Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2486c15-b403-3269-8016-8e26366a224d.roa
File:                     c2486c15-b403-3269-8016-8e26366a224d.roa (raw, json)
Hash identifier:          25MYZ7WKQ61+ys2HcgCwdkSLo9tE1Is/+psbBfexyb8=
Subject key identifier:   FC:AB:60:C7:6C:7E:AE:59:5A:21:83:A8:21:91:AA:52:63:24:CE:4E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D58B1A7EDBB643D0A42D97C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2486c15-b403-3269-8016-8e26366a224d.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:58:b1:a7:ed:bb:64:3d:0a:42:d9:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=603d9a5f-8eaf-4cb1-9767-7f8ec99c12e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:12:3d:c7:c5:90:4f:54:c0:17:b9:d8:41:
                    25:a1:ff:46:7c:39:c0:d9:74:bd:23:6d:7b:50:5e:
                    d8:6e:5a:7f:d3:3a:af:6b:80:17:06:ce:75:6c:37:
                    37:56:b1:a6:91:fd:40:87:4b:4e:75:1e:7b:4b:19:
                    94:69:92:f0:4b:8e:57:f1:02:d0:d1:2a:e9:a7:6a:
                    3c:76:00:9a:ea:d3:3a:38:2a:10:64:15:78:a5:dc:
                    b2:ea:98:92:0b:18:5c:05:1d:41:66:bf:61:b7:c6:
                    38:b8:27:ca:75:8e:81:f0:db:dd:38:d6:af:80:6f:
                    56:3f:3d:a1:d1:e3:90:73:02:f2:40:10:fe:a0:7b:
                    80:9f:b6:e4:1e:f7:cb:b1:12:5a:b5:a4:46:04:bb:
                    f8:a3:aa:b2:59:a7:bb:a7:90:78:a9:d3:17:d5:0b:
                    68:ae:26:00:a3:f1:04:58:4c:9f:c7:a5:23:0a:3a:
                    50:74:07:a8:00:41:8a:f7:54:7f:b5:f6:9c:10:27:
                    f5:cb:89:36:5f:2f:27:fa:4b:19:5e:76:af:75:28:
                    70:d7:3c:d8:06:f4:3e:51:b1:0e:b9:74:bf:de:65:
                    da:d3:30:59:99:c7:eb:03:39:34:eb:36:cb:72:57:
                    e3:d0:e5:7d:dc:be:91:08:83:62:a7:62:cb:17:ac:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:60:C7:6C:7E:AE:59:5A:21:83:A8:21:91:AA:52:63:24:CE:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2486c15-b403-3269-8016-8e26366a224d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:50:83:37:55:a2:21:d5:59:18:68:79:d9:0c:b3:58:9a:26:
         4d:ed:7c:7b:9c:fb:b9:e9:68:2d:10:9d:45:3e:c5:18:8b:21:
         95:2a:dd:df:42:94:5d:dd:03:70:7f:9a:aa:50:37:bb:08:e0:
         41:f6:a8:7f:53:0b:dc:25:00:41:67:57:64:6f:dc:da:18:f3:
         65:63:79:09:84:5d:80:4c:eb:23:1b:f9:c3:7f:e8:4c:0f:d4:
         a2:9b:8d:1d:94:63:53:29:16:c6:50:b0:d5:98:38:6f:d9:82:
         a2:d4:0f:2b:b8:64:df:30:5d:6a:64:c7:cb:71:26:d8:fa:62:
         62:11:57:da:4a:1b:75:0c:a6:76:8b:3f:57:ae:98:f3:b3:6c:
         92:f6:9e:f8:01:9f:8f:0c:1b:2d:15:63:5e:58:e7:c0:4a:e7:
         40:ab:34:27:71:8e:6a:41:38:d2:80:f0:57:93:71:6a:2a:0b:
         63:e1:02:6a:da:4b:ea:d7:98:fb:02:5b:9b:7b:ad:5b:6d:76:
         6a:4f:da:56:c5:d0:ae:93:5a:9c:b7:fb:27:6d:27:53:fd:2e:
         7b:5c:84:fe:d6:f4:9c:bd:79:da:95:4d:ac:2f:4a:82:2a:ad:
         15:a0:8a:d3:1b:5e:7a:70:67:af:65:26:d9:c9:04:8d:9b:45:
         46:f4:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:52 2025 by rpki-client