Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4cb0327-7086-31bf-8c5f-99e136c20539.roa
File:                     c4cb0327-7086-31bf-8c5f-99e136c20539.roa (raw, json)
Hash identifier:          K5MsICRKIb8Upu6Zteojxvz7k3H5eOPK2+Fy1mr99X0=
Subject key identifier:   39:1D:C5:12:00:1F:62:B0:A2:2E:A7:DB:ED:EF:F7:C6:D8:EB:6C:DB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F04F6AC8BC9DD3E8F391A9680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4cb0327-7086-31bf-8c5f-99e136c20539.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.29.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:04:f6:ac:8b:c9:dd:3e:8f:39:1a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=74d2547f-1643-4020-b788-3fe8c36eaced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:51:89:16:f1:57:ba:31:7d:29:d1:d8:a7:
                    bc:f4:85:2d:87:df:50:e9:f1:6b:e5:e3:44:42:6d:
                    75:e8:61:c8:68:fd:94:11:17:5b:5d:32:09:cd:98:
                    de:13:b6:a1:2b:91:20:d6:f6:50:c0:b5:86:2e:74:
                    6c:93:fe:7c:8f:4e:d9:b0:25:8e:45:3e:08:db:84:
                    de:f8:ec:b2:5a:15:90:85:ef:e3:b9:ee:0b:8c:eb:
                    4b:9e:bf:6e:a4:6f:6a:c5:5a:3a:72:65:85:ad:91:
                    8e:ed:47:f5:13:52:ee:c6:70:b1:b0:bd:cc:41:b5:
                    27:04:d0:24:25:ab:a5:1b:ec:09:1c:2d:62:c1:5b:
                    c3:0c:d7:c0:a2:7c:77:fd:3a:e9:1d:df:ad:89:59:
                    49:3d:64:00:e5:3e:1c:67:22:c2:f3:ea:0e:67:94:
                    22:83:50:c5:d7:07:25:26:d5:aa:db:f9:2d:d5:0d:
                    9f:b6:3c:9c:93:be:a9:cb:16:4b:08:6f:49:d6:1d:
                    1b:b7:24:c1:fc:70:e7:98:c2:40:d4:7d:ef:7e:96:
                    6f:18:7e:84:a4:67:46:20:1a:86:c7:0b:9b:bb:c6:
                    03:22:27:21:a3:b2:9a:04:5c:68:be:53:76:3d:7b:
                    47:43:f2:f7:6b:18:bc:98:13:b4:89:dd:e8:cc:bf:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:C5:12:00:1F:62:B0:A2:2E:A7:DB:ED:EF:F7:C6:D8:EB:6C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4cb0327-7086-31bf-8c5f-99e136c20539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:48:e1:c7:81:ae:b7:a4:15:27:0a:3a:08:2a:34:5d:31:3c:
         79:9a:59:f7:f9:93:ba:75:39:09:51:d1:20:2b:0f:01:65:e3:
         28:3a:fb:c2:bf:20:28:f1:14:71:a3:ac:fc:d9:a3:cb:74:6b:
         e6:ef:42:38:72:1b:bb:e9:c0:db:d5:ac:5f:b5:13:1e:af:ad:
         1f:42:f5:5a:3d:31:ec:09:6e:e5:d0:dc:74:9a:77:88:4b:15:
         df:45:b6:6e:da:f9:8a:b9:c7:7d:1e:6f:3b:70:23:cf:4c:86:
         30:60:7a:b7:56:f1:d9:c6:9a:2f:eb:62:c0:8c:dc:6f:55:85:
         4f:59:4c:92:90:42:e0:28:f5:68:f0:18:7b:b6:be:9f:a1:18:
         4b:18:59:7b:7c:d5:1e:02:6b:b5:cc:67:52:e5:89:e2:68:60:
         d9:9d:53:0c:45:10:1a:9b:20:65:4b:db:65:c9:e2:65:7f:a9:
         72:ba:4e:1b:fb:aa:6b:ed:c4:43:85:16:95:ff:a7:71:f1:cb:
         68:31:7a:9f:fb:c1:0e:14:01:84:0f:04:1e:36:b7:17:54:6c:
         fe:4b:22:29:c1:9f:1c:27:91:d2:47:00:55:ff:c8:ea:2f:04:
         8f:ea:92:ac:d0:c9:cd:64:e0:b7:87:5b:82:3e:48:fc:95:f7:
         39:c7:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:44 2025 by rpki-client