Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4b04723-17b5-3378-9ed1-9c3e36030ec5.roa
File:                     b4b04723-17b5-3378-9ed1-9c3e36030ec5.roa (raw, json)
Hash identifier:          5GGVzioz75oS+MGsJgwGOkYmYoxVAa7BFuXL4A/pZI0=
Subject key identifier:   9A:31:A7:A8:EA:FC:AF:C4:6B:38:E3:8F:85:49:18:CD:01:CA:04:01
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA5A24C0B01E90B6A4276FBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4b04723-17b5-3378-9ed1-9c3e36030ec5.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        50.16.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:a2:4c:0b:01:e9:0b:6a:42:76:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=d1d5bd1c-74a7-4882-a5d1-5c62e3f511e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:46:f0:a5:d2:38:cd:ca:65:e3:36:c2:bb:
                    5c:06:95:15:f7:06:c7:17:cf:36:8a:b9:23:38:12:
                    f8:1f:6e:2b:1c:28:ec:44:53:9b:76:cb:33:f7:5e:
                    a5:11:c9:18:46:dc:9a:f3:fe:df:19:1b:63:a0:6a:
                    a4:2b:5f:3b:14:6b:fe:a1:ab:3e:ed:b8:5f:c7:dc:
                    9d:e2:d1:10:97:9e:25:e6:cb:09:fd:cf:db:53:c9:
                    ea:ad:2f:3f:19:b7:87:10:35:5c:cb:97:9a:36:4d:
                    a3:66:cb:90:b0:f1:aa:80:33:ec:84:3e:1d:ae:cb:
                    18:0c:e7:89:e2:c3:3f:f1:c8:24:23:33:bf:51:cc:
                    c8:38:dc:94:5f:01:c5:c8:fe:1c:2d:cf:94:46:8e:
                    12:39:24:9c:22:fe:da:aa:c7:bd:4b:cb:3b:10:97:
                    34:dc:b9:4a:14:3e:fd:dc:17:f9:e4:be:ae:8f:69:
                    11:ad:92:98:42:3a:a0:cf:89:30:71:06:b9:61:31:
                    ab:e7:54:49:02:fa:3f:0f:94:a8:04:20:f7:dc:d9:
                    b3:e7:c1:59:e9:5a:39:32:03:b9:2e:f0:06:82:38:
                    f0:68:b0:99:7a:b6:91:93:b3:a8:53:e7:67:f7:96:
                    c9:26:9c:af:07:6b:ee:46:cb:19:b0:e1:6f:9d:10:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:A7:A8:EA:FC:AF:C4:6B:38:E3:8F:85:49:18:CD:01:CA:04:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4b04723-17b5-3378-9ed1-9c3e36030ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.16.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:0a:ef:0a:ef:f8:c0:51:db:cb:a6:66:0e:20:50:29:71:
         dc:b5:61:39:eb:f9:19:26:e2:e2:a3:d6:ca:fc:dc:02:40:52:
         d1:ac:c6:b0:c1:37:1c:82:33:19:d8:96:81:09:4c:b4:55:15:
         7b:22:ca:85:14:db:82:73:0a:b7:f2:6a:6f:e8:fd:40:aa:ed:
         62:03:88:a8:b0:a0:16:b4:be:c1:49:d3:0a:26:ef:49:b1:dd:
         16:b0:06:79:af:bc:16:71:54:25:5f:4e:bd:7f:01:56:29:77:
         b9:f0:48:87:94:59:a5:a1:96:7c:10:09:c4:6d:f3:fa:bf:c9:
         45:dd:a8:46:45:23:23:02:36:9f:b4:22:fb:08:0c:43:76:3d:
         04:c4:e9:f0:02:15:7f:cb:8c:fb:b8:5c:ff:3f:26:02:67:cd:
         15:05:6b:5f:79:bf:81:73:f3:ea:98:dc:72:6d:1d:a3:77:34:
         62:d5:6e:88:e0:58:e9:95:45:03:d0:bb:09:ea:3a:e2:e8:ef:
         9e:34:7c:79:03:3d:75:92:3a:15:3d:7d:3a:78:ac:5c:6d:7c:
         b7:c3:e7:7d:f6:10:45:ef:50:1d:24:a9:d9:b1:94:58:e1:c0:
         6f:79:64:c2:60:30:8a:9a:69:c6:25:bd:2c:af:ef:c1:cc:97:
         45:52:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:48 2025 by rpki-client