Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a21b61bd-846d-3c48-86ad-8c44b5b7ded8.roa
File:                     a21b61bd-846d-3c48-86ad-8c44b5b7ded8.roa (raw, json)
Hash identifier:          ij9z2yNme4Gm8WZrgw1fy+lB1+kLogLthuKhJKPXwKQ=
Subject key identifier:   60:94:EB:6C:61:F0:39:7B:64:AB:56:F2:4F:AC:23:F1:61:73:CD:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EDD96DCA526D2D8670BE3FC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a21b61bd-846d-3c48-86ad-8c44b5b7ded8.roa
Signing time:             Wed 10 Aug 2022 12:00:00 +0000
ROA not before:           Wed 10 Aug 2022 12:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:dd:96:dc:a5:26:d2:d8:67:0b:e3:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 10 12:00:00 2022 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=cdebebc0-d360-4c11-b113-b49486a1d624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:52:54:24:22:50:85:94:0d:e4:a9:8d:5a:
                    ad:0e:72:38:eb:ee:b4:0f:4f:1c:2d:9c:27:5b:01:
                    19:71:77:96:6b:b8:1c:89:87:66:f7:db:9a:34:49:
                    ce:52:98:d5:38:95:ac:11:60:fa:3f:15:e2:5e:af:
                    22:14:3c:f4:19:1c:78:1a:08:c0:46:ec:1b:c2:f0:
                    bc:d7:4d:a2:f5:8f:c0:4e:2d:63:7f:be:ed:79:db:
                    22:d8:f7:e6:bf:89:37:7a:57:9e:96:78:c0:0d:47:
                    b5:a2:c9:69:a7:b4:29:36:c9:4d:e5:4f:72:0c:fd:
                    eb:44:13:d5:d0:39:9a:ae:c9:f0:b6:fa:13:c0:3b:
                    ae:78:38:23:41:e2:f6:90:3d:04:90:30:13:8d:f0:
                    5d:01:c0:c1:7c:b7:d5:7a:00:2c:d3:65:a4:34:2f:
                    f8:3c:f0:b4:f6:08:0b:4e:63:84:4a:ea:bf:2e:a8:
                    11:1d:a8:7f:72:f3:7b:c9:c9:20:4a:1e:29:52:c6:
                    1b:7a:74:e0:8e:ff:d9:96:aa:83:04:b7:86:26:68:
                    58:79:45:f6:1e:8a:e0:fb:39:c1:63:28:33:5c:c2:
                    f2:f4:7e:c2:e3:7e:df:2a:3f:df:87:18:38:fd:44:
                    42:f4:49:25:b6:73:bd:fc:f7:09:32:05:45:d9:ff:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:EB:6C:61:F0:39:7B:64:AB:56:F2:4F:AC:23:F1:61:73:CD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a21b61bd-846d-3c48-86ad-8c44b5b7ded8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:8a:dc:14:10:e2:26:38:6b:74:aa:35:58:07:d3:d1:cb:
         e9:c4:00:d4:20:6f:0b:a0:b8:41:4d:68:9a:2f:a9:0a:1f:5c:
         1b:5c:18:a6:61:c3:02:2e:49:cd:90:22:d4:4d:88:e4:a5:64:
         0c:93:a4:0a:42:37:27:2d:c7:9d:b0:23:4b:74:61:94:19:36:
         13:ec:9a:07:64:89:02:70:fe:cf:f2:68:ce:36:ae:fb:c9:06:
         0c:8f:7c:99:0c:2c:fa:7b:45:54:48:a8:cb:30:7e:29:e3:e0:
         84:b7:4a:3c:cc:06:6a:68:67:b0:da:fc:fb:96:41:f9:94:06:
         b3:cf:0e:dd:ac:a3:fc:0e:2c:f7:d6:64:75:03:b1:f5:c1:e9:
         c9:6b:98:c2:a4:90:28:19:0e:88:9a:92:b5:bc:aa:87:ce:c5:
         ac:a7:eb:f8:44:37:b2:cf:2f:d9:12:40:e2:d5:f9:be:2f:47:
         a7:7d:7a:cd:19:b8:9a:5c:63:c3:9d:fa:57:c0:31:8c:8b:01:
         0c:5c:79:99:7a:d6:f0:8f:91:75:c4:c2:91:5f:69:c8:b9:47:
         39:be:4b:27:bb:b4:a6:9a:0e:bf:8d:55:cf:fd:28:7b:69:ff:
         42:72:f5:b0:82:ae:34:34:e0:5f:07:0c:2d:3b:79:6e:31:12:
         e2:c9:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:41 2025 by rpki-client