Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4f09add-2e99-367f-9bcf-977738f6395f.roa
File:                     c4f09add-2e99-367f-9bcf-977738f6395f.roa (raw, json)
Hash identifier:          QDvwI8MUrt8iOiVC48585SFq89Su4X+zlf2K0JFnZsc=
Subject key identifier:   02:EA:0F:98:4B:87:78:D9:CA:BB:BF:2A:B6:74:3B:76:22:B7:37:33
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E8F8979269E79C3D8C22F5CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4f09add-2e99-367f-9bcf-977738f6395f.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8f:89:79:26:9e:79:c3:d8:c2:2f:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=556a4a3f-a13a-4084-87df-dd0bc0a97302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:83:ed:05:1b:98:44:11:c3:2d:29:f1:a0:
                    ea:be:d5:ea:87:b2:fb:eb:34:4b:45:b3:b0:b2:70:
                    0d:41:8c:3c:0f:c5:69:b3:53:c6:de:51:38:b8:b9:
                    27:85:63:67:2b:84:bd:cd:17:97:f1:bb:0c:05:35:
                    b0:4b:b4:c8:26:54:8f:29:fd:65:9f:97:90:02:05:
                    20:a0:7d:01:85:37:c6:44:4c:11:0f:fa:70:05:d8:
                    13:bd:ce:3c:ea:e2:f4:8f:12:78:f5:e3:f3:b0:e8:
                    1a:83:dc:c8:58:b1:9c:bc:f8:64:a0:d8:5d:59:8d:
                    80:0f:c4:7f:24:af:61:2f:5c:d6:ff:ac:a2:f6:d8:
                    bb:a7:7d:8b:63:7b:5d:07:ab:4e:d3:21:ef:3e:70:
                    78:09:71:40:6d:b3:b9:af:6f:84:a6:2e:39:bf:2e:
                    30:95:33:82:65:e5:7a:70:46:20:c6:95:57:5b:a0:
                    3b:54:b9:8f:b5:0e:d4:8d:b1:38:3e:06:99:cb:32:
                    9f:be:b8:5d:a4:38:c7:37:03:e1:f2:4d:95:ad:01:
                    dd:c7:4a:2e:26:58:9d:29:88:f1:3d:57:4d:d0:e9:
                    d8:e6:5e:ce:9a:1b:ec:95:96:eb:4b:c1:1f:ca:3d:
                    70:9a:93:81:01:37:0b:d7:af:7c:28:47:0d:92:9b:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EA:0F:98:4B:87:78:D9:CA:BB:BF:2A:B6:74:3B:76:22:B7:37:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4f09add-2e99-367f-9bcf-977738f6395f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:78:5f:4e:6b:bb:18:ce:93:81:81:3f:cc:a4:68:8a:aa:
         64:c4:a4:c1:0d:07:4e:fc:4a:27:95:80:fd:77:14:ee:d9:8c:
         67:ee:62:b2:62:d8:7b:3f:e1:30:1d:25:6f:17:75:aa:49:06:
         20:57:7f:c5:69:f9:21:6c:2c:26:00:dd:56:e1:e6:cd:98:50:
         59:b7:da:01:36:7a:fa:09:62:63:31:d4:39:b7:23:37:ae:1e:
         fd:c9:ab:b4:81:90:c0:14:3e:23:c1:c2:14:16:30:51:22:83:
         a8:0f:77:64:e6:41:7b:a3:d1:f5:ec:cb:d5:7c:05:1d:29:2c:
         86:c5:4a:b0:d9:6c:2d:74:94:14:93:6f:f1:2c:62:83:f9:60:
         48:99:12:49:40:72:b1:34:57:ab:0b:59:b3:8b:45:b3:98:30:
         46:68:65:05:d6:f5:b0:7e:e6:2d:c0:64:53:5c:9d:27:97:5f:
         87:2b:e5:78:9a:af:f0:62:1b:a4:c5:fe:fd:e3:d5:b2:44:0a:
         bd:e8:66:cb:eb:ee:2a:08:6a:42:e4:71:c4:98:46:40:6f:c2:
         7b:ea:2c:93:11:5b:3f:90:07:81:14:c6:45:0e:f0:08:1a:00:
         a6:60:e4:5d:20:b7:a0:2f:41:f7:9b:39:7d:c1:2e:cd:8c:47:
         04:f1:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:49 2025 by rpki-client