Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde9d35e-e09b-3b33-8a96-62a8d825d072.roa
File:                     bde9d35e-e09b-3b33-8a96-62a8d825d072.roa (raw, json)
Hash identifier:          HA47DtL31DI+ri/b6rgJKTAv6voJjZmMD2BHXEobEyU=
Subject key identifier:   1A:BE:0E:68:F4:3E:6D:24:F7:81:66:2E:89:69:08:ED:A7:6E:D4:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAD4A15B07E78B3748D9FB380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde9d35e-e09b-3b33-8a96-62a8d825d072.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.162.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ad:4a:15:b0:7e:78:b3:74:8d:9f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=5051f09e-e115-428b-8204-f1fb31830855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:11:9d:c3:bd:a7:d0:ee:1e:45:4c:88:2c:
                    b5:8f:b2:ea:e2:0d:b5:bd:21:54:6c:57:9f:c3:e2:
                    07:07:7f:38:b5:55:8d:e8:57:a5:e0:f7:ee:3a:b4:
                    82:f1:b0:15:8d:e6:6d:61:5a:bb:fd:94:af:97:be:
                    d8:dd:c7:8e:5e:e7:35:c2:eb:e5:2d:77:75:ab:5f:
                    28:8b:b9:15:ad:4e:e8:08:1c:9c:4c:ed:bf:81:0f:
                    43:d5:42:44:56:70:c3:2a:cd:fe:c8:6b:e1:0a:ca:
                    1a:08:c5:8f:8a:dd:48:27:6b:e8:f8:46:7e:8d:e1:
                    30:43:58:e8:c4:4f:fa:18:bb:83:56:b7:13:09:d1:
                    a2:e0:d6:3a:0f:f2:93:0e:eb:f6:10:9e:07:f4:3b:
                    f4:08:65:f0:07:6f:62:f6:16:a4:e0:d5:38:de:f3:
                    97:f4:14:4b:ad:ef:e5:69:38:1d:96:71:ff:9b:52:
                    2f:4c:7b:07:1c:74:bb:23:93:9b:38:88:03:ea:65:
                    bc:18:a4:92:3e:7f:a3:f0:7e:6f:ad:b9:66:14:47:
                    20:b0:df:5b:0e:f3:1c:ee:79:65:08:5e:60:77:18:
                    be:89:0d:be:01:bf:8f:c3:90:69:74:b2:3b:02:da:
                    ff:7c:9f:fb:ad:7e:51:2d:f9:e9:f5:18:e6:5e:91:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:0E:68:F4:3E:6D:24:F7:81:66:2E:89:69:08:ED:A7:6E:D4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde9d35e-e09b-3b33-8a96-62a8d825d072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.162.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:23:fa:fa:4d:79:56:22:d7:88:ab:b5:e1:ad:42:40:c0:77:
         02:5b:63:e6:e5:74:99:55:78:c4:1e:97:76:c9:86:ec:87:ed:
         f4:f8:7d:7a:ac:5d:c3:10:87:8e:70:0b:ee:45:0a:79:5f:68:
         57:1b:e2:b4:2e:5f:53:c2:87:3f:ea:34:bd:18:ee:92:15:15:
         95:e5:e6:ba:1a:56:86:f2:f7:1d:55:3d:ae:59:2a:da:37:28:
         9d:1d:4d:4d:b8:6f:50:98:dc:d5:3f:8d:e6:bf:d5:a8:6e:19:
         b6:08:06:fa:a7:2b:36:94:12:e5:83:7f:b8:91:c0:9b:fb:fc:
         93:9e:66:c8:80:40:d3:57:be:6b:d3:69:a1:6d:cb:cc:8c:57:
         85:36:92:cd:08:21:e5:5c:0a:db:80:b2:57:46:9e:5d:62:93:
         46:aa:c2:62:9e:e5:8c:1c:32:8d:5a:19:4a:84:47:72:c4:77:
         85:9a:4b:46:0d:1d:6f:87:90:f0:91:8a:9b:88:be:ed:fb:e5:
         8a:4c:b0:f0:92:3d:de:91:ac:61:df:0a:6c:5c:b2:59:66:f0:
         d2:2b:06:94:df:eb:09:1d:4b:ae:70:49:b6:ed:1d:7c:ee:c2:
         96:15:83:8e:6d:0b:4d:44:a0:50:bd:a9:c2:ba:8f:7b:e8:ad:
         88:9d:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:32 2025 by rpki-client