Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3a6dab-8ee4-32d0-a6af-794fd28efafb.roa
File:                     cb3a6dab-8ee4-32d0-a6af-794fd28efafb.roa (raw, json)
Hash identifier:          UJ3GpKj7nw9PHAAdg7FI2KJFgN31Z4mtvxqqAPFhrx8=
Subject key identifier:   51:5F:9D:C9:8F:4A:B1:62:6B:BC:1A:D4:40:99:DE:4E:1A:FA:62:83
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F39F2C0D1FFCE32E39F940140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3a6dab-8ee4-32d0-a6af-794fd28efafb.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:39:f2:c0:d1:ff:ce:32:e3:9f:94:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=1b2e0cf7-7d70-4ba5-ba49-970667c46336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:48:be:3a:6a:67:75:43:aa:21:ee:6a:e6:
                    74:5f:18:c6:91:94:d6:50:c0:ae:5f:e6:2f:6b:92:
                    41:11:d9:85:38:4d:cf:2a:7e:7c:a3:8e:d1:27:57:
                    10:2f:6b:4a:dc:6e:0d:3a:52:ce:4d:c7:1f:92:33:
                    15:52:8a:5f:27:d8:83:0f:db:19:4a:18:0f:19:b3:
                    c1:4f:79:8b:cc:e4:b9:0b:dd:e0:ee:d7:a5:ef:a4:
                    c1:7b:9b:63:25:26:dd:d2:d3:ff:85:5b:b0:4c:44:
                    96:b5:1b:8e:43:0e:8e:3b:3d:33:c5:c8:f0:67:09:
                    37:d0:b5:83:9d:ab:c0:ac:a3:fe:1e:f2:82:23:a1:
                    1e:76:65:a8:f9:9f:b2:e4:cd:00:ca:d0:04:a4:a2:
                    5e:58:f5:93:63:b0:48:91:ca:2e:48:71:df:8a:f0:
                    cd:3d:14:89:bb:fe:5c:5c:d7:76:46:7b:b4:ae:b1:
                    18:cd:2a:8f:bc:e0:21:9c:17:46:77:eb:ef:b2:44:
                    aa:9b:43:fb:19:55:d5:da:a1:5a:7f:b3:50:03:43:
                    5b:57:c8:76:2d:af:43:ef:74:eb:99:7f:40:0b:58:
                    b8:ad:80:96:8e:b4:01:28:ca:71:ca:5a:93:d0:32:
                    22:2c:63:a2:b4:ed:bf:e5:b7:21:81:e5:e1:dd:3c:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:9D:C9:8F:4A:B1:62:6B:BC:1A:D4:40:99:DE:4E:1A:FA:62:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb3a6dab-8ee4-32d0-a6af-794fd28efafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:86:38:82:85:ee:f3:3a:9e:54:ec:f8:e8:bd:5e:1c:ab:0c:
         29:a4:b9:d5:a0:cc:dd:bb:59:91:3c:ac:a2:c3:d8:4c:9e:3e:
         df:f8:50:bd:e4:39:0c:48:10:ff:18:aa:2d:c9:e1:53:1b:6a:
         86:16:f9:63:14:af:e1:d6:64:66:32:d0:42:fa:01:d0:5e:90:
         3a:83:9c:49:dc:df:dc:65:32:90:4e:b5:4c:b6:5e:68:06:90:
         a9:86:66:ec:be:83:01:d2:5d:5c:9e:7d:3f:14:4e:44:fb:0b:
         80:91:92:29:c6:e0:1b:a0:67:7f:28:03:ce:ea:e6:1b:61:9c:
         91:6d:0f:a1:3e:c7:9d:c8:99:27:ea:e9:82:b9:32:f7:49:a6:
         b2:71:0e:2a:ba:85:28:1e:bf:16:3f:df:fb:03:54:e8:00:4d:
         a0:32:1e:17:e6:7f:70:dd:1d:3b:74:33:95:cd:99:a7:54:c9:
         eb:9b:39:f4:7a:e9:ca:1a:01:8d:65:a0:8b:a8:32:e7:36:bd:
         0c:6a:a7:bf:21:53:43:fc:8d:98:3d:48:b3:98:68:65:07:bc:
         02:d7:6e:b9:63:fc:1f:ef:ed:f0:80:7c:71:a4:a0:26:cb:3d:
         aa:a7:22:40:22:e1:25:ad:87:4f:80:35:90:93:24:6f:5d:94:
         84:89:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:26 2025 by rpki-client