Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c96a8b4e-75ee-3135-8629-0b63af0e6e9c.roa
File:                     c96a8b4e-75ee-3135-8629-0b63af0e6e9c.roa (raw, json)
Hash identifier:          PDjZXEnjRdZd7suzRvLTJWNfYFyH5BUw3n6/gwebU8M=
Subject key identifier:   FC:45:62:01:88:00:80:51:93:BD:7B:AF:A9:58:C9:87:8C:2C:0C:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2BE7077DF7C85C7FA26B0880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c96a8b4e-75ee-3135-8629-0b63af0e6e9c.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2b:e7:07:7d:f7:c8:5c:7f:a2:6b:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=27e96305-56bd-4ee8-9b3b-685e4e80935c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:15:5d:46:23:d0:e4:1b:42:56:d5:93:35:
                    ac:99:4c:2a:63:67:52:f0:22:7a:ef:45:4b:94:ab:
                    71:e1:6d:8f:97:bc:7d:07:b7:0d:3a:31:24:ef:ce:
                    d9:c8:7e:9c:51:55:80:06:57:23:af:36:cc:0f:c8:
                    99:71:48:95:c6:f9:1c:96:08:a9:b9:f2:bc:2f:1b:
                    a9:09:ad:4d:5c:d1:d2:07:e1:35:50:5a:a2:35:2b:
                    05:6f:d7:ef:5b:57:ad:71:a0:6c:27:2a:57:57:e3:
                    32:51:f2:f2:9b:7c:e8:fd:35:ee:63:cd:0a:e6:2c:
                    57:e6:31:82:ec:c5:4b:9f:e6:d3:f4:9d:58:01:2b:
                    41:59:6e:75:d5:2c:c1:a4:b7:10:4a:37:3a:ee:66:
                    bf:20:ae:6b:ff:0d:06:15:4d:be:e0:ae:10:6b:49:
                    44:39:fd:1b:30:4b:3c:ee:ae:c6:61:b6:b2:2c:f2:
                    cb:3d:ad:e2:bd:8e:d3:b4:2d:9a:b6:cb:ae:b6:9d:
                    75:04:05:b5:36:16:21:55:3e:fb:ff:f2:4f:54:4e:
                    72:b0:b1:15:c9:22:a8:bc:a8:0e:ed:ef:ea:23:c6:
                    42:8d:32:c1:38:11:ee:9a:9c:5b:57:8c:d6:ee:92:
                    27:16:57:7d:44:53:70:e2:6e:6d:61:60:f4:db:c7:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:45:62:01:88:00:80:51:93:BD:7B:AF:A9:58:C9:87:8C:2C:0C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c96a8b4e-75ee-3135-8629-0b63af0e6e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:13:ad:2f:f3:ee:53:30:fa:a0:e3:67:40:ec:1e:6c:6f:
         16:ab:e5:70:b6:67:01:4b:3f:af:d9:12:79:94:8f:d0:2b:61:
         c5:08:3b:5c:b2:07:3d:a3:51:6c:ca:3a:bc:08:9c:51:6f:ef:
         dc:82:9f:6e:2e:6f:83:27:b3:b1:7e:f3:7c:44:ff:6e:9d:d1:
         d5:da:21:c6:57:13:8a:ae:52:5b:da:dd:9a:f7:4a:c5:57:ae:
         8e:72:b1:0c:a9:09:e7:e4:fa:60:e4:04:9a:d9:ff:eb:94:da:
         98:e0:ef:58:51:62:93:3c:1c:3d:5d:ae:a0:57:04:94:7a:21:
         b2:f0:39:de:fe:b4:b4:34:87:5a:0b:13:e8:0b:1e:7c:7c:0d:
         c2:0f:7c:6c:70:17:9c:d5:2f:bf:32:16:bb:07:a0:3e:e4:e2:
         d2:3e:92:31:42:86:37:df:30:02:ac:06:09:f1:34:be:af:1c:
         97:c8:04:7a:ce:72:98:0d:c8:c9:3e:0e:36:ef:97:e7:94:f6:
         35:ae:a1:5d:da:11:a9:8d:00:ce:fa:0d:2f:8b:88:fe:d3:3d:
         b0:d9:cf:d0:da:19:77:2d:70:0f:2c:d6:f6:94:30:69:20:1a:
         3a:09:ca:ab:cd:4f:ca:be:45:6f:9b:54:e4:42:d8:b3:0e:01:
         a0:d2:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:46 2025 by rpki-client