Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf67209f-137a-3d7a-a3ce-2fbbb8689b46.roa
File:                     bf67209f-137a-3d7a-a3ce-2fbbb8689b46.roa (raw, json)
Hash identifier:          3MFdTgBQkVEvI+uh+X8XwK4c4c8cEQh3Ci5MqHOucrU=
Subject key identifier:   E1:FD:F0:10:72:30:0D:77:BB:6F:B0:0A:4A:F8:60:1E:BC:30:14:D3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D48B3517BD0430668FC195EA3
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf67209f-137a-3d7a-a3ce-2fbbb8689b46.roa
Signing time:             Sat 19 Mar 2022 04:00:00 +0000
ROA not before:           Sat 19 Mar 2022 04:00:00 +0000
ROA not after:            Sat 23 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:48:b3:51:7b:d0:43:06:68:fc:19:5e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 19 04:00:00 2022 GMT
            Not After : Apr 23 04:00:00 2022 GMT
        Subject: CN=62fb3434-ff87-463a-9a10-c409bf0c6bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:ea:18:ee:94:f7:28:93:21:4c:92:9e:db:
                    a8:5c:6c:13:69:19:61:d0:ab:d2:d9:d6:f8:ee:9a:
                    26:a2:d5:ff:2d:32:61:47:32:b3:62:42:1c:b7:73:
                    d1:7d:c8:b0:58:dc:c4:b8:e4:23:c1:3a:65:ff:09:
                    c0:4b:3b:19:b0:36:fe:62:43:69:a9:d3:79:65:4d:
                    94:d2:d9:d1:df:b1:c7:bb:8f:c3:59:ac:40:b1:df:
                    06:c1:88:4e:ea:9b:58:a7:c7:0a:db:e9:ee:97:18:
                    8f:a1:de:42:b5:4a:4e:2d:a4:a7:74:2c:a7:8b:c4:
                    51:4d:0b:c2:ab:50:ba:74:79:f5:0d:ec:49:0a:c6:
                    1d:dc:78:6c:20:a2:1a:4c:b6:31:ad:8e:6a:b2:8f:
                    49:21:08:76:c2:a4:2a:07:07:8e:ad:e8:41:be:35:
                    43:7d:ea:a2:4f:dc:dd:d9:cf:5f:89:af:8b:4b:42:
                    5d:d3:d2:c8:47:27:2c:de:f1:b7:fc:a7:6b:2d:c0:
                    de:b8:16:50:f3:8a:10:e0:f7:e2:ea:26:b7:86:c2:
                    0e:b4:6d:c6:b8:1e:d5:61:23:e1:d7:60:a2:73:1b:
                    1e:20:92:56:6a:6d:a0:32:52:ff:12:be:6d:15:31:
                    93:76:ac:2b:1e:5b:83:c6:a5:74:f7:d3:46:71:b7:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:F0:10:72:30:0D:77:BB:6F:B0:0A:4A:F8:60:1E:BC:30:14:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf67209f-137a-3d7a-a3ce-2fbbb8689b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:34:f8:64:9f:ca:71:29:dd:52:82:bd:c2:9e:5f:60:f1:
         cf:1d:da:b2:ab:20:22:21:1c:27:40:0b:53:2c:ab:75:8e:18:
         a0:95:04:67:2b:6d:8a:b4:68:be:dd:4e:ea:20:1c:a6:77:52:
         81:7e:af:5c:79:8d:ad:34:72:5f:59:22:ed:99:12:b9:a7:72:
         01:36:6e:01:0f:7e:bf:e6:c1:84:b6:19:d5:52:61:0c:d6:74:
         59:74:89:6a:cf:41:d9:b8:3b:8b:bd:cd:c8:63:47:25:be:9c:
         77:28:e2:de:6e:c7:2b:8c:fc:e7:a3:42:58:ea:cf:46:fb:32:
         65:f1:b0:f0:fb:43:9e:17:0b:d6:75:5c:d7:72:92:15:72:20:
         83:70:f1:9e:61:4f:fb:8c:9a:16:54:f8:9b:7d:d2:c9:fd:3b:
         c2:e3:37:cb:64:04:1d:df:7f:7b:06:03:43:21:15:cf:51:43:
         a2:60:9a:a4:97:0c:cb:a1:28:d5:57:bd:50:50:b8:98:34:85:
         03:8a:c1:a4:8b:72:a5:df:d1:a9:f5:bd:8d:cf:e2:77:49:24:
         51:a7:b4:b2:c3:bf:ad:2a:c5:98:21:31:37:d2:28:b0:b5:d7:
         b6:5e:74:45:02:ce:57:85:cf:73:03:7d:af:40:9b:03:2e:45:
         48:00:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:54 2025 by rpki-client