Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b6d18280-278e-3a56-81ad-0314b5ff978e.roa
File:                     b6d18280-278e-3a56-81ad-0314b5ff978e.roa (raw, json)
Hash identifier:          Az2zfzv3jXmBgnHASATWE2JMgf1rCYuB/IWfLa7IaQU=
Subject key identifier:   DC:74:EB:F8:05:2C:62:61:CA:90:CA:E6:72:A6:1B:77:82:32:EB:16
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DFB755A47DC7FC2337F8D6220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b6d18280-278e-3a56-81ad-0314b5ff978e.roa
Signing time:             Sat 21 May 2022 12:00:00 +0000
ROA not before:           Sat 21 May 2022 12:00:00 +0000
ROA not after:            Sun 26 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:75:5a:47:dc:7f:c2:33:7f:8d:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 21 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2022 GMT
        Subject: CN=cf771a46-b060-45cb-b171-57b1322e2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:27:3e:a8:74:98:8e:ca:67:b8:00:a8:13:
                    2a:a4:74:b3:26:5a:49:f9:43:38:1f:a3:6c:ce:a5:
                    ea:2b:21:f1:ee:38:e6:40:55:b7:26:2d:69:1e:29:
                    40:cf:90:03:0c:ef:a9:28:a7:37:71:db:bb:da:7c:
                    87:dd:7c:b3:38:dc:06:e5:6f:25:50:96:36:eb:df:
                    72:1a:e6:1c:88:ed:54:cc:c9:fb:a6:2c:3e:e2:6d:
                    95:3c:69:20:27:52:6b:03:08:79:48:46:ff:91:1f:
                    c3:19:74:f5:18:f8:d9:17:0f:92:ec:1b:4e:44:5a:
                    d6:bc:b1:a3:d1:2e:fa:5b:15:e0:d1:b8:73:d1:9d:
                    69:c9:b5:77:64:27:5a:5d:f5:70:12:7a:b7:55:50:
                    75:b6:53:40:3d:03:e6:72:c6:c6:c9:c1:09:3d:76:
                    ff:5b:bb:f8:d0:a2:18:03:06:07:e2:ce:8b:a3:67:
                    8d:a3:e2:f1:b2:59:8d:1b:67:e7:eb:2e:a6:0b:88:
                    ca:f5:9e:62:88:25:2d:fa:1e:b5:2e:8f:f3:88:8f:
                    b3:4b:3e:5b:d1:3f:1e:0d:ec:92:62:06:43:fd:9b:
                    47:48:dc:c1:61:41:41:42:a9:17:61:b2:40:e8:9a:
                    09:bd:88:1c:00:a4:ed:de:52:d0:99:0e:89:d7:81:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:EB:F8:05:2C:62:61:CA:90:CA:E6:72:A6:1B:77:82:32:EB:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b6d18280-278e-3a56-81ad-0314b5ff978e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:0a:78:a2:e0:1d:3e:c8:c8:79:13:e5:54:f7:92:c7:6d:
         54:af:72:89:a3:8a:71:59:52:ca:5f:1b:19:cf:57:3c:22:0f:
         ed:49:c4:09:eb:4c:82:1f:bc:a9:49:8e:9a:71:7b:8f:bc:4e:
         67:1e:98:89:e3:71:bd:90:7a:c6:67:b8:89:79:8b:da:f0:c8:
         11:63:b3:16:17:7a:eb:51:62:6a:4e:05:e2:12:15:e8:69:68:
         eb:71:ed:70:4a:8c:00:cf:42:af:a4:3c:76:aa:e1:eb:1d:41:
         5b:00:b1:59:12:d0:c1:55:0f:90:2d:7d:bd:1e:4e:16:52:bd:
         64:c8:ec:83:6e:ae:f5:ce:8b:10:46:9d:cd:64:52:89:b9:f5:
         86:1f:7e:7c:eb:4d:10:63:87:9a:bc:9f:a0:79:8c:63:fa:b4:
         c0:84:84:14:25:fb:2f:7a:5c:2e:33:d9:a5:41:fc:c3:5d:a6:
         34:60:33:c9:21:34:75:a3:87:ed:98:e2:30:5b:9e:1e:9a:fb:
         11:44:6b:2f:25:37:d0:6f:c2:f3:f6:07:91:51:68:15:e1:56:
         48:d6:79:89:ec:01:d7:6a:30:15:35:03:de:d1:5f:02:39:d1:
         1a:d1:b4:6e:ac:21:c8:95:0b:69:7e:7e:d4:87:79:3c:4f:d4:
         36:fd:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:06 2025 by rpki-client