Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b47eb89e-38e7-3b93-919e-9f94873ff416.roa
File:                     b47eb89e-38e7-3b93-919e-9f94873ff416.roa (raw, json)
Hash identifier:          6k7cyjxqzec4uAA9uACaqZPKthih1ndaqVZIRoC+ayc=
Subject key identifier:   06:18:27:4A:E8:26:03:81:72:DF:5C:F4:C8:40:4C:EB:41:4F:67:6C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D48B3945D91C7DCED33850200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b47eb89e-38e7-3b93-919e-9f94873ff416.roa
Signing time:             Sat 19 Mar 2022 04:00:00 +0000
ROA not before:           Sat 19 Mar 2022 04:00:00 +0000
ROA not after:            Sat 23 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:48:b3:94:5d:91:c7:dc:ed:33:85:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 19 04:00:00 2022 GMT
            Not After : Apr 23 04:00:00 2022 GMT
        Subject: CN=e65d6ecc-e0d7-437e-98a9-51ff9c43a182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:31:46:c0:03:0f:fe:3a:3a:ca:24:05:8b:
                    91:e9:cf:ee:3d:78:02:10:2c:e5:29:90:4b:16:9d:
                    ab:55:5c:30:9c:95:ae:ff:e3:00:70:78:02:82:d7:
                    b1:e0:61:66:f9:f9:88:ad:fd:81:07:af:72:bd:95:
                    a0:9b:61:f1:d0:5f:c7:81:c9:e9:2e:af:47:f8:6a:
                    fa:05:1a:d9:17:12:8a:4c:f2:d9:10:91:0e:34:07:
                    e3:2b:ab:2a:e9:be:0d:59:b1:7f:3b:4b:62:d1:dc:
                    b4:72:fe:aa:57:a7:f6:fb:5e:66:d3:c7:f0:d1:c4:
                    09:dd:1d:b3:a2:5e:55:b7:d3:39:16:bc:6d:90:3a:
                    54:a5:52:df:b9:e9:e1:c0:4f:26:c4:7d:6d:09:d2:
                    41:13:5c:7e:6e:31:df:82:34:0e:73:5b:8e:e0:24:
                    a2:8b:11:74:b5:6b:71:8f:a7:de:3a:c2:b7:bb:5b:
                    e6:5b:9d:94:96:60:a0:29:8c:5f:50:53:ac:ea:63:
                    82:33:87:4e:e7:4f:6e:7b:d3:72:41:46:db:be:22:
                    30:5d:52:6c:b7:50:aa:2b:fe:96:c3:b7:c9:44:92:
                    77:1c:95:03:46:dc:56:d9:30:84:39:cf:7b:6a:3e:
                    ba:a6:21:be:9a:a5:c2:49:c7:6c:2d:67:ed:66:ef:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:18:27:4A:E8:26:03:81:72:DF:5C:F4:C8:40:4C:EB:41:4F:67:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b47eb89e-38e7-3b93-919e-9f94873ff416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:f5:75:a8:42:31:e2:6b:17:78:ff:86:dd:a9:3d:20:83:
         80:f2:19:d2:e6:04:db:ca:46:3f:69:34:bf:db:c3:5c:52:86:
         62:f3:62:9a:75:f7:26:84:ca:59:09:66:3b:ed:fb:00:a6:e5:
         1f:83:c9:47:5a:66:e0:1c:99:dd:10:9b:27:ba:2c:a7:5a:3f:
         3c:17:c0:53:76:2c:12:81:ef:95:24:22:f4:e6:20:15:23:6b:
         71:b3:dd:e5:ff:cc:b6:17:50:9e:1b:27:6b:35:c0:35:98:ef:
         8c:bc:f3:49:cf:b4:0e:d8:4a:ae:97:83:4c:ee:47:a9:ec:16:
         4c:b7:1f:c0:84:22:c2:dd:ff:76:f4:27:08:21:62:e5:61:20:
         84:57:d2:bf:90:c8:58:bf:51:bf:79:f9:83:10:50:2d:22:ec:
         0f:96:82:9c:29:d1:c1:56:d1:39:60:24:f5:41:ef:94:02:cb:
         fe:ac:ef:74:ec:bf:20:2f:d1:fb:80:d2:d2:8b:67:99:ce:8f:
         91:ca:a4:0b:dd:f6:b5:eb:62:e1:c7:61:1b:e6:a4:a8:48:7f:
         6e:1f:d3:98:0b:b3:96:53:3a:12:2d:ed:3b:57:02:92:ac:6c:
         ab:2b:c6:10:08:d3:24:b6:95:07:59:65:a9:0e:c5:4a:d6:01:
         8a:45:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:48 2025 by rpki-client