Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aada3f57-37b2-3e4c-adfd-3561e944bdc4.roa
File:                     aada3f57-37b2-3e4c-adfd-3561e944bdc4.roa (raw, json)
Hash identifier:          3Xu3ndGHsIN/rZN/7U1+ODPWuH64gEaH0UzTkeOXCrA=
Subject key identifier:   9E:C3:CB:C5:70:79:4F:C5:7E:CA:AA:FF:86:06:AF:74:63:61:22:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD1F3E4067D0EC03C1C4C9C90
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aada3f57-37b2-3e4c-adfd-3561e944bdc4.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:f3:e4:06:7d:0e:c0:3c:1c:4c:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=ee3d65e1-4dfa-4ec6-b0b6-dcf1b1e45c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:bd:83:1b:28:87:28:55:91:ed:5a:06:db:
                    56:9b:93:50:82:8b:c0:bf:0a:22:18:5e:10:9a:06:
                    02:2a:4b:b5:cc:f4:c9:cd:75:26:7e:1b:3e:53:0f:
                    d0:7c:d4:71:68:29:e5:2e:a6:56:c5:5f:03:04:72:
                    98:db:5c:1e:68:90:bd:86:77:be:e9:9e:90:a8:91:
                    88:48:5a:5b:85:8a:73:ef:ac:2f:21:f8:37:8f:46:
                    f8:a5:7b:fb:39:7e:e7:d9:9a:d4:da:a8:b1:da:90:
                    ae:a1:60:ac:dd:91:1f:e3:44:6e:b0:ac:5b:7b:68:
                    88:96:89:eb:59:61:b1:63:f7:d8:b1:85:b8:d8:ce:
                    72:bc:9e:1f:a3:b2:b1:1c:e3:fe:44:73:45:8e:4f:
                    67:bd:1f:15:8d:57:4e:16:09:fd:24:17:8b:a7:bf:
                    91:e3:15:a7:c6:c2:71:31:ac:51:a3:92:28:31:a7:
                    bc:48:d2:64:af:50:8d:bf:c6:43:4c:ab:df:82:bb:
                    83:c9:4a:98:96:9d:4f:93:37:a9:19:04:d8:ac:38:
                    be:3c:9b:61:39:56:4c:09:aa:93:64:bd:c6:24:70:
                    b1:ef:97:d2:ff:6e:ed:05:de:95:3d:7a:83:3d:33:
                    6a:95:43:34:a9:96:df:dd:a2:34:37:4a:af:97:4d:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C3:CB:C5:70:79:4F:C5:7E:CA:AA:FF:86:06:AF:74:63:61:22:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aada3f57-37b2-3e4c-adfd-3561e944bdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:98:15:fc:3e:4c:0c:d7:52:64:d9:ac:3f:d0:5b:ab:c3:
         04:3a:61:a9:02:50:6d:f9:4d:c5:93:3c:e8:1e:0e:b4:8f:68:
         4b:5a:30:c8:d9:71:27:9d:c0:cf:00:5b:e7:1b:24:c3:35:16:
         25:8a:e4:43:70:0c:40:c4:58:11:ad:76:a5:d3:5d:09:6c:bc:
         98:40:c0:30:8f:81:ca:4d:ef:dd:5f:1c:f8:04:f1:8a:04:f1:
         26:e9:f1:8e:17:97:64:55:7e:c4:bc:e1:34:cd:ae:ea:bb:01:
         bf:11:f0:0a:55:22:ec:f7:00:40:bf:4c:e9:eb:6d:de:a2:90:
         eb:91:21:33:aa:90:62:d4:76:f1:9f:9b:50:94:a4:61:03:ec:
         06:90:fe:79:54:49:78:64:89:34:50:b5:b5:a4:d0:0d:b0:24:
         66:6c:2d:f4:28:13:a5:f0:89:0a:31:52:ec:30:ba:40:7c:c8:
         68:b4:a7:1c:d6:97:30:74:27:99:3a:45:22:8a:a4:38:d4:d1:
         bb:db:dd:97:22:62:8f:e7:23:b0:19:24:8e:09:29:a7:cd:bd:
         7c:b9:69:58:46:28:15:8e:71:f7:18:9f:d1:be:51:a2:af:6e:
         b3:ee:bb:69:5a:6a:51:6f:88:e9:ce:11:28:94:29:92:d3:04:
         05:84:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:04 2025 by rpki-client