Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a694bd19-5526-37ee-932e-996ba0324df7.roa
File:                     a694bd19-5526-37ee-932e-996ba0324df7.roa (raw, json)
Hash identifier:          t25JiYqrsf3CwzxF/JBZ9KVvLNwHXQWJpX0yMSMNfIA=
Subject key identifier:   0E:5D:61:DF:85:59:18:54:70:61:AC:25:C8:B2:4B:5F:54:82:05:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CF41355E2218E081EC11E7980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a694bd19-5526-37ee-932e-996ba0324df7.roa
Signing time:             Wed 16 Feb 2022 05:00:00 +0000
ROA not before:           Wed 16 Feb 2022 05:00:00 +0000
ROA not after:            Wed 23 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.187.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f4:13:55:e2:21:8e:08:1e:c1:1e:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 16 05:00:00 2022 GMT
            Not After : Mar 23 04:00:00 2022 GMT
        Subject: CN=297585f0-8efd-4d92-97e4-3f3facca896c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:75:9d:5a:b4:a5:bb:57:e4:af:9a:35:35:
                    b7:7f:ea:36:ce:a0:31:c5:e6:4d:bb:5f:ae:ce:f8:
                    4e:9c:97:3c:0b:2e:41:91:95:22:3f:e2:ec:cf:9e:
                    a5:0f:46:67:d5:a8:12:90:a3:00:48:dd:12:b9:2b:
                    e1:32:95:5f:8f:1e:4a:a8:af:f9:e2:6f:ca:4b:34:
                    b2:67:dd:a0:2e:fa:e5:2b:03:c4:4d:ad:8f:e1:5d:
                    a2:42:60:83:de:30:9e:04:6a:52:cc:f8:ad:87:4a:
                    76:a4:c5:8b:e1:b9:ba:f4:3a:1a:67:b1:ce:8d:20:
                    2e:c4:c6:b1:18:37:40:92:a3:ad:c9:6f:35:e5:95:
                    b6:dd:07:42:5f:b4:df:6d:a7:b3:79:60:63:d2:fe:
                    ce:e8:da:a7:37:11:3f:00:c2:bb:ec:98:9a:26:59:
                    58:48:f0:6c:1d:3d:0a:55:56:7b:53:ad:a6:65:aa:
                    35:4f:c2:25:fb:74:75:e1:05:5e:16:4d:c5:9b:d6:
                    d6:27:0a:5b:23:c6:99:d1:bc:1f:b7:99:7d:30:83:
                    17:10:16:d3:03:be:b5:41:fe:d6:e3:1c:05:30:bc:
                    08:6d:81:53:f0:b8:44:0f:09:bf:ed:b0:68:e5:c6:
                    1d:67:5b:e5:91:94:9d:86:d5:e8:ce:82:44:65:48:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:61:DF:85:59:18:54:70:61:AC:25:C8:B2:4B:5F:54:82:05:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a694bd19-5526-37ee-932e-996ba0324df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.187.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:27:6a:b1:64:1f:64:7e:9c:9c:30:d0:2e:54:b6:bf:9c:
         0f:bd:a2:8b:32:7a:14:8b:02:d4:03:ac:18:3e:97:21:56:7b:
         f4:e0:e2:96:ae:1b:40:8d:f2:56:ef:d7:88:37:28:24:99:81:
         77:98:3d:fc:2b:65:6b:14:66:4f:a0:30:9e:fa:28:9e:41:4c:
         53:40:a9:6c:6d:8a:28:1f:ad:c5:c3:1c:df:81:ec:b6:e0:a5:
         46:70:bb:05:20:21:21:f0:33:c9:47:6e:4f:cc:64:2c:81:d1:
         70:b4:a9:42:19:28:b3:c9:10:a3:c7:b1:c6:7a:bc:2c:b3:65:
         2e:54:9e:37:24:77:ec:19:2f:35:60:03:66:2a:c0:2d:6e:90:
         55:43:3c:7e:6e:76:fd:63:65:36:05:ad:2a:37:5c:87:5f:58:
         74:86:97:67:e8:b9:42:8d:d2:58:7b:2e:a1:75:05:df:01:f0:
         eb:c7:31:93:33:42:e1:64:c4:ee:d9:6a:71:af:11:d8:07:c0:
         17:64:f7:a1:f1:17:fe:54:81:45:e3:a5:bd:f7:ea:2d:19:58:
         e9:90:03:7d:41:e1:c3:35:f7:72:32:e2:d4:0e:4b:27:ed:d9:
         1a:be:48:b1:ca:de:fd:4b:5b:5b:e7:6c:99:1e:d5:c8:e1:f8:
         30:d4:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:11 2025 by rpki-client