Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7f851a4-fa1d-3e6d-82eb-ef41a0f9fd92.roa
File:                     b7f851a4-fa1d-3e6d-82eb-ef41a0f9fd92.roa (raw, json)
Hash identifier:          SuRCoZcfC9pg8n/kRpku1OdUP02aLqaXp8yEsp4/dzQ=
Subject key identifier:   E4:FE:56:14:32:4E:36:98:14:BA:3B:74:DA:79:AF:99:34:33:87:5B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF5BAE9BB47EB4AA089E81080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7f851a4-fa1d-3e6d-82eb-ef41a0f9fd92.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f5:ba:e9:bb:47:eb:4a:a0:89:e8:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=b8961dd2-0852-4e38-a8aa-62a3b084cd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:e7:a8:4d:47:fb:6e:45:7b:c5:cc:3b:dc:
                    0e:61:e8:bf:95:5e:17:e0:fd:b1:b8:f6:f6:2e:b6:
                    06:7d:29:68:3b:4b:9a:68:9c:d7:4e:aa:f4:91:ee:
                    e5:d0:b3:c0:38:33:33:3b:13:21:23:ae:1f:ca:0c:
                    db:95:2c:41:4b:2b:0e:e3:e3:0c:24:9a:20:54:87:
                    ec:0d:fc:93:66:11:f6:db:29:ff:7f:16:22:d6:60:
                    e8:98:18:e5:a0:96:ee:74:e8:69:6f:0e:76:92:c7:
                    3d:80:a0:05:52:04:bf:80:7c:8c:a9:6a:b4:82:a1:
                    2c:0d:97:5a:3f:63:f1:d7:32:36:19:cd:70:14:b2:
                    6a:a3:e7:63:47:99:56:f4:3b:92:fb:70:1a:79:3a:
                    a1:6f:54:9c:f5:2e:61:45:d7:72:8c:7f:62:00:f4:
                    d3:fd:33:9a:a9:85:07:cf:76:b1:30:68:df:14:bc:
                    cf:03:bc:71:e8:1c:58:3a:ab:c8:04:e8:e0:43:76:
                    0a:45:3b:95:6d:85:ac:55:79:86:a5:c8:6f:85:69:
                    49:6a:6b:5c:aa:18:0f:f6:fa:77:5a:c1:9d:52:fe:
                    24:ac:33:61:38:6c:fa:11:6c:c1:4a:ac:7a:63:6e:
                    9f:af:66:e0:a1:87:7d:c8:42:95:0f:87:38:af:41:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:56:14:32:4E:36:98:14:BA:3B:74:DA:79:AF:99:34:33:87:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b7f851a4-fa1d-3e6d-82eb-ef41a0f9fd92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.128.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:72:dd:86:25:45:4a:4c:18:75:8c:d8:1e:82:74:a6:85:
         91:ff:11:ae:e5:2c:bf:7a:71:a8:c6:cc:9e:47:61:87:6f:40:
         fb:11:42:6b:e4:37:a7:01:7a:94:34:4d:66:93:f9:b6:ba:0d:
         86:38:91:51:69:52:cc:66:b0:fd:26:68:5b:df:9e:f1:dc:18:
         f2:8d:05:da:a5:2e:2e:83:12:21:61:79:1a:ad:cf:dc:29:27:
         9e:9c:65:78:2a:9e:42:06:bf:e6:6b:2c:2a:91:e2:8a:ff:84:
         38:b3:9e:3d:77:f7:41:cc:a8:37:8c:b6:95:d4:83:a4:4b:83:
         9a:43:57:c3:db:75:29:4e:d1:36:77:20:a8:eb:53:93:59:fd:
         f3:10:10:ad:36:45:69:b4:65:79:c4:48:cf:eb:7c:b2:3a:dd:
         b7:ec:32:1c:1f:83:b0:a9:c0:98:34:b8:f4:92:42:f3:ac:f2:
         a5:a7:72:ea:79:9b:d3:37:d1:b2:35:6a:99:27:af:f2:c1:11:
         01:a8:f0:a0:a3:8e:38:ae:29:90:29:89:54:ab:5b:d0:4a:0e:
         54:1e:ca:3e:dc:fe:74:d1:57:21:68:72:7f:17:e3:f8:ed:6b:
         8e:1d:b4:34:20:dd:6d:a9:2c:22:06:e6:4d:5d:cc:46:a6:89:
         e6:58:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:30 2025 by rpki-client