:35:be:0e:da:82:
                    d6:d9:35:72:c5:46:f9:e0:f4:ce:5b:7c:95:25:2a:
                    c2:ac:d6:83:28:fc:ff:36:5d:be:35:a3:56:80:2b:
                    fb:5e:df:e8:2f:5c:65:bd:20:04:b4:19:4b:ca:9a:
                    40:e8:ef:22:7c:5c:87:e0:1c:24:56:8e:a4:82:38:
                    66:d7:bc:e1:92:d7:6e:d3:1b:9f:85:27:c2:ea:c7:
                    8f:9c:85:70:96:04:57:95:80:9d:7e:ef:5b:ad:e6:
                    91:74:ee:95:84:fc:66:bc:83:1f:c8:b5:f2:2e:ce:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:88:34:D6:BB:10:52:76:6F:89:7A:4F:35:6B:AD:FF:AC:78:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0626406-e635-38ab-b784-c1cf072a04c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:31:b4:e3:a3:92:b6:d8:45:06:0a:7d:71:9c:aa:56:1b:7c:
         10:97:73:10:59:5e:dd:c8:d9:33:ba:9a:ab:d4:47:09:f0:cb:
         31:58:d9:85:38:56:28:12:0a:a7:79:d7:b2:aa:19:96:e3:33:
         bb:8c:a7:a5:33:08:8a:8d:89:50:bb:ea:89:56:9d:bc:84:c3:
         a4:e3:fa:2e:8b:de:68:1d:37:d7:66:8c:a2:d8:13:78:02:c6:
         3b:66:f3:1e:07:fb:57:f6:d6:32:96:90:da:de:55:c4:66:d1:
         3c:6e:1c:fb:4d:ee:76:b6:e3:f1:07:d6:5d:72:90:4f:b5:06:
         eb:52:fa:33:84:7a:b4:a8:fc:fa:5f:a8:19:e4:fb:67:8c:16:
         39:61:ea:9f:bc:b7:29:68:b8:20:8c:33:30:61:c4:24:8c:b4:
         6b:71:88:e5:a9:db:07:26:f3:b8:61:2c:8a:c8:39:c3:57:e3:
         a0:05:07:cc:92:40:68:b2:42:23:08:53:6b:56:e3:12:4c:8c:
         8b:07:03:49:5e:d3:c2:19:98:bd:78:1e:28:1a:82:cf:97:94:
         43:5a:0f:f6:f2:9d:fa:05:6f:2a:52:1b:78:dc:5e:2c:e5:73:
         0e:8e:3d:22:73:fb:6a:b7:2d:9a:5f:47:02:24:ab:3d:b1:5d:
         c1:93:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:00 2025 by rpki-client