Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a154c5ec-1f2e-3ce4-858a-e6a99d4d9ed2.roa
File:                     a154c5ec-1f2e-3ce4-858a-e6a99d4d9ed2.roa (raw, json)
Hash identifier:          +FqHaH1CSVmHquhJA4qfz4XBKRcTRwQ9+GV3IeAEeTY=
Subject key identifier:   44:EE:CA:CE:31:64:78:BE:45:42:A8:45:66:C9:82:6E:72:70:FC:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E414F604A8F71EA9843D40800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a154c5ec-1f2e-3ce4-858a-e6a99d4d9ed2.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.62.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:4f:60:4a:8f:71:ea:98:43:d4:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=e9ee291c-98c5-4e04-8d51-bee3ef7ab506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:9b:d2:59:b3:bd:93:aa:f9:5c:1d:b0:b0:
                    ab:13:51:af:fd:df:5c:ac:4f:e1:28:80:af:35:1c:
                    be:56:06:5d:f7:d0:4a:ef:e1:8d:16:53:ce:7e:2a:
                    11:3b:52:aa:f2:87:73:52:2f:21:c0:69:32:87:29:
                    07:8c:97:c7:f1:f1:f4:b6:96:7d:46:1e:3a:f9:c3:
                    af:45:ee:1b:31:52:5d:1a:97:36:71:fd:ac:33:76:
                    6c:00:3d:ed:8d:d2:9d:d5:e8:35:b7:c1:51:29:bd:
                    43:3d:4d:8d:91:2b:55:52:34:a6:fd:bf:3e:a1:16:
                    f9:58:8e:2c:2f:da:6f:cf:25:86:b0:ef:ba:16:65:
                    09:52:a7:8c:56:75:91:25:c4:16:47:2c:4e:f5:ea:
                    b6:3b:de:ba:3a:31:29:41:41:3d:e0:5c:37:a5:5c:
                    a3:5c:82:c9:9e:25:41:72:16:63:be:e6:84:03:d1:
                    0d:65:4a:f0:97:dc:0b:9b:0b:3b:05:e8:94:cf:6b:
                    fb:bb:1b:18:66:c2:7d:27:59:df:0c:13:6b:5f:f8:
                    35:6e:47:a1:62:8b:83:cd:08:ef:d4:a3:42:d2:fa:
                    00:6d:59:c1:d2:69:81:8d:0f:a7:1a:08:3c:3a:08:
                    00:62:a4:2f:1d:91:f6:6f:43:14:87:ba:cc:30:5e:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:CA:CE:31:64:78:BE:45:42:A8:45:66:C9:82:6E:72:70:FC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a154c5ec-1f2e-3ce4-858a-e6a99d4d9ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:64:28:a5:89:2c:2e:bf:0d:71:dd:1b:7e:77:1b:c2:34:1f:
         16:e1:a5:96:0f:e0:fd:89:7a:25:fc:c3:7e:4a:4e:da:4c:ae:
         8d:b4:ce:ac:60:34:a2:5f:d1:e8:89:23:4a:36:ea:a3:c1:09:
         35:df:1e:93:33:79:e7:03:4d:7f:58:c0:ff:ae:6a:ce:60:a0:
         8b:64:92:e2:71:06:8d:04:62:23:5c:78:c4:e0:81:f8:26:a8:
         d0:ef:45:6e:16:4a:47:c8:9c:f1:52:f3:79:f7:7a:01:9d:2e:
         97:23:c5:11:63:c9:60:1c:99:1c:9b:61:4f:a5:3e:d4:0e:20:
         14:ac:ec:61:27:ac:56:a6:48:0a:9b:6c:ae:0c:aa:d4:47:36:
         3f:bd:c7:91:e7:72:d2:34:10:d7:1c:ef:86:51:6a:d8:c1:f3:
         99:73:dd:ba:3e:bc:a4:82:07:43:fb:22:53:f1:03:75:00:d1:
         c1:14:dd:42:0e:81:3b:64:d0:04:7c:63:ec:38:ec:e1:c3:61:
         cc:98:3f:44:9b:0e:e0:7f:e4:43:ed:b8:ab:15:a7:cb:db:9d:
         83:87:1d:b3:97:3f:f6:70:1a:6f:fb:f1:57:65:68:0b:33:15:
         97:15:38:67:c2:e7:2e:05:59:a8:01:50:9d:58:6e:d8:94:40:
         db:97:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:05 2025 by rpki-client