Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9e58492-3211-32f9-a977-28e3b7b85ef2.roa
File:                     c9e58492-3211-32f9-a977-28e3b7b85ef2.roa (raw, json)
Hash identifier:          9JTJMJyN6ZJoo/FnX0OmH+YZGAdwT9qXgmFtrnzs4Pk=
Subject key identifier:   5E:52:5D:2B:25:E7:EB:15:6B:7F:94:6C:31:16:68:DC:0A:81:72:A2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B40E11728D6A607B69874100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9e58492-3211-32f9-a977-28e3b7b85ef2.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b4:0e:11:72:8d:6a:60:7b:69:87:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=8aa488fc-9c8e-4886-9941-a557ab9d9226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:d3:e8:9d:02:86:41:9e:19:6c:b9:fe:d3:
                    80:20:dd:7f:ee:83:4b:a1:94:fe:b4:e9:50:20:35:
                    18:ac:a5:11:29:11:75:a8:de:57:3e:32:b5:05:d0:
                    e5:6c:01:85:ad:14:e5:e7:58:71:0f:72:9e:e9:2e:
                    aa:99:71:00:35:61:42:55:b6:af:39:b5:79:ef:40:
                    58:a7:a7:c7:a6:be:03:c2:c6:96:be:cb:38:b3:ef:
                    f1:ef:2d:78:4e:88:a2:62:46:6d:bf:37:60:1a:d7:
                    68:1f:4b:bb:dd:e1:0e:7a:da:d2:af:ef:b8:de:dd:
                    72:53:56:85:79:f3:76:fa:c9:df:64:1a:36:5d:60:
                    d0:cd:20:18:42:ab:83:5f:63:5e:23:94:72:b4:99:
                    41:07:20:34:94:5a:d6:bb:ca:33:67:aa:0c:e3:5d:
                    11:67:53:d6:34:65:81:4b:b9:0e:9d:a5:21:02:db:
                    6b:86:34:7a:b3:a3:a7:12:89:95:8d:fc:1f:e3:27:
                    2d:44:b2:e9:ba:7f:30:02:0a:f8:52:0e:06:03:98:
                    53:40:fb:51:29:5d:7c:fd:89:3a:a3:b4:93:eb:a5:
                    42:a1:04:6a:52:c1:a0:23:31:34:aa:93:b0:15:44:
                    fe:67:74:c9:43:95:47:45:3d:9f:03:14:c8:2e:12:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:52:5D:2B:25:E7:EB:15:6B:7F:94:6C:31:16:68:DC:0A:81:72:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9e58492-3211-32f9-a977-28e3b7b85ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:b5:ab:ee:28:cb:27:0b:16:26:e1:e2:8e:f4:aa:a0:6c:
         fe:30:a8:92:76:b3:2c:f1:6d:ad:e6:c9:b6:63:eb:22:ca:34:
         ec:23:a4:e3:fc:06:5a:a7:1a:a8:2e:92:40:b8:9b:aa:6a:79:
         64:57:34:de:dc:94:2b:3b:8e:cf:b7:04:85:10:65:b4:dc:54:
         6d:92:c6:6f:a7:0f:9e:a1:26:ee:27:91:50:21:3e:7a:02:32:
         22:5b:fc:3b:97:f0:59:a5:c3:9b:e5:b2:c4:9f:68:b6:bb:fc:
         1e:55:50:8b:00:9a:fb:5f:2d:bc:0c:28:3c:a5:f4:96:e8:1b:
         10:05:a6:28:9c:f3:74:29:68:e1:a7:76:f3:ad:0e:d9:a5:68:
         bf:4b:c0:d8:4d:29:84:b7:e5:51:b5:0b:6c:66:d4:87:cb:81:
         6b:7c:80:49:75:51:09:fe:6e:70:a4:78:2f:c1:9e:fd:71:04:
         4e:ee:f1:66:4f:16:b3:36:a2:25:47:b4:e4:8f:91:89:60:a0:
         40:eb:1c:9c:1e:23:90:56:17:a8:0e:59:bd:df:54:42:02:53:
         d4:82:71:8a:08:d1:99:41:d4:86:7a:31:02:e5:b9:4f:7d:32:
         b0:1b:b7:d1:8d:49:b6:ed:fb:92:c1:4a:b9:d9:da:c7:b0:27:
         d5:8b:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:07 2025 by rpki-client