Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8143cbd-ee97-39e6-9d66-6db22622a02b.roa
File:                     a8143cbd-ee97-39e6-9d66-6db22622a02b.roa (raw, json)
Hash identifier:          kUc6TPUMgMxfLoSZtOHc0hZ7JJWsib9o6uuGMeXcibA=
Subject key identifier:   1B:40:C2:E0:29:B1:7A:DF:16:2E:CF:BD:AC:3F:37:8F:70:F5:AE:10
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D64AD243BA6B43F0CEAB4A0F7
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8143cbd-ee97-39e6-9d66-6db22622a02b.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 03 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.185.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:64:ad:24:3b:a6:b4:3f:0c:ea:b4:a0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : May  3 04:00:00 2022 GMT
        Subject: CN=70409cc6-3053-4dcf-96b7-5d3b616edf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:a8:47:57:43:ba:ab:33:0c:23:07:cd:de:
                    f2:f7:b3:80:15:cc:f7:74:f5:97:d0:4b:ca:36:35:
                    24:04:de:64:74:8f:11:76:c2:ce:eb:eb:d9:5d:8b:
                    3d:a0:c1:10:58:52:de:34:58:0d:ff:d2:0c:6c:e3:
                    d9:1f:70:d5:b6:94:cc:75:77:a2:20:63:97:b0:7a:
                    39:3d:46:b9:81:1a:2d:05:e8:8a:58:aa:14:1e:85:
                    a4:c6:43:9f:1f:b0:90:86:78:ad:9e:3d:bf:51:48:
                    8c:fb:20:19:4e:08:27:73:e0:62:1d:17:0c:f1:42:
                    3d:96:bc:25:25:97:86:95:0d:93:e6:e6:db:8d:6d:
                    78:94:4b:05:af:6f:f8:f1:25:c7:59:fd:1f:6e:98:
                    d7:5c:88:d9:75:83:37:c9:39:60:0b:f6:d3:fb:3d:
                    0d:a8:66:4f:8a:44:c9:20:36:bb:8a:c9:f5:50:f6:
                    9f:cf:e8:95:a5:c0:c6:ce:6d:81:1a:83:89:7b:e5:
                    19:21:72:21:ff:89:6d:3d:8e:05:49:7e:8c:f8:ca:
                    3d:5c:40:7f:b0:f5:25:13:c4:79:b2:65:ac:af:4b:
                    7b:08:21:a7:a4:3d:4f:f2:13:f4:0d:59:5f:f2:17:
                    5d:ac:2a:b3:a9:1e:56:c6:40:35:a8:3e:3d:53:32:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:40:C2:E0:29:B1:7A:DF:16:2E:CF:BD:AC:3F:37:8F:70:F5:AE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8143cbd-ee97-39e6-9d66-6db22622a02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:83:f2:bb:af:c6:59:b6:2e:dd:f8:a8:5d:f3:51:36:53:
         73:dd:42:bd:6f:a9:df:4b:8a:be:e3:ef:f7:44:18:69:b5:4b:
         66:22:a3:1e:8a:c0:fc:38:40:7a:d4:49:62:8c:99:64:30:40:
         04:82:77:87:30:ad:83:78:08:19:4c:a6:5f:4f:95:3c:e6:eb:
         05:02:14:68:f4:a2:48:ca:4d:4b:7d:3e:fa:4a:f4:e5:fa:b8:
         bc:09:15:01:7a:00:28:50:20:35:01:a7:18:0c:14:57:5b:75:
         aa:f8:fd:22:c2:af:21:31:79:44:e6:01:3d:b0:14:c8:fd:49:
         dd:a4:4c:1d:70:3c:51:3a:74:27:79:27:87:fb:73:13:4a:de:
         c1:2f:1c:df:5a:3a:1c:7a:34:c5:7a:e9:ac:24:6f:db:35:62:
         3d:9f:ce:52:4b:b0:f6:ce:0b:11:42:d9:0a:a4:a5:ad:ea:e0:
         a3:87:79:4d:d7:4a:ef:e8:88:b2:7f:47:6b:50:83:22:e6:f0:
         bd:81:c5:0d:c4:c8:0f:2c:35:ca:5e:d8:af:9b:b4:82:f5:94:
         b8:bb:74:cc:54:d3:94:1e:f6:c4:9e:1b:38:40:e6:45:b0:35:
         49:e7:1f:99:24:ec:7a:ef:fd:1c:65:26:56:b8:06:84:13:0a:
         38:b4:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:20 2025 by rpki-client