Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1e4ec78-651e-3c5d-85d5-f528698bcb08.roa
File:                     a1e4ec78-651e-3c5d-85d5-f528698bcb08.roa (raw, json)
Hash identifier:          R2GSRWTnmNjCSzIWXZ7/XMNNmyE1yr7J7TqH0pcmrKA=
Subject key identifier:   C4:6F:FF:9F:33:D8:E8:FA:62:C3:25:FC:15:DB:34:DE:28:9B:58:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D219637E0DE4DC7D504B1F700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1e4ec78-651e-3c5d-85d5-f528698bcb08.roa
Signing time:             Sat 05 Mar 2022 05:00:00 +0000
ROA not before:           Sat 05 Mar 2022 05:00:00 +0000
ROA not after:            Sat 09 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.52.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:21:96:37:e0:de:4d:c7:d5:04:b1:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  5 05:00:00 2022 GMT
            Not After : Apr  9 04:00:00 2022 GMT
        Subject: CN=82f1dbcb-45b4-454c-9b60-4c4308d4d0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:b9:74:79:c4:ab:3c:95:7b:07:35:6e:c6:
                    1d:89:68:bd:a6:55:5b:0e:a2:45:f8:b2:7b:1e:89:
                    c9:3f:83:c7:c2:05:6f:ac:a1:b4:a9:fa:c0:2f:f5:
                    a2:7c:3d:35:b5:00:84:48:8e:0b:31:56:65:f1:43:
                    b6:cb:4c:70:30:fc:4c:6d:ed:37:74:a8:90:9d:ce:
                    54:72:b3:2b:a2:85:fa:d1:18:7a:48:e2:02:03:12:
                    04:83:c4:0e:44:0c:49:6f:4d:9d:a1:d4:2c:4f:a9:
                    70:60:77:5c:b0:c0:34:c3:e3:56:d1:a7:51:6f:90:
                    53:12:86:da:bf:d4:df:17:bc:f1:80:dc:e9:33:46:
                    5a:d5:63:48:dc:4a:94:cf:b9:70:a9:3c:15:cc:7e:
                    bf:2d:aa:58:91:93:51:60:c4:b6:a0:0d:fd:0d:ce:
                    1f:ad:48:95:80:88:22:ae:45:39:80:b4:2b:09:19:
                    d5:ed:ad:51:40:60:b3:ff:b7:12:ce:da:01:72:8d:
                    3d:5d:22:c2:09:af:b8:d8:df:1b:20:2f:8e:85:a0:
                    8f:f7:e3:d7:c8:c9:ff:b3:75:ed:5e:17:34:79:7d:
                    44:c2:bc:84:75:8a:e5:e9:ac:4e:bc:60:b5:38:0c:
                    2b:c5:69:99:30:3b:6e:71:46:37:01:6f:e6:c4:4b:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:FF:9F:33:D8:E8:FA:62:C3:25:FC:15:DB:34:DE:28:9B:58:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1e4ec78-651e-3c5d-85d5-f528698bcb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:02:b2:d0:61:be:6b:9b:bd:94:2f:c8:a6:c1:4d:7b:fb:59:
         46:3e:96:81:63:35:8f:e9:68:b8:02:26:88:29:52:85:ac:42:
         4c:69:d7:88:89:ed:0c:f0:e8:bc:13:51:9d:28:6d:21:43:3e:
         5d:05:9d:59:05:dd:7e:a1:4e:81:e9:10:97:03:98:cd:72:c7:
         b9:14:56:96:ef:f6:33:bd:e2:06:c5:c6:41:e3:c8:19:12:44:
         25:6e:58:91:32:26:43:22:6b:36:85:86:1d:25:f7:af:ef:0c:
         22:bb:82:e3:3a:b8:91:58:90:4b:93:9c:0b:85:76:9a:0b:4b:
         c5:68:72:1d:34:c1:5b:0b:4c:d8:b7:a9:70:c7:a0:11:42:cf:
         36:66:49:f2:1a:2d:4d:ee:4f:a3:77:51:45:5f:1c:33:6e:2e:
         5f:ef:59:a4:26:e0:cd:13:cb:99:67:32:1d:5d:e6:c5:a3:04:
         b8:6a:b0:4c:43:4b:85:ff:92:25:fd:9e:ce:e8:b9:3f:1a:62:
         5f:03:8c:87:7b:41:b3:8f:b6:21:f6:16:96:95:5d:b1:88:79:
         8c:ce:42:72:46:9e:91:43:fe:cc:54:e4:05:ca:4a:fe:d0:37:
         14:28:42:1d:5a:cc:3d:a8:79:d6:2b:0c:d7:6d:73:ee:f1:0f:
         f5:62:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:04 2025 by rpki-client