Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb83f6b-55c2-394d-9077-14552cf6d7e3.roa
File:                     abb83f6b-55c2-394d-9077-14552cf6d7e3.roa (raw, json)
Hash identifier:          QsRomo8rL600wI39ncicuUissNxiDPMVA5usT72R6Xc=
Subject key identifier:   A0:E0:8C:B7:A7:38:A0:FF:CE:FB:7C:8F:7D:A6:93:80:A7:46:37:8A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC5D36DE62DD3D74B54D2BB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb83f6b-55c2-394d-9077-14552cf6d7e3.roa
Signing time:             Tue 01 Nov 2022 12:00:00 +0000
ROA not before:           Tue 01 Nov 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        137.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c5:d3:6d:e6:2d:d3:d7:4b:54:d2:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  1 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=1caebc52-acea-4ae9-be37-fce1d8c610d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:49:da:5a:9b:61:e4:77:a8:c8:6f:63:bc:80:
                    e3:8b:30:f3:24:44:c6:c8:15:3c:40:31:f3:29:54:
                    a1:37:9c:b9:1e:0a:48:e5:56:bb:de:1a:4f:49:fb:
                    c7:a8:8a:36:77:6b:05:3a:b6:33:3c:32:3d:3e:09:
                    06:34:e4:7c:b6:89:91:e1:c0:e3:3b:30:ff:b7:3b:
                    94:4f:c6:a7:50:1f:a6:3d:cb:df:1a:6b:e9:8c:3c:
                    c2:e1:be:f3:f3:e3:36:60:01:a0:9a:fb:62:64:82:
                    cc:da:f6:2d:0b:0f:e0:87:31:0d:4a:88:0b:97:66:
                    e3:a3:47:f2:44:5e:c6:50:a3:45:06:fe:6f:08:2f:
                    ef:ed:5f:17:b9:ae:c2:1f:a4:19:61:e8:88:db:95:
                    e6:42:b3:03:06:d4:07:c9:6a:45:c6:1e:ed:88:4a:
                    3a:45:93:7e:33:f4:85:b9:76:11:13:bd:68:6c:da:
                    29:46:48:be:71:e0:8f:9b:99:0e:9e:0f:87:dc:fe:
                    be:b8:ad:c0:2b:58:73:97:be:c6:ad:70:72:b8:2e:
                    ad:6f:be:ec:72:bf:62:ce:6a:52:5b:6e:d7:97:72:
                    a7:8d:13:cf:78:2f:c6:52:e4:ae:98:d6:23:4a:1a:
                    62:1f:2d:e4:8c:dc:bb:2c:e1:76:0f:b5:81:37:d4:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E0:8C:B7:A7:38:A0:FF:CE:FB:7C:8F:7D:A6:93:80:A7:46:37:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/abb83f6b-55c2-394d-9077-14552cf6d7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:74:8a:ce:fa:8f:02:38:41:48:08:09:15:af:ac:9a:93:c1:
         39:08:80:b4:d6:70:ad:8c:69:25:7d:bc:1e:db:cf:3d:bc:74:
         25:37:48:46:fe:88:68:37:3b:5d:d4:4d:d6:15:24:67:91:3f:
         e4:a1:01:18:68:7e:01:57:37:8e:2f:0a:2f:86:3f:ee:a5:c3:
         f2:ad:6f:82:92:3b:b1:dd:c3:9f:fc:24:b7:d4:10:2f:dd:0f:
         5f:56:9e:f7:c5:dc:e6:65:d1:3e:18:b0:51:7c:bb:b7:bf:5f:
         cd:bc:a0:fc:5e:8b:5d:d2:cc:4d:89:cb:58:2d:59:ac:0a:e9:
         b9:53:c8:d9:59:aa:24:1f:de:33:5c:77:4c:78:77:62:81:96:
         6a:d8:e2:21:ca:25:ae:a2:32:2e:b5:a4:ce:cc:ce:ed:5c:23:
         34:90:9a:db:4b:a9:eb:fd:72:db:a1:2a:43:ef:65:ac:43:ad:
         d7:ac:24:ac:a7:48:db:bf:d2:c9:89:d4:84:6e:6c:62:e3:15:
         31:3d:a5:83:15:05:bd:33:60:7f:79:97:b9:27:52:88:84:8a:
         40:f9:62:c1:8a:50:96:c7:3a:77:f7:45:2e:70:97:5a:71:be:
         a9:93:95:aa:97:7c:dc:01:e2:7e:43:1c:3f:f1:c2:6a:7d:15:
         07:4a:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:22:11 2025 by rpki-client