Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0c65bf1-ff6d-3b75-b5aa-f3a00367ea5c.roa
File:                     a0c65bf1-ff6d-3b75-b5aa-f3a00367ea5c.roa (raw, json)
Hash identifier:          fdJqbyP6PmipL4o3mx6uNObi7Mt/C4qVmg3upeBUlR4=
Subject key identifier:   3D:92:87:EE:D1:2D:D9:5E:06:26:8A:90:FD:CC:63:8A:7D:55:4C:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F536C9368E149B171FE278D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0c65bf1-ff6d-3b75-b5aa-f3a00367ea5c.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:6c:93:68:e1:49:b1:71:fe:27:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=70440be8-b87f-4d86-8863-9df2cfd1355e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:c3:78:87:9e:f5:8c:04:f7:7f:81:98:85:
                    29:1c:0c:a0:9b:09:6d:47:2b:df:bf:d3:3a:35:f5:
                    59:f2:5d:86:c4:29:46:f6:91:41:8f:dd:87:02:92:
                    d1:f1:e7:e4:89:2a:b8:36:1f:76:24:57:93:27:00:
                    10:8c:f8:e4:8d:e3:78:34:38:74:4e:91:52:40:db:
                    0b:1b:8c:d8:f4:e4:fd:7d:7d:b5:d2:af:c2:0d:32:
                    53:ac:98:7d:22:5a:9f:a6:52:67:ef:cf:d0:8b:17:
                    8b:59:b9:3a:2c:e9:39:b7:1a:44:e9:94:cf:96:ae:
                    ac:90:3a:55:97:8d:e6:4c:43:81:7c:f0:11:ea:d0:
                    ff:43:3d:b6:6f:97:f2:c6:5b:bb:e4:a1:36:ed:41:
                    01:35:be:54:4b:35:38:ec:b7:17:e7:5a:1d:84:54:
                    dc:6a:20:51:7a:9f:ca:4e:b4:a5:4b:96:4c:aa:37:
                    30:8a:1e:cf:9c:05:9e:3f:2f:19:5d:73:72:be:80:
                    1b:45:d9:55:fe:7e:28:43:42:3e:b8:9d:5c:72:0d:
                    2f:a0:f3:0d:1b:35:dc:41:89:fe:64:26:e5:e4:80:
                    7f:7b:c5:ee:d7:41:0c:61:da:f5:e2:bf:36:7f:96:
                    dc:a2:ee:e3:c4:bf:22:c6:3e:47:9f:8d:ed:14:17:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:87:EE:D1:2D:D9:5E:06:26:8A:90:FD:CC:63:8A:7D:55:4C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a0c65bf1-ff6d-3b75-b5aa-f3a00367ea5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a4:8f:c2:e3:4a:5d:83:79:b6:53:b8:1f:38:f8:73:fb:ed:
         56:57:40:a1:75:e8:fd:21:6b:0c:45:c4:16:76:36:bc:d7:69:
         3a:55:35:5f:e1:98:98:ff:2b:80:27:69:68:c7:07:ee:8d:5e:
         72:3e:64:dc:8d:b5:c6:69:20:16:16:63:b5:9a:db:57:49:95:
         50:17:48:c6:4c:86:09:fe:81:aa:aa:61:4b:e0:da:28:05:78:
         ff:d4:bf:94:88:c4:bc:ee:0f:2b:05:96:52:cd:90:07:95:20:
         81:3c:97:de:e5:1c:14:14:07:ec:21:c1:9f:0c:c8:bd:66:b1:
         ab:b6:4a:ce:46:ea:f7:65:c0:81:95:29:4f:49:3d:70:de:77:
         d0:ff:8d:55:07:c4:1b:32:de:e1:60:89:69:f3:b3:b6:fb:21:
         10:cd:22:11:16:a1:1a:54:e9:77:63:c7:52:81:f8:b7:e5:20:
         ef:9f:15:91:f5:c3:1b:3c:6b:58:98:87:d7:d7:0e:fa:82:c0:
         0f:ef:4d:0d:03:3d:12:05:04:55:a9:39:f3:ea:47:bf:ab:40:
         f7:70:71:25:26:25:cf:42:c0:78:7a:5c:ac:23:8b:eb:c7:02:
         5f:d7:05:31:a1:7f:fa:1a:9a:f8:ed:5f:c4:ae:f8:c7:c3:0a:
         26:24:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:32 2025 by rpki-client