Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91d6773-c702-37bc-8ef3-b8aa7225c360.roa
File:                     b91d6773-c702-37bc-8ef3-b8aa7225c360.roa (raw, json)
Hash identifier:          vjuqOXdidV5cV4BuPfYUrmsV2HVDcDT6F3IOGMfwPmw=
Subject key identifier:   7B:3E:D7:01:2D:8D:28:80:49:A1:F5:58:B0:21:66:60:DD:C7:4F:2A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F92EF8C1524557C764F5BAC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91d6773-c702-37bc-8ef3-b8aa7225c360.roa
Signing time:             Fri 14 Oct 2022 12:00:00 +0000
ROA not before:           Fri 14 Oct 2022 12:00:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:92:ef:8c:15:24:55:7c:76:4f:5b:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 14 12:00:00 2022 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject: CN=66dea51b-7282-4666-9fdf-87214c9c55f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:5e:d7:3c:a4:c7:86:2f:e7:8c:42:fc:cf:
                    31:f9:84:e5:f2:bb:96:e5:56:92:f8:b0:05:13:6e:
                    1f:b5:b6:70:8f:a2:b3:55:f6:15:1d:04:12:6f:e5:
                    66:77:a4:00:17:e4:eb:bc:ea:d5:4b:9c:ee:99:fa:
                    fb:c9:d8:11:e4:6e:0c:4a:45:bc:e8:b9:8b:03:0b:
                    59:82:62:46:01:00:6b:87:3d:39:9f:1c:73:c9:a1:
                    f4:e6:ed:c5:7b:3a:d6:08:6d:5f:8d:e7:16:0e:54:
                    bb:a4:5c:c0:ab:88:a0:4b:03:05:00:6c:35:7c:65:
                    85:19:c0:da:a1:98:20:bd:49:16:88:65:97:ea:08:
                    9c:37:4c:61:aa:95:f0:82:72:18:da:8c:db:a0:83:
                    76:8a:f6:67:f1:3c:e9:8b:e8:a6:ec:21:00:df:90:
                    86:2c:bb:8d:bd:5d:ec:cf:7b:6d:80:97:8f:c4:44:
                    92:55:c7:03:85:21:20:41:1f:bb:f0:ce:f0:ed:db:
                    ff:08:5b:ef:1e:24:4f:8b:f7:77:27:9f:17:ee:17:
                    33:f2:fa:d0:6d:e6:e9:21:9f:14:05:a4:c8:d6:b9:
                    00:7d:15:39:8d:15:68:9b:c2:91:3a:c7:90:60:7e:
                    86:91:8a:98:fa:5f:08:d1:1e:c3:fb:ec:4a:05:eb:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3E:D7:01:2D:8D:28:80:49:A1:F5:58:B0:21:66:60:DD:C7:4F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b91d6773-c702-37bc-8ef3-b8aa7225c360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:78:39:d8:21:ea:4d:20:46:4b:60:89:17:83:7d:bb:8b:
         31:11:af:42:26:8f:68:25:09:fd:b4:bd:45:76:85:83:d7:08:
         81:ca:f0:35:a6:05:bc:d5:21:2f:e5:b5:15:17:09:95:50:a3:
         6b:c3:86:5a:9c:56:4e:26:ff:e0:5a:74:7b:35:e8:e2:71:2a:
         04:cf:52:71:16:99:60:74:d4:69:7b:7a:75:57:95:c7:40:31:
         5b:8d:fe:9b:9f:10:89:c8:41:cb:a0:ab:a1:06:1b:bf:b7:88:
         c5:50:16:a7:3d:01:85:45:48:0e:4a:e3:0a:4b:ed:58:1c:d5:
         75:6c:ed:cf:c6:b8:db:6b:85:ab:f5:0b:1a:1b:47:f3:d7:7d:
         ba:c4:7d:44:7a:ea:9a:49:05:93:82:04:50:70:b4:c4:17:80:
         03:80:60:de:0f:85:29:7a:e0:a4:67:ef:07:7a:c7:30:a0:22:
         17:3e:b5:61:32:f7:0a:b6:89:93:3f:79:1e:22:9a:e4:0a:59:
         ee:1c:f6:27:5a:6e:40:54:cc:cd:78:9e:3e:a9:92:95:ed:4d:
         be:4b:7a:64:15:ef:29:2d:d7:71:c9:af:c5:8f:35:7b:05:01:
         9f:f5:cb:81:ac:e0:47:45:b8:da:56:1c:c0:bf:68:e4:ad:0b:
         65:68:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:21 2025 by rpki-client