Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c95acb-2b62-3977-b254-e91de8127fd2.roa
File:                     a6c95acb-2b62-3977-b254-e91de8127fd2.roa (raw, json)
Hash identifier:          j6mzLbDbBS30R8pgrcITLsLlN1+r12Rs6fGALf4yPfk=
Subject key identifier:   AA:76:52:83:16:17:A6:D7:22:E3:68:42:52:F8:21:3B:77:74:0B:38
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F57077D6B195B50BB5B953180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c95acb-2b62-3977-b254-e91de8127fd2.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.108.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:07:7d:6b:19:5b:50:bb:5b:95:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=26c0b579-5d82-45c7-b29f-2fefc3890963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:08:65:d1:fa:81:10:16:63:53:41:0a:b7:
                    02:79:be:56:49:9d:0d:6a:05:28:62:52:ef:83:f4:
                    59:49:46:a8:80:37:90:e0:fd:c6:ba:1c:40:f9:38:
                    ac:aa:82:3e:e4:b2:ff:49:c3:db:49:9a:d6:eb:ac:
                    bb:4c:5c:03:25:0e:f2:a2:8b:bb:87:d1:07:08:aa:
                    50:1a:bf:e2:fa:2c:00:23:ec:34:2d:f3:71:b7:7b:
                    e8:0a:8b:37:c2:f0:fc:48:64:f1:24:86:03:36:fa:
                    77:6b:51:55:63:7d:b7:0a:ff:07:e3:3a:17:d3:22:
                    08:67:09:80:f8:f0:01:91:b6:db:61:5e:68:47:29:
                    5d:d9:99:8f:86:8a:7a:bc:35:59:7a:b3:4c:80:d1:
                    f0:7f:7a:80:7f:3e:b5:1c:33:38:00:eb:de:d0:ba:
                    dd:9f:f1:d5:fc:25:2c:12:c9:48:8a:53:4e:48:e4:
                    ab:dd:76:b1:bb:eb:05:34:6d:bd:37:f7:7a:db:76:
                    33:64:48:35:c3:7a:04:98:00:9f:20:64:27:7e:43:
                    a1:7b:6c:00:4d:9e:c1:06:bf:04:58:a9:92:4a:f6:
                    2e:5f:8e:32:80:e3:9a:63:7f:de:e0:eb:3d:ac:2d:
                    f3:d0:d5:cb:c6:26:3a:96:e8:b1:71:b9:51:1e:d7:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:76:52:83:16:17:A6:D7:22:E3:68:42:52:F8:21:3B:77:74:0B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6c95acb-2b62-3977-b254-e91de8127fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:41:4a:18:a4:13:3d:c9:4d:f1:43:d9:79:8d:07:fb:4d:
         1d:ab:0b:ca:08:b4:d5:12:c7:d4:9a:75:f5:1b:66:49:fb:f1:
         e7:67:5d:20:61:c0:1e:85:de:ff:95:2a:9d:5b:61:56:96:25:
         d4:f1:32:fc:48:ba:73:c2:89:e2:1e:5b:1f:8e:0a:b7:6e:7d:
         3f:f6:fe:0e:78:37:99:ab:b1:76:d3:9a:34:44:bf:10:f7:a2:
         5d:db:70:2e:c1:37:a8:8f:91:5d:b4:91:81:67:69:e8:18:76:
         41:e3:18:7c:ee:5c:46:0d:a6:ec:d6:8f:f8:eb:47:a3:48:05:
         43:fe:02:df:a5:38:4f:da:2e:10:89:3e:81:4b:ec:47:45:23:
         51:41:58:76:e4:c0:6f:06:c5:5d:e2:75:dd:b3:ad:69:2a:d1:
         c6:e3:1e:30:74:d8:2e:01:ec:bb:d8:37:75:e9:9e:9d:5f:0e:
         88:8a:ef:a5:98:57:c8:b1:98:be:b1:e3:39:0a:d2:7e:a0:4b:
         e4:9d:72:ec:dd:22:78:28:71:ab:f2:09:25:c8:b2:98:b6:52:
         79:d1:f9:56:62:99:e1:f2:d2:a4:83:c6:1e:9f:c2:1c:a0:17:
         6e:5b:64:0a:86:26:c7:88:38:e5:51:49:36:77:13:a2:3c:da:
         60:df:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:26 2025 by rpki-client