Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c02dbb3d-d381-3087-b766-3b5f1430c06e.roa
File:                     c02dbb3d-d381-3087-b766-3b5f1430c06e.roa (raw, json)
Hash identifier:          t57k+mTDwBJ9Fj3vYBgjCsgPLIgQIjhpf0t9mX75za4=
Subject key identifier:   20:83:70:F2:5A:E0:E9:C0:7A:01:69:8C:8A:68:8A:54:2F:30:04:2C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F6BFF124BD7A2B5D459630C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c02dbb3d-d381-3087-b766-3b5f1430c06e.roa
Signing time:             Fri 30 Sep 2022 12:00:00 +0000
ROA not before:           Fri 30 Sep 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.30.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:6b:ff:12:4b:d7:a2:b5:d4:59:63:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 30 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=08cd349f-8870-4f4d-ada0-fdf7a45d260a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:8d:ec:87:a7:92:c9:87:1a:81:d1:ff:84:
                    7b:56:85:b7:17:ae:ba:64:ac:92:be:67:9e:65:c0:
                    24:16:73:e1:c5:55:2f:f4:98:19:bf:fb:da:cd:61:
                    ed:a9:3f:ad:a5:72:ac:2c:ae:80:82:77:19:86:19:
                    b0:13:6f:ba:ff:62:15:0f:af:9b:bf:d4:5e:1a:1b:
                    3d:21:3e:e4:e6:ca:6d:71:e1:51:c1:4a:72:d7:6d:
                    8b:bb:a1:10:f0:b0:00:2e:00:25:2b:36:1f:a3:bd:
                    cb:0d:f6:bd:4e:bf:90:58:ab:a7:94:66:35:5f:bd:
                    14:99:a5:b1:75:21:4f:a6:c6:65:22:04:2d:25:6f:
                    6e:1f:7f:90:0d:58:52:b6:5c:6d:e0:ec:d0:4e:c2:
                    13:e3:9c:8a:42:f4:23:87:4d:35:9b:32:2b:36:d5:
                    59:50:62:be:ab:4f:06:71:33:32:15:af:ab:17:65:
                    95:4b:d7:3d:e5:ff:12:f1:cb:17:59:de:bb:12:19:
                    17:56:45:24:15:f5:c8:20:c5:fb:0d:04:48:75:dd:
                    e3:54:9c:0a:d3:84:12:e3:c3:55:97:8e:3a:57:6c:
                    54:50:b3:87:9c:da:f3:94:67:ba:cb:b4:27:96:af:
                    e1:8a:f9:cd:1d:ff:f5:2b:30:c6:d6:98:5e:47:ff:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:70:F2:5A:E0:E9:C0:7A:01:69:8C:8A:68:8A:54:2F:30:04:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c02dbb3d-d381-3087-b766-3b5f1430c06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:2e:c1:02:4b:a2:a9:a8:87:79:b7:84:88:7c:c1:8a:7c:
         f0:9b:0f:f1:ba:dc:73:57:9d:00:e8:7f:e6:05:6d:51:94:32:
         6d:01:e6:40:75:0e:91:7d:f9:84:fd:64:5c:c7:4e:0b:dd:e1:
         99:14:22:51:4c:1f:63:b2:8e:07:1e:34:9c:42:99:79:8e:2e:
         a9:db:f0:45:c0:64:70:6b:14:f5:0f:05:8b:78:fa:f8:8f:1d:
         7b:33:16:38:f7:23:0a:cf:68:66:dd:32:4e:01:1b:6d:49:b0:
         69:b3:12:27:de:c9:cc:84:be:e1:15:8d:1a:79:1d:aa:4d:d9:
         d1:b0:13:cd:44:70:36:f2:60:90:29:a9:1b:89:18:71:d9:18:
         3a:52:d0:d3:aa:14:85:67:03:05:ac:37:af:86:07:9c:f5:59:
         83:57:e6:46:ac:24:c7:26:34:96:3a:ee:0d:72:43:5d:dc:06:
         59:bb:94:ea:5b:43:83:f8:be:52:af:31:e4:8f:9f:7c:9d:ab:
         3d:c3:d3:50:8c:a4:dd:09:17:37:2a:8f:17:38:bd:d5:93:15:
         ae:62:e8:18:3e:48:46:08:1e:8c:c8:1d:ba:64:e9:38:39:cf:
         79:0e:d8:11:2c:f8:f0:0f:82:63:15:b5:ac:84:1c:2c:c9:81:
         b7:8a:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:15 2025 by rpki-client