Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb47099b-3d7d-30fc-b848-8e1415eb61cd.roa
File:                     cb47099b-3d7d-30fc-b848-8e1415eb61cd.roa (raw, json)
Hash identifier:          8TNF0fyYBzukQQTmYtTczUS3bvhz6fKvyKPW37zutAs=
Subject key identifier:   33:59:5A:F4:1A:37:0B:AA:0A:3D:B7:6F:B7:F2:A5:CE:EC:7F:0B:AB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC8D9CAECF14C88AD83E360D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb47099b-3d7d-30fc-b848-8e1415eb61cd.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:d9:ca:ec:f1:4c:88:ad:83:e3:60:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=56750b7f-c0d1-48ae-a22a-4a68ae21c574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:c1:3e:c6:d5:26:77:a8:7d:07:9c:fe:0c:
                    91:b5:b5:e8:bc:4a:de:8c:ac:db:e4:cd:54:3a:82:
                    a0:eb:fe:12:96:37:12:76:f4:fa:7f:94:48:e0:8a:
                    2f:c6:56:f7:ee:47:9c:a5:1f:f3:e9:eb:d2:68:70:
                    44:74:49:8b:5e:4f:ad:1e:13:27:2d:6d:4a:04:77:
                    04:ca:6f:4d:1b:cd:b3:20:8a:b9:82:c6:4d:97:d6:
                    2c:e8:65:53:55:db:8b:aa:2d:c1:fe:ca:22:58:b3:
                    e5:05:59:59:52:d7:88:3a:3e:2e:0c:b4:0e:d8:c8:
                    e6:5a:03:d2:11:d2:0c:de:00:ed:c2:5d:2a:23:ee:
                    fb:b5:8f:10:1d:4a:47:88:88:3e:d1:30:54:98:a3:
                    72:ad:0a:d1:3f:28:fe:f6:d5:d9:fb:cf:fe:bd:46:
                    97:6d:9f:ff:d8:6c:6c:a3:43:ed:9a:93:19:1a:b3:
                    ba:ba:ed:0f:ad:05:3d:89:07:57:32:09:62:91:a9:
                    6f:f7:d3:07:84:df:26:cc:da:b4:83:8c:f4:3d:41:
                    23:99:35:73:da:ba:62:30:a4:48:eb:b6:77:ef:ed:
                    63:a1:22:c4:8c:7a:98:e5:f5:34:e8:58:c3:4f:a1:
                    ff:3b:77:36:93:8b:7a:08:6c:da:ff:16:0c:d9:1b:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:5A:F4:1A:37:0B:AA:0A:3D:B7:6F:B7:F2:A5:CE:EC:7F:0B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb47099b-3d7d-30fc-b848-8e1415eb61cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:00:a1:bb:d3:8d:cb:aa:0a:43:bf:f8:70:6c:0d:53:81:0e:
         61:d8:24:2b:da:91:67:d0:9c:ed:62:34:31:66:7e:23:fc:f4:
         86:d8:25:ac:16:58:18:7e:50:e5:e0:0b:02:54:cf:fa:ef:f8:
         80:18:b7:d2:db:7b:aa:f8:0e:ee:2e:6a:58:a9:26:67:54:a4:
         f6:1e:4d:65:8e:77:3c:e5:5f:38:7a:44:df:85:a2:93:4a:a5:
         96:b0:4d:0b:85:09:2c:cb:f2:58:6e:c1:ea:be:df:c0:8c:c3:
         c6:86:7c:77:11:03:8d:a9:42:3a:bc:84:ff:da:59:e8:d2:2d:
         37:05:f9:e4:83:44:0d:d8:7d:b1:77:04:c6:de:17:5e:fe:7e:
         2d:c7:94:4d:74:35:8a:b3:e8:45:f4:d6:87:3c:e4:2d:e0:fe:
         97:91:12:36:04:ea:f8:7e:f9:6e:a3:dd:0c:ac:5b:11:4d:a3:
         5e:10:2c:52:d5:db:37:28:b4:3a:ed:aa:d3:19:d4:f3:e6:cb:
         6e:e3:2a:62:2f:57:e2:d1:cf:0c:eb:75:ca:32:08:a3:aa:04:
         30:69:35:43:76:0e:59:3e:1b:e3:04:82:ee:9f:ac:3f:2a:31:
         f5:5f:f3:a6:a6:58:e7:7b:42:04:16:f8:80:30:ed:d5:a6:3b:
         35:ae:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:49 2025 by rpki-client