Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae641c83-34be-378b-99a3-211dd11be76c.roa
File:                     ae641c83-34be-378b-99a3-211dd11be76c.roa (raw, json)
Hash identifier:          gvVHudejmzESGAO4f0zT/p0Z70Umoob/n4tuV0CoaLU=
Subject key identifier:   89:95:C6:88:D6:B5:8C:96:12:E8:25:67:52:9C:24:75:74:B1:DD:15
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E337046024DDEE51E64DF6100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae641c83-34be-378b-99a3-211dd11be76c.roa
Signing time:             Fri 10 Jun 2022 15:33:07 +0000
ROA not before:           Fri 10 Jun 2022 15:33:07 +0000
ROA not after:            Sat 16 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.30.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:33:70:46:02:4d:de:e5:1e:64:df:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 10 15:33:07 2022 GMT
            Not After : Jul 16 04:00:00 2022 GMT
        Subject: CN=6e27e0c1-4a81-4d00-9237-ea80b37705b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:ed:b9:88:4b:0e:bd:f5:b6:bc:74:f8:6f:
                    da:5e:e9:ae:43:4d:14:d4:6a:dd:60:23:13:6e:9f:
                    6b:35:52:59:a7:e0:6e:f3:a4:d5:e3:0d:20:87:a7:
                    32:33:23:d2:e4:3e:0e:74:74:a0:a1:2f:06:b0:37:
                    66:a9:37:d3:06:3b:3e:13:77:84:9d:f0:d2:eb:67:
                    06:c1:45:0c:c5:6c:b5:c7:cc:41:c8:9e:6d:64:9d:
                    90:f5:f6:2c:31:f6:5f:32:78:60:df:60:57:a8:c5:
                    9e:b8:ed:c3:00:9b:05:18:30:84:c4:8e:26:d7:1f:
                    3a:4f:6a:c2:3b:79:e1:8f:fe:e2:6f:e3:64:8b:68:
                    46:c6:ac:4d:a4:bf:5f:a6:b4:df:36:e7:f9:28:bb:
                    c6:cd:98:bf:9f:a1:9e:e3:db:f3:49:76:90:1d:07:
                    51:6a:30:b0:51:a7:44:ca:79:9e:ac:e1:53:63:6f:
                    e5:67:0b:e2:17:7e:c8:83:2d:4f:aa:b3:35:c9:c2:
                    3c:2b:bd:6c:70:be:0f:f4:d4:b2:b5:65:62:f3:75:
                    d9:62:41:42:1c:c0:a0:d1:0d:f4:8b:d6:87:ed:c9:
                    8e:26:be:1e:29:cf:7a:f7:f5:a6:b2:d1:0b:68:b8:
                    c1:44:8b:36:03:d1:e0:c0:bf:ba:54:c5:b8:72:9b:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:95:C6:88:D6:B5:8C:96:12:E8:25:67:52:9C:24:75:74:B1:DD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae641c83-34be-378b-99a3-211dd11be76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:30:99:36:da:a6:25:0d:a9:78:49:58:d6:a1:cc:45:83:
         3e:b0:71:06:97:c0:bd:d5:46:47:2e:c9:c6:7d:d3:27:fb:a8:
         f0:4e:8b:21:dd:49:0b:20:bb:a8:31:29:7b:aa:2e:03:84:48:
         1d:e6:d7:8c:b5:9a:d0:63:a3:27:a3:1d:62:c0:ff:cf:bb:bc:
         5d:b6:aa:c1:a2:de:9d:89:17:8a:1b:39:2f:b2:c4:53:7e:02:
         e4:d0:d3:d4:9f:d0:1b:bd:35:46:41:aa:a8:21:99:01:e3:85:
         6f:71:c4:f4:62:12:6f:76:91:5e:ae:88:62:ab:42:b6:8c:61:
         4f:5e:88:c8:19:f2:de:71:8b:44:f0:82:03:f7:36:1b:05:e4:
         3a:2f:df:b7:27:8a:9a:c7:e8:14:29:bf:ff:cb:b7:74:de:53:
         b6:8f:9a:fd:d7:36:9b:26:b8:f2:3a:f9:fa:d4:78:f5:08:e5:
         af:31:e9:65:db:1c:bc:dc:70:b9:e4:5c:51:8c:f6:cf:3a:de:
         f9:0f:dd:8d:97:ce:61:9c:9b:1e:ee:ce:c2:28:68:36:e4:f1:
         15:52:89:37:18:6e:ad:57:5f:b0:cf:93:a8:28:36:c2:f7:6c:
         78:b9:01:72:f9:23:d0:09:bb:ab:92:c1:86:3d:54:cf:0d:d6:
         f2:76:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:38 2025 by rpki-client