Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3bc73b2-9a41-329e-8a91-2e05f5b4fded.roa
File:                     b3bc73b2-9a41-329e-8a91-2e05f5b4fded.roa (raw, json)
Hash identifier:          yrLjVAiwTzk2PX/dErUjGApOwWXWJRoo9eDFwDIxFmo=
Subject key identifier:   4B:87:CA:7F:2E:F2:6C:29:B3:AE:EA:07:75:27:D4:A1:B3:DA:1A:BE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E7B26B0F5DAE88936265A6300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3bc73b2-9a41-329e-8a91-2e05f5b4fded.roa
Signing time:             Wed 06 Jul 2022 15:03:07 +0000
ROA not before:           Wed 06 Jul 2022 15:03:07 +0000
ROA not after:            Wed 10 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.146.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7b:26:b0:f5:da:e8:89:36:26:5a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  6 15:03:07 2022 GMT
            Not After : Aug 10 04:00:00 2022 GMT
        Subject: CN=1ab17d86-3855-455b-8a23-4b69d793a2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:b5:83:05:b2:34:4b:8a:8a:c1:76:f5:35:
                    31:30:20:93:2a:12:c3:62:f0:b9:ff:5f:93:ca:3c:
                    7c:60:70:c1:d7:36:04:31:0f:2c:dc:1e:5e:5a:d6:
                    32:61:ff:9c:39:09:cd:ee:c5:d4:a2:09:f4:cd:4f:
                    8e:ab:3c:f4:19:6f:92:eb:04:10:c2:bb:da:04:83:
                    6c:80:41:78:93:00:c7:5a:dd:88:fe:ae:e4:09:a9:
                    94:b1:e3:16:35:e4:25:c2:b4:4f:a8:c1:0a:6f:e2:
                    31:96:f0:39:11:07:a1:ea:55:a0:ee:80:c6:35:dd:
                    ed:a4:38:08:04:62:50:da:5d:13:00:95:c7:28:20:
                    2f:a7:2c:c9:bc:eb:4a:7d:43:35:4f:09:88:00:e0:
                    65:e8:ae:57:12:3e:09:2d:b2:ae:a0:bc:a0:8b:a4:
                    4c:ad:ae:df:d4:2a:b9:7d:62:78:c9:40:bf:14:d0:
                    59:de:92:0f:0a:b1:f6:e9:58:f3:58:b0:6f:67:fc:
                    3a:16:db:61:c7:b9:1d:55:ec:5e:16:8f:a6:77:26:
                    88:90:0d:15:8b:06:2d:fa:98:a4:4b:01:10:68:4c:
                    26:d1:98:24:a8:87:cb:fb:7f:a1:89:33:df:8c:0d:
                    ab:23:fe:ac:56:35:a4:17:c1:2d:0c:36:47:af:5a:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:87:CA:7F:2E:F2:6C:29:B3:AE:EA:07:75:27:D4:A1:B3:DA:1A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3bc73b2-9a41-329e-8a91-2e05f5b4fded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:4a:e5:f4:c5:02:a6:32:ec:98:4a:34:dd:90:d9:2e:a5:
         ef:55:4e:6d:d2:ab:72:65:3a:94:05:42:f2:c4:45:4b:fe:65:
         07:ab:55:f1:56:25:4f:5d:5b:aa:23:03:7b:c2:9c:f1:2b:b3:
         76:ed:9f:7a:7d:d6:67:8c:f5:f8:6c:e9:ee:db:b8:9b:89:a9:
         c5:39:a0:e3:13:75:21:c9:1f:72:0a:84:5a:c0:0c:c3:82:4a:
         b2:2e:64:1b:75:b9:c9:73:a4:34:70:68:ca:81:10:35:dc:71:
         b9:33:7e:f4:26:f3:1c:bc:c8:2e:69:22:18:8f:7e:c9:81:42:
         67:e5:f9:d9:e4:ba:4e:86:22:2f:19:f0:7a:07:02:41:ae:87:
         fe:d3:a9:dd:26:a3:6b:13:81:f5:9a:d1:7e:d2:a7:ad:35:b4:
         4e:2e:30:09:d0:b0:1e:de:29:58:4a:65:b5:32:fc:bf:5c:aa:
         f1:f4:d3:33:0a:6f:b4:67:7e:68:de:12:3e:da:0b:94:d0:58:
         23:d2:15:aa:60:56:61:53:be:33:64:47:04:f1:37:8c:7f:ae:
         b7:34:ec:94:35:30:34:ea:71:92:bd:84:6a:7b:38:08:52:0e:
         9f:27:81:60:74:aa:f3:f6:f9:09:5b:d4:d8:09:87:12:50:5b:
         45:a7:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:53:56 2025 by rpki-client