Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c98a5290-09bd-30fc-b165-9a848e6df2bc.roa
File:                     c98a5290-09bd-30fc-b165-9a848e6df2bc.roa (raw, json)
Hash identifier:          to8rE+hSbC0YcxqQtRdIXLimCjQJiubQqfIxZEf+7sA=
Subject key identifier:   D7:B5:29:47:54:4F:C9:A2:DE:7E:DB:F5:88:94:5A:01:90:FC:F7:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF30BC8661139A827D1A32A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c98a5290-09bd-30fc-b165-9a848e6df2bc.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:0b:c8:66:11:39:a8:27:d1:a3:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=8105a9f0-71a3-4639-a043-b3b483d1ad72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:4e:c6:8e:db:93:48:e7:54:fb:1d:4c:7c:
                    57:9c:c6:c8:86:ac:eb:89:4e:0d:27:10:37:be:63:
                    92:aa:0a:f6:84:08:5b:41:96:6b:12:b1:a7:11:1c:
                    f8:09:10:d0:ce:1d:7e:43:59:09:1e:cc:10:81:31:
                    2c:66:7f:9a:2e:5e:d4:44:c8:ab:5b:df:94:cc:f6:
                    44:71:70:ae:9b:63:ee:cc:d7:cb:98:56:ad:9d:af:
                    17:00:0a:29:c9:89:99:28:51:bd:82:77:1b:e1:e8:
                    3c:c4:cd:3c:7b:25:d6:d4:61:2d:5a:6c:8b:20:f5:
                    e4:89:30:c7:9f:04:b4:86:9a:3e:45:fe:47:82:61:
                    b3:99:5a:de:41:bb:b4:bc:c1:c8:68:03:80:d3:be:
                    6c:e2:5f:13:e6:84:5c:c1:a9:a4:68:fd:0a:f2:07:
                    ff:06:ac:ff:3a:57:0b:c0:72:24:ec:51:27:1c:16:
                    f2:98:4a:3f:a9:fb:a1:b9:24:01:7a:03:99:55:b8:
                    b6:26:69:47:6e:15:b0:e1:2a:ec:b3:e0:45:8b:16:
                    f4:3a:3c:13:08:68:9d:23:8f:bf:f6:0f:4a:06:68:
                    e1:1e:d2:dc:46:a9:61:af:6d:fb:17:66:2a:a0:2c:
                    ac:7c:5d:b2:12:b1:88:c1:d4:9a:53:34:72:89:ca:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:29:47:54:4F:C9:A2:DE:7E:DB:F5:88:94:5A:01:90:FC:F7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c98a5290-09bd-30fc-b165-9a848e6df2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:05:43:ed:6f:04:d8:8a:21:1b:ec:df:94:53:42:bf:bc:fb:
         4d:a2:bd:6b:64:e8:a0:ab:b1:25:a2:56:51:b0:2c:84:ba:5a:
         68:bc:e9:23:8c:ab:77:bb:8e:9d:3f:d3:12:f2:58:08:16:96:
         24:67:58:46:f3:05:0f:fb:d4:5d:40:b6:c1:96:d2:f4:68:15:
         16:e4:50:ed:c1:ad:ea:ea:4b:4d:04:4e:6b:d6:3d:8b:46:1c:
         61:54:80:90:17:0f:8e:9a:dd:a6:07:51:1a:6a:c7:86:00:85:
         03:77:58:a0:36:25:96:52:26:15:c8:ef:26:41:be:53:04:29:
         3f:43:5d:63:30:e5:c7:fa:e9:ac:12:9a:4a:cd:93:96:90:75:
         6e:74:90:12:f5:fb:90:dd:74:04:4e:92:cc:52:ca:af:97:e1:
         95:d4:35:5e:d2:45:05:ec:9c:46:af:90:b8:8a:36:21:5b:66:
         f7:4f:1b:ce:57:f7:5f:be:47:89:86:c8:24:75:9e:16:73:33:
         8d:e7:25:db:df:4c:8c:91:5b:f2:ef:6b:74:e2:ef:2d:b0:11:
         b4:71:ef:12:37:9a:98:9d:8c:4d:27:63:fb:63:5a:5c:96:02:
         31:02:a2:eb:59:e8:b9:3c:e5:29:bf:f5:5b:a0:84:80:e9:53:
         a0:9c:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:48 2025 by rpki-client