Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91813ef-0928-3938-afc4-6015d0ed8f34.roa
File:                     c91813ef-0928-3938-afc4-6015d0ed8f34.roa (raw, json)
Hash identifier:          GtJnNgu8jwcRj69gIOJAYhH2jiGQCbFGn7bJqBN7AiY=
Subject key identifier:   D4:68:A9:BB:BF:73:C9:E6:83:0B:10:7A:C5:D1:06:1F:5A:65:4E:6D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF3AF8EF29AE31E4113451AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91813ef-0928-3938-afc4-6015d0ed8f34.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.104.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:af:8e:f2:9a:e3:1e:41:13:45:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=d7166cc9-4673-4ee6-bcc3-51b1e598f633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:c7:83:2f:b3:27:a5:86:05:ac:47:ec:4c:
                    d1:73:bd:e9:1a:3f:65:d7:71:e8:2a:c9:43:fd:92:
                    7f:f8:78:00:51:64:1f:2d:7c:09:6c:64:40:54:32:
                    eb:34:69:d5:6a:f0:c3:ef:79:d9:9b:ff:bc:a0:f5:
                    00:ec:54:8d:99:f7:57:e1:c9:85:44:66:d9:de:fe:
                    3c:07:c6:c6:87:35:12:b6:45:b4:ab:9f:5b:c3:37:
                    6c:45:f3:48:61:c1:7d:00:c7:4e:7f:79:f5:75:6b:
                    11:fe:04:b8:63:4d:e1:f4:c8:64:61:a5:36:15:91:
                    7c:ee:ba:06:d5:2f:68:22:5e:b9:45:b6:32:22:39:
                    a3:76:54:df:6d:26:25:fb:3a:04:c8:11:4b:b0:69:
                    27:81:2e:f2:79:e1:30:a5:28:76:09:59:7f:b2:6a:
                    b2:6d:f5:ae:c1:46:b4:6a:e8:0c:46:34:de:06:0e:
                    a6:b5:8c:e2:8a:e9:be:be:b0:4a:38:57:61:11:67:
                    db:e8:e3:04:30:70:44:ab:13:64:d6:d1:66:b6:b7:
                    97:ce:09:ef:ee:7a:ef:89:ae:3c:bd:71:01:79:11:
                    1d:46:37:f0:59:ce:10:c1:31:19:a5:de:b3:8c:47:
                    66:f0:06:52:03:15:36:f7:5a:35:1e:e1:43:4a:72:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:A9:BB:BF:73:C9:E6:83:0B:10:7A:C5:D1:06:1F:5A:65:4E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91813ef-0928-3938-afc4-6015d0ed8f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:29:68:db:f0:e5:be:1b:6a:19:39:9a:8f:3f:0d:ce:76:
         63:ae:30:4a:96:83:5f:b4:6c:a7:05:69:03:df:6b:0b:cc:13:
         ba:a0:e4:fc:17:a5:ae:6c:bd:96:44:4e:8c:ac:58:18:2d:d4:
         68:4a:51:dd:7b:83:4c:79:53:a7:d6:63:f6:83:93:78:ae:e4:
         65:5c:75:ca:7d:d4:6f:03:58:28:3c:20:7b:2a:fa:32:08:8c:
         c3:66:e1:cd:17:09:c0:02:97:8e:31:1d:58:58:60:59:d3:db:
         95:47:82:ae:34:61:ab:1d:a8:cb:29:c2:23:d4:c9:9a:c5:7f:
         36:eb:6e:5f:98:d6:98:be:2f:67:31:55:d3:45:29:cf:98:1e:
         53:7b:59:77:26:ff:66:11:fe:7e:46:bb:b9:4a:54:f7:31:46:
         bb:77:7e:27:e9:b7:6e:97:f9:fb:a7:ff:4d:48:e6:7a:97:74:
         5f:13:d6:59:cd:9b:8d:75:a7:8b:54:29:22:94:ab:a5:04:ef:
         0b:92:a5:cc:76:2f:2d:ef:5e:84:41:98:71:75:12:c2:e3:0d:
         51:97:b7:c7:5e:d8:ef:28:46:3d:4a:2a:17:a1:ce:27:aa:d8:
         31:76:cd:2c:ab:8d:da:97:ab:4e:e0:17:14:8c:77:4e:e0:75:
         4b:b5:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:45 2025 by rpki-client