Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3439ee6-4c7e-38ac-bde7-840b0ce7fe95.roa
File:                     c3439ee6-4c7e-38ac-bde7-840b0ce7fe95.roa (raw, json)
Hash identifier:          Zxt0Hegil97iEyEPTbntiNIb7p0kqI+fOLdOlSt/q6I=
Subject key identifier:   F7:74:87:1A:A2:8D:AC:A1:E0:5F:FA:9E:63:92:C3:A7:22:1D:09:38
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCB5299BDE59CC3C501039DE8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3439ee6-4c7e-38ac-bde7-840b0ce7fe95.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:52:99:bd:e5:9c:c3:c5:01:03:9d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=ab561b5c-f301-4633-99d9-39d33d5acf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:0c:11:f4:cc:26:81:42:e0:1a:a7:ea:a5:
                    a4:9b:db:cc:d0:7b:b7:a9:af:df:d5:20:5c:84:46:
                    39:ba:60:52:d1:1d:5c:59:05:ec:b4:4b:7e:82:bb:
                    24:53:9b:78:30:2c:2b:35:04:35:75:33:3f:d1:13:
                    a5:78:85:4f:f2:ed:36:c8:35:81:04:83:fd:54:6a:
                    e9:a6:18:f3:31:30:ee:6d:5d:4b:f3:40:9d:1b:9e:
                    4b:e4:1e:dd:ac:51:8a:eb:e7:9d:48:1e:8d:0b:00:
                    6a:6b:b5:0f:90:3c:b4:33:a2:97:19:35:df:1d:61:
                    3f:c9:47:d3:fc:af:45:0f:85:c2:a3:9f:8c:32:07:
                    68:c8:fe:15:91:7f:3c:90:a0:36:70:64:67:15:87:
                    31:20:5c:d9:0e:c1:01:ef:bf:97:ef:59:de:6b:51:
                    ed:a3:fe:a8:e2:37:ed:ab:16:c9:8b:c1:76:6c:33:
                    1a:ae:b3:41:c2:d0:d1:78:33:d1:b5:af:33:87:7f:
                    20:08:75:cd:a7:20:1f:6b:3e:4c:9c:79:01:c8:e7:
                    d8:f6:f1:c6:db:c8:cb:dc:65:15:9d:17:52:af:2b:
                    8d:d8:5b:14:6f:dd:ac:53:61:18:63:ea:ae:83:11:
                    23:69:53:ec:82:f6:11:ba:34:b2:08:15:8a:5b:90:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:87:1A:A2:8D:AC:A1:E0:5F:FA:9E:63:92:C3:A7:22:1D:09:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3439ee6-4c7e-38ac-bde7-840b0ce7fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:21:d3:40:d5:55:9c:60:98:d8:20:0e:b0:ab:1e:ed:63:
         85:84:63:06:e0:17:cd:c9:6a:20:63:2b:dd:e2:49:69:ea:ba:
         76:f5:b6:92:e8:58:6d:d7:97:1a:df:cb:b4:5c:7d:99:2d:2e:
         70:9c:1a:10:bf:bd:63:0e:08:7d:1d:56:da:ca:15:15:74:5d:
         de:0e:63:21:bd:b8:c5:29:c2:22:2a:fb:78:78:97:d4:33:d8:
         e4:be:b5:44:da:ec:6a:0b:0d:c5:75:d8:01:a6:a6:b7:b6:a4:
         b8:28:3f:4d:ce:4c:e8:40:dd:91:26:af:cf:27:4e:50:3e:0d:
         5f:13:45:4f:f4:38:74:2b:a5:59:ab:eb:c1:7a:63:2f:f6:7b:
         09:7d:c0:e0:73:3f:67:5c:dc:ab:06:38:c9:06:b7:7c:a1:01:
         dc:0e:76:42:83:54:6e:17:08:39:2c:b7:c0:b7:dc:df:9e:8b:
         2c:dc:91:ff:c4:14:a3:28:cf:79:2b:13:e9:cb:93:5c:96:bc:
         4a:21:fb:3d:48:67:fa:eb:ca:71:20:62:69:48:d6:78:3d:2e:
         8c:bc:72:0c:09:aa:3e:0c:fe:d3:f9:ae:00:95:7a:09:e1:4a:
         de:ef:c7:96:5d:b5:12:1f:60:3f:0e:93:99:28:46:f0:24:49:
         2e:f0:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:23 2025 by rpki-client