Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c0798d63-d1a1-3ca7-8622-aced2495d4b4.roa
File:                     c0798d63-d1a1-3ca7-8622-aced2495d4b4.roa (raw, json)
Hash identifier:          5cejIGBUsHJIvHEtlp83y0BJL+LemlIXNEccTdKl2AE=
Subject key identifier:   FA:E8:A2:F0:17:DF:55:3B:33:9A:5D:0C:FB:FE:8E:61:45:B7:8D:89
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBA1707FFF63F02A8FF961150
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c0798d63-d1a1-3ca7-8622-aced2495d4b4.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.102.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ba:17:07:ff:f6:3f:02:a8:ff:96:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=59fa9b58-05f9-4e40-b455-3ca0ffd15be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:81:d3:18:f3:ea:8a:25:03:58:0f:29:d8:
                    95:49:73:ff:25:0b:e5:43:e6:8c:fa:92:0b:b9:8e:
                    a9:49:48:08:03:65:81:56:d8:d0:44:91:c7:69:8f:
                    5a:db:1e:71:41:76:dd:ae:df:8c:8f:60:10:f1:48:
                    5a:14:72:25:f5:66:bb:94:b8:a2:ec:f5:48:29:c0:
                    37:11:ff:99:53:73:eb:22:cf:ce:b1:53:88:8e:00:
                    8f:88:51:d4:e7:c1:e7:69:29:09:e2:dd:34:a0:7b:
                    83:9b:1d:a1:4c:ad:71:af:60:2e:d2:a8:8c:7b:0e:
                    0d:51:fc:95:9b:6d:ae:21:f4:33:3f:6e:c5:b4:66:
                    02:50:af:2e:67:6f:d2:63:91:f2:fb:01:9a:ea:ea:
                    83:1b:59:73:73:61:87:aa:95:ce:f5:26:c6:21:5a:
                    d8:eb:7c:0f:83:fd:60:e8:6f:1b:c4:60:1d:35:b3:
                    6b:c7:87:47:90:35:9a:d3:c6:e5:cb:5f:a4:62:89:
                    5c:de:fd:b1:dc:fc:c1:bb:e8:fa:6d:19:6a:99:a0:
                    cb:00:0f:5d:dd:8a:69:85:38:fe:fb:b8:58:01:fa:
                    5f:18:86:28:13:c7:68:ef:38:de:8a:b5:c4:e4:ab:
                    87:af:46:e2:60:25:88:a0:7a:fc:08:5a:08:37:65:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:A2:F0:17:DF:55:3B:33:9A:5D:0C:FB:FE:8E:61:45:B7:8D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c0798d63-d1a1-3ca7-8622-aced2495d4b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:74:89:1c:e8:8d:a9:e4:84:e4:ad:d4:6d:58:21:04:8d:
         d3:5c:33:97:a8:b9:26:ce:e8:78:19:41:fc:08:c0:d9:e9:46:
         36:c7:a7:10:3a:ab:33:d8:84:dc:19:ef:4d:be:68:7f:8b:0e:
         8b:9b:74:d3:41:99:bb:75:23:52:81:ec:35:ab:51:a9:c1:2a:
         f4:54:5f:e9:c4:bb:23:d5:45:0c:16:24:a3:db:13:81:4b:d4:
         d9:89:fb:9f:48:5d:3f:92:a6:e8:db:b3:f7:f7:f3:be:f0:13:
         93:d8:a3:3d:44:ab:0e:fc:ab:7f:f1:1f:e6:72:e0:4d:00:8a:
         43:1f:f1:de:23:6f:18:34:05:3c:80:0f:c4:90:dc:6f:19:63:
         3e:03:a0:b5:9a:47:39:09:49:e7:ac:39:0a:23:e7:bc:33:3e:
         58:ec:97:4f:36:36:19:69:ef:2c:98:6c:2a:31:fc:ef:e2:3b:
         14:63:b8:5f:4e:14:52:bb:90:eb:76:b2:80:e8:b9:99:23:f7:
         ad:7d:f3:bb:53:90:15:40:e1:ae:38:65:b4:97:0b:bb:c0:47:
         73:31:db:2d:6d:68:e6:70:4b:e5:15:b5:2c:1d:83:a6:d2:01:
         83:06:ac:4a:f8:63:06:df:84:bb:f9:c0:12:4d:f5:6c:5c:d5:
         14:97:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:00 2025 by rpki-client