Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d7ed3e-927e-3b0a-bafc-3b6b307101a2.roa
File:                     a7d7ed3e-927e-3b0a-bafc-3b6b307101a2.roa (raw, json)
Hash identifier:          ++LdznErVL7ZGlqLTBOVx93hWiYYK1kuPzZmm73GGQQ=
Subject key identifier:   6F:D2:A7:97:D2:67:49:4C:AD:52:4A:1A:38:EE:61:85:D1:42:91:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7DA83491159B391243F55F60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d7ed3e-927e-3b0a-bafc-3b6b307101a2.roa
Signing time:             Thu 07 Apr 2022 04:00:00 +0000
ROA not before:           Thu 07 Apr 2022 04:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:a8:34:91:15:9b:39:12:43:f5:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  7 04:00:00 2022 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=c523638f-2b8a-4dd6-8428-88d95d23f1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:e6:1e:7a:71:89:c2:a9:d5:cf:fd:e6:db:
                    1c:64:9d:68:24:12:34:d1:3b:cd:b7:20:bd:2e:79:
                    59:37:14:35:d3:e5:15:64:59:aa:e6:4d:92:8b:45:
                    8f:46:9c:69:49:a2:c1:fd:ad:f5:11:93:cb:e1:b3:
                    d0:17:6a:e7:b1:a5:88:e3:c2:10:8c:8d:79:db:1e:
                    7c:44:c0:fe:f0:d0:ca:d2:ad:27:ae:68:81:46:91:
                    78:bb:2c:79:0c:c6:07:97:48:27:34:c3:e5:a6:82:
                    14:2f:58:2b:fa:05:6c:90:e9:c2:05:b1:cf:54:63:
                    d9:30:0c:2e:94:6e:a8:0a:01:0c:d6:78:32:c2:d7:
                    e4:01:03:7e:49:62:ef:3a:39:26:de:60:3b:cd:8d:
                    1d:2c:45:1e:1a:4e:38:d6:c7:b3:62:c1:74:21:41:
                    0d:7a:20:8f:6f:f8:15:3d:84:6d:a0:ae:64:71:89:
                    53:48:8c:6b:3d:b1:60:17:1d:89:60:b2:6d:3d:b0:
                    c4:d3:00:e0:c0:11:f4:38:9e:a2:d3:ba:fd:99:53:
                    25:df:42:2c:e1:bc:f5:5f:c9:ab:18:94:c7:b1:c8:
                    2a:3e:ff:be:f4:21:9c:66:99:14:be:f7:7c:f0:44:
                    e4:65:66:a3:54:8d:00:49:ab:f0:b5:9f:d7:4b:85:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:A7:97:D2:67:49:4C:AD:52:4A:1A:38:EE:61:85:D1:42:91:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7d7ed3e-927e-3b0a-bafc-3b6b307101a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3d:54:d5:7c:22:cc:84:31:25:c6:cd:f7:0a:96:be:3d:b9:
         8a:42:9a:82:76:19:59:72:b1:4c:12:ff:1e:18:60:de:a3:52:
         ba:a3:53:7a:d3:8c:0b:46:fe:6d:78:ab:57:6f:01:8a:98:bb:
         ed:e5:83:e4:0d:e1:2e:cd:ea:7a:e7:07:62:03:36:27:31:e9:
         31:1e:43:79:81:30:8f:06:3f:9f:d5:33:6d:61:51:d3:1f:df:
         00:ae:a1:ea:82:9d:af:81:f3:1c:eb:d2:78:9a:2f:d2:22:0f:
         4c:38:48:71:c0:66:c6:e3:e8:85:f9:d2:94:84:dc:f5:a6:6e:
         b0:42:0b:7c:fd:13:a2:0e:19:5f:92:78:44:da:ad:6f:7c:26:
         01:01:47:ba:a2:37:62:e4:46:4f:f3:9b:d3:13:8b:99:b4:c7:
         91:56:4e:d9:42:d7:89:43:f6:19:89:07:9b:c2:14:86:55:08:
         c4:61:66:9d:fd:cf:8a:b8:56:e2:84:82:14:19:61:46:31:cc:
         44:82:aa:73:d6:56:22:7e:92:f3:00:1a:5b:a0:79:5b:ec:2e:
         65:59:26:b9:a6:a0:3e:e7:b0:12:97:97:0b:45:2b:75:cb:e4:
         35:2a:7e:0a:80:cd:30:4a:14:13:a6:55:f9:11:3e:c4:16:a9:
         99:c9:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:38 2025 by rpki-client