Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5938586-7046-3998-895a-6e6d11468725.roa
File:                     b5938586-7046-3998-895a-6e6d11468725.roa (raw, json)
Hash identifier:          R9kCh41wQK2vAvWbfxqG+ootJgeEBNPAH2Wx/YgmlCE=
Subject key identifier:   26:BB:6C:8B:13:65:15:F4:E8:E4:4D:E7:44:4C:24:BC:0B:64:AE:D7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7799C03CD93B733C969A8F30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5938586-7046-3998-895a-6e6d11468725.roa
Signing time:             Tue 04 Oct 2022 12:00:00 +0000
ROA not before:           Tue 04 Oct 2022 12:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        137.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:77:99:c0:3c:d9:3b:73:3c:96:9a:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  4 12:00:00 2022 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=f54f6fcd-ef59-440b-82ed-08a37d6a1e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f9:1c:a6:a2:43:bb:94:a2:f9:c0:ac:d6:08:
                    93:d4:25:9c:71:fb:86:01:86:31:9e:63:dc:68:b1:
                    25:82:18:9f:2f:0a:40:e6:cc:39:81:b5:28:cf:89:
                    be:77:78:11:04:bf:8a:e7:f0:cb:2e:c0:35:8e:a5:
                    a9:72:10:f9:21:65:d5:4f:7a:10:62:fb:83:39:9e:
                    09:3f:5e:bf:88:10:f3:fb:e9:9f:a5:05:6a:78:a2:
                    7e:07:bb:ea:de:ee:b2:d9:e8:c3:8c:f7:cb:ae:80:
                    79:d9:e0:f5:1a:f2:aa:e3:94:04:f2:fe:27:7a:b3:
                    25:fe:93:df:33:d6:e3:4d:a5:26:cc:2c:5a:3b:8e:
                    43:5e:bf:7c:09:d8:62:0e:a6:c8:97:e0:2c:e0:aa:
                    56:06:08:ca:c2:7c:fc:38:cf:29:00:dc:ea:78:86:
                    97:b2:e9:8b:43:b2:2a:16:b7:3e:2f:8d:4f:9d:11:
                    e8:b2:6d:d7:67:2a:06:dd:c1:e9:3d:da:a7:e8:09:
                    1d:84:05:55:21:7c:0d:cc:06:07:71:61:07:f2:1d:
                    c4:75:f1:95:55:1b:ee:ed:0a:ff:e8:9f:6a:2d:74:
                    a4:a5:9c:bc:d1:fe:4e:ff:fe:81:5f:db:a8:f3:e2:
                    ed:fc:cc:db:1c:b2:9f:1a:72:86:91:1a:de:6b:68:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:6C:8B:13:65:15:F4:E8:E4:4D:E7:44:4C:24:BC:0B:64:AE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5938586-7046-3998-895a-6e6d11468725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:df:de:a6:22:1e:b7:72:cc:2f:25:b7:b9:15:73:36:d4:
         9b:d1:5a:3f:d0:4c:b8:23:fc:c5:17:ac:6d:af:46:4b:a2:3c:
         e5:55:1e:c3:6f:07:49:4a:75:a0:b8:08:ac:c5:50:57:ef:e9:
         32:06:b5:15:d4:0e:bd:88:74:50:86:59:96:4b:40:d0:ce:84:
         65:78:c0:a4:96:4c:8e:d1:ed:46:af:03:32:40:77:4b:83:be:
         1c:18:8d:2e:43:2d:3f:70:35:8a:31:03:d3:a1:db:1e:4f:87:
         de:ec:eb:52:c7:82:ac:21:a0:cc:a8:ce:10:ed:70:d0:dc:08:
         95:85:67:e0:9d:81:fb:46:5d:59:f8:69:8d:0f:43:14:55:91:
         7d:9f:a2:25:1c:2f:01:74:7d:4a:2e:28:40:db:c6:84:b7:dd:
         d6:48:49:e4:37:17:cb:6a:e4:cc:8c:98:95:1b:0d:c3:67:05:
         ee:f9:fb:9b:88:29:fc:02:b0:71:ff:bc:78:a8:eb:57:66:2a:
         60:3e:1c:e0:2a:8f:3d:55:c8:34:ea:62:d7:1d:4a:27:e4:30:
         0b:17:9f:31:9c:9f:f1:1e:85:49:43:0f:66:bd:79:8f:7c:17:
         eb:33:48:8b:e4:a2:eb:93:64:a7:ff:7d:86:02:f1:45:87:43:
         70:ff:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:04 2025 by rpki-client