Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b14d75e8-a9ab-3c65-81c5-235dd773e012.roa
File:                     b14d75e8-a9ab-3c65-81c5-235dd773e012.roa (raw, json)
Hash identifier:          4U43z7orxDJ8hgicwcZhwJ+EfuFk9B/thAEg8JW+ldw=
Subject key identifier:   BF:A9:C2:65:2A:C5:6E:8D:6C:E6:4E:80:30:AB:BF:31:C0:23:30:69
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E05E5D7397D90D6BD2E36A500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b14d75e8-a9ab-3c65-81c5-235dd773e012.roa
Signing time:             Tue 24 May 2022 15:27:07 +0000
ROA not before:           Tue 24 May 2022 15:27:07 +0000
ROA not after:            Wed 29 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.118.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:05:e5:d7:39:7d:90:d6:bd:2e:36:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 24 15:27:07 2022 GMT
            Not After : Jun 29 04:00:00 2022 GMT
        Subject: CN=a288a354-8bf4-4097-abb8-a6611977c298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:8a:56:0d:3d:99:ed:f7:f8:59:88:d9:18:
                    81:cd:60:24:99:bc:55:e1:93:f4:1d:e9:b5:dc:2b:
                    19:e7:ad:81:37:59:0a:ae:5a:4f:c4:eb:16:c1:ef:
                    61:21:fa:17:f6:ac:b6:b4:48:48:97:d2:32:65:a6:
                    54:37:da:ec:11:a0:c5:43:1d:83:da:6a:19:a7:46:
                    d9:99:30:fa:3d:89:03:8e:a5:90:f0:cf:21:c7:01:
                    4f:b7:67:ef:4d:4d:26:b2:95:ac:9b:5d:6f:e8:1b:
                    b3:f9:22:95:f2:89:01:4e:0d:55:da:53:5f:65:cb:
                    54:7d:83:8a:7e:53:8b:70:0b:b1:ea:93:88:44:17:
                    db:0a:e3:5f:37:16:1b:66:8b:8e:9a:b4:a0:f1:ad:
                    14:06:7b:ca:7b:cb:9a:c8:be:4b:2e:dd:62:ea:b4:
                    71:9e:bb:db:d7:b4:0f:3d:d4:a3:81:fd:5b:c2:f8:
                    1a:17:a2:f1:44:47:cb:4c:c8:4c:08:10:e2:e5:5c:
                    9e:db:b3:0c:04:06:d0:b8:17:71:6c:90:e0:b7:10:
                    91:47:22:33:5c:3d:e8:de:90:08:9a:5b:07:d6:ce:
                    0c:4b:43:d4:61:a0:92:50:1f:4e:45:3d:9d:2d:9e:
                    24:1b:6e:40:03:6b:53:a0:3f:3d:64:d0:f1:7f:df:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A9:C2:65:2A:C5:6E:8D:6C:E6:4E:80:30:AB:BF:31:C0:23:30:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b14d75e8-a9ab-3c65-81c5-235dd773e012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:38:82:11:42:e7:6c:60:af:67:7f:62:f9:44:6f:0f:32:
         b4:6c:c3:fa:ab:48:6a:58:04:72:23:3b:3c:53:a2:76:6a:86:
         4c:6b:89:ee:80:33:6c:41:6e:eb:cd:81:3c:4f:02:ea:69:1d:
         99:c5:f9:bd:70:2f:9a:ac:35:14:e3:64:dd:e0:7d:13:91:d8:
         94:5f:a9:12:eb:30:b7:7a:f3:11:f9:ad:ed:c5:79:a9:c0:b9:
         58:fa:d7:85:2f:af:4e:e9:36:89:a7:ff:17:76:50:54:09:d5:
         a8:87:00:2e:8c:ca:c6:39:f0:41:a4:22:80:f3:a0:2c:3b:d6:
         61:3f:6f:8c:37:4e:ce:d4:a5:18:1f:3b:e3:77:4a:21:63:cd:
         e2:78:81:0b:e1:99:c6:48:55:57:08:0e:62:4d:80:8e:97:f7:
         de:8d:bc:64:b3:7c:8e:7b:84:57:fa:ce:32:f4:c2:22:4c:5d:
         89:6d:5c:f0:cd:75:2a:d5:99:be:5c:a1:41:52:da:ce:47:6b:
         a1:76:c6:87:d4:9b:a5:8a:a8:a5:ff:53:b3:14:64:97:80:15:
         07:dd:45:e8:da:3f:07:92:c1:3e:94:23:29:e4:42:5f:3e:ee:
         09:e6:94:33:03:41:76:99:23:18:3a:9b:fa:b8:94:31:e2:2e:
         06:80:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:37 2025 by rpki-client