Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91a9b14-9548-3c54-be8c-e22c5373ce5b.roa
File:                     b91a9b14-9548-3c54-be8c-e22c5373ce5b.roa (raw, json)
Hash identifier:          wgzh0o61XCmWR2sRt6u1pPBKj2Vzsw6ihgCWvjFc1Sk=
Subject key identifier:   BE:33:82:F4:27:A1:9C:95:26:83:22:D9:53:CD:BE:A6:1F:46:36:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1C2502CE4B3D5877ABB6C580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91a9b14-9548-3c54-be8c-e22c5373ce5b.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1c:25:02:ce:4b:3d:58:77:ab:b6:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=3c0460a2-e575-4f06-8f10-fdfee43ada6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:13:63:81:1a:2d:bd:b7:b4:16:1c:93:01:
                    93:b6:59:17:ae:71:71:30:9c:91:5e:64:ce:11:81:
                    39:af:0c:f3:2b:74:b5:73:b4:a1:ea:dd:92:6e:20:
                    ff:e4:29:9e:00:48:b2:9d:fc:10:33:8d:43:33:bc:
                    79:50:b3:8f:de:3c:c9:2f:9a:b5:66:ec:06:34:40:
                    a0:a5:ad:7b:8a:cb:dc:d2:21:02:e2:86:fb:f4:19:
                    bb:85:82:ed:5d:53:5b:ca:6f:92:f6:a6:19:28:0b:
                    04:1e:b6:93:54:19:99:a1:c6:8c:e8:e3:2a:59:eb:
                    eb:72:62:0f:03:ce:63:d5:69:58:0a:c9:a7:66:73:
                    74:ff:37:d7:cf:3d:e5:8a:aa:3e:43:3f:ef:4c:75:
                    84:66:09:dc:b9:3a:06:76:6a:7d:77:05:23:3c:34:
                    bb:48:99:df:b1:d4:c0:cd:13:d6:cd:4f:48:08:b8:
                    5d:ef:2e:f4:ae:ba:ed:ae:b3:83:fa:bc:ce:89:02:
                    9b:b1:c3:d1:32:16:00:62:8f:1e:29:f1:86:78:01:
                    16:29:de:e9:d5:cb:61:d4:06:09:13:03:6c:35:11:
                    f6:cf:24:60:87:7c:1b:12:25:6f:c1:77:c6:75:ef:
                    76:e3:71:03:79:9b:cc:8a:f4:7e:0b:9d:1d:47:3f:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:33:82:F4:27:A1:9C:95:26:83:22:D9:53:CD:BE:A6:1F:46:36:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91a9b14-9548-3c54-be8c-e22c5373ce5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2f:a7:a3:b7:80:87:f1:d3:5a:b8:76:15:ce:06:ef:ee:ff:
         8c:0a:01:30:b7:cd:d4:89:17:b0:30:c9:10:27:61:ca:01:42:
         1a:19:2c:55:34:a9:9e:cf:15:a3:35:98:5f:89:0e:6f:d6:28:
         54:08:f2:e5:a5:07:7c:9f:a9:f6:8e:c3:08:ca:c7:9f:0f:11:
         06:bb:7c:17:f6:06:56:56:20:e6:cd:4e:75:6d:d3:71:41:ee:
         66:23:f4:03:29:7c:8f:b9:ff:0f:68:76:6d:5d:a7:5a:4e:82:
         cb:3f:95:78:c2:05:45:97:e6:7b:8a:ad:7d:f1:8f:8a:12:ea:
         3a:9a:5a:4e:c2:d8:e5:be:6c:8d:18:77:d0:2d:78:0a:5f:17:
         21:ef:f4:4f:24:25:e2:ee:a3:ea:4a:ed:df:65:7e:47:de:a3:
         3e:6f:97:85:55:d2:f0:d1:f6:76:9a:04:03:70:dc:64:01:61:
         78:e8:99:51:9e:2d:e4:b2:b1:36:c6:aa:37:f8:5c:12:d6:53:
         85:d6:fe:63:a2:ad:6b:74:ec:8f:d3:4e:3e:34:91:4d:b5:a7:
         c7:84:c5:39:df:3c:a0:a8:5c:a0:e9:3a:c9:74:97:66:4e:43:
         ff:1e:93:7d:3b:13:96:2c:74:d4:52:9c:24:ab:bb:5a:1c:9a:
         42:3e:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:09 2025 by rpki-client