Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf981951-14d1-314a-9e86-af0e654b6c35.roa
File:                     bf981951-14d1-314a-9e86-af0e654b6c35.roa (raw, json)
Hash identifier:          wr3h+GY9Reh7gPJRT3ZXf8qDGnXDDapLB1YtuyuP25g=
Subject key identifier:   45:A7:66:52:98:9E:AC:B6:86:E2:47:8F:4A:9A:AE:90:AA:AD:9E:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C0C346CB100CAFDD6573B040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf981951-14d1-314a-9e86-af0e654b6c35.roa
Signing time:             Mon 30 Jan 2023 22:42:07 +0000
ROA not before:           Mon 30 Jan 2023 22:42:07 +0000
ROA not after:            Tue 07 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c0:c3:46:cb:10:0c:af:dd:65:73:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 30 22:42:07 2023 GMT
            Not After : Mar  7 05:00:00 2023 GMT
        Subject: CN=26cce750-e997-44f8-8617-ad0e176d9f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:65:3a:06:7a:9b:0f:59:05:d2:ed:12:46:
                    bd:e1:ec:58:ce:47:98:67:b0:f8:fa:ad:c5:65:32:
                    28:fd:52:60:af:4b:c8:e5:51:83:ec:86:1a:e2:38:
                    d4:6e:e2:91:9c:3d:86:7d:53:03:39:fe:6c:50:09:
                    4d:d7:93:b9:0b:74:4f:0d:fe:66:fe:a8:08:ee:6c:
                    ae:86:97:99:01:58:8c:15:7f:a2:0f:0d:a4:01:79:
                    e7:89:94:db:c5:3f:b7:dd:a9:87:cc:4e:03:69:0d:
                    bc:20:91:0c:b9:ba:b1:8c:eb:e1:6e:1d:3e:f7:c7:
                    06:cf:39:73:4c:42:69:23:ac:ce:5b:98:64:7c:9e:
                    0a:58:a4:26:29:f1:ba:48:46:7f:20:c9:c5:e4:86:
                    49:36:20:10:41:a9:64:57:64:00:1e:f5:3e:60:39:
                    35:b8:5b:e2:e6:64:12:c6:d7:a4:49:16:cb:09:b0:
                    37:00:20:9d:9a:61:0a:bb:0d:f6:d2:ba:54:3c:4e:
                    d7:c7:77:e5:cd:fa:90:14:55:18:06:77:65:bb:f5:
                    de:13:77:68:36:04:67:46:48:11:25:81:7b:ea:f4:
                    a8:68:56:d2:bd:60:95:eb:03:96:9f:6a:6a:39:b0:
                    dd:3b:3e:ad:8a:e0:6d:cc:54:16:0d:cd:a5:5c:e0:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:66:52:98:9E:AC:B6:86:E2:47:8F:4A:9A:AE:90:AA:AD:9E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf981951-14d1-314a-9e86-af0e654b6c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:fb:97:cb:7e:18:b3:59:31:be:66:d4:cd:4e:4e:9b:02:
         e3:7d:a7:0b:41:31:9b:15:f7:59:84:bb:ce:db:cf:cf:df:01:
         67:5b:45:93:6c:9a:53:34:f4:23:c9:39:af:6a:37:84:37:8e:
         02:e0:13:67:9a:86:c8:6a:da:5f:07:17:a1:28:38:be:dc:0a:
         66:a0:1b:55:04:77:b0:d8:bc:33:a8:50:93:b5:46:95:d7:da:
         f9:d3:49:30:b3:63:e0:fd:a3:61:80:5a:ef:90:e5:5f:e9:68:
         a9:65:3b:aa:28:9d:2c:bc:fd:e4:b2:3b:a2:8c:84:18:c6:2e:
         02:e2:17:62:47:48:c0:6a:ce:e5:c3:5b:13:a0:e3:d1:60:89:
         1f:ff:21:86:88:72:cc:0d:b4:dd:97:27:17:32:cb:6b:df:14:
         48:e2:27:4f:64:bb:e8:5b:8c:29:71:2c:72:9d:9e:0c:6e:73:
         49:e9:0b:14:a8:e5:57:7a:74:86:be:b9:11:a1:ff:c5:a5:3a:
         a2:ce:5f:41:0b:ff:26:bf:6d:c7:11:65:1d:5b:bd:ef:0e:3c:
         1a:22:4a:bb:96:e1:5a:71:7e:1e:8c:5a:72:80:34:a1:f5:12:
         86:3e:07:09:af:b1:ca:78:35:96:f0:1b:e3:fa:f4:09:14:66:
         cf:a8:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:10 2025 by rpki-client