Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb73f0dd-28f0-3f13-9ce1-af9ef2e3dde8.roa
File:                     cb73f0dd-28f0-3f13-9ce1-af9ef2e3dde8.roa (raw, json)
Hash identifier:          F1KbfPp4zIq+0jZT2kwo6NP2L9EglMie3d1XOPty2zs=
Subject key identifier:   A9:65:98:EE:23:F8:E4:2E:D0:8F:1F:C1:B8:0C:20:67:EC:F6:D5:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8BA4A8299F7314DB16F92DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb73f0dd-28f0-3f13-9ce1-af9ef2e3dde8.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Tue 17 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:a4:a8:29:9f:73:14:db:16:f9:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : May 17 04:00:00 2022 GMT
        Subject: CN=ad9e0898-7226-4025-a40e-318f4ef3cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:41:db:58:b4:1f:e7:a2:06:4f:de:23:65:
                    db:67:16:0e:ad:f1:9f:66:82:62:1b:26:ac:f0:06:
                    8a:22:65:30:f7:24:bd:34:65:1f:d9:d1:3f:aa:01:
                    0e:09:88:a7:1a:76:dd:0e:ed:de:eb:26:e1:d0:b9:
                    58:a1:77:36:80:d7:44:46:f8:26:3d:99:e3:dc:08:
                    09:39:dc:32:7b:3b:04:63:a1:66:85:22:c9:5f:69:
                    3d:14:5b:45:f8:a8:c0:21:31:bc:56:b1:d7:fc:4f:
                    06:77:94:56:7d:37:7b:b9:94:fe:d1:84:d0:b3:e2:
                    16:94:b9:32:e7:9b:57:e6:3e:fe:83:f0:d2:9e:80:
                    f8:85:f5:4d:b5:f8:5c:96:35:b1:86:ec:79:3e:93:
                    af:6a:2f:0a:dc:e8:a1:d8:cb:0f:7d:8b:45:72:ac:
                    82:50:b7:c7:37:98:0e:37:4b:60:a0:ae:d1:54:8b:
                    fc:2a:a7:c2:24:3c:68:df:33:a1:6f:67:c5:3d:5d:
                    52:72:3a:db:44:46:26:00:cf:ff:72:b8:0a:c1:02:
                    f6:f6:d5:a6:27:85:7d:de:36:90:7d:e5:80:a9:e1:
                    3f:8f:80:81:aa:63:5f:72:08:ea:4f:46:9f:76:c7:
                    79:75:0c:51:25:14:af:4d:80:e1:77:40:6c:bd:26:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:98:EE:23:F8:E4:2E:D0:8F:1F:C1:B8:0C:20:67:EC:F6:D5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb73f0dd-28f0-3f13-9ce1-af9ef2e3dde8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:a1:b6:20:14:b1:bf:08:34:a6:a3:6d:84:80:17:d9:5f:
         50:1e:4b:5c:67:ac:38:38:42:3f:82:c9:cc:14:2f:2d:d9:10:
         b1:05:54:40:da:89:c1:23:60:10:bb:9b:3b:ad:a2:e2:89:2b:
         d2:4b:95:a6:79:ca:5f:14:5f:04:82:d0:0d:b9:d0:c3:67:ac:
         2d:57:c9:9a:6a:e5:a8:65:45:df:36:e9:8f:37:29:40:3e:63:
         a4:88:a1:08:f2:db:65:c5:4a:15:e5:8e:b4:7a:42:23:65:ab:
         a1:0d:3c:52:75:9f:d8:01:22:49:8f:48:05:dd:fc:5c:55:0f:
         8c:13:44:cd:34:2e:70:29:3e:25:ef:15:94:6a:b8:ae:1e:f6:
         70:7c:8a:88:66:02:43:9d:ea:f3:ef:61:0e:9a:af:4f:a3:cd:
         3d:f3:04:ce:63:89:4f:73:ea:e4:36:eb:58:4c:0d:74:df:12:
         1d:d7:a3:05:55:2c:c9:f9:07:05:cc:f8:98:69:b8:04:25:b3:
         29:b9:f4:af:a9:d5:f2:ee:48:0a:11:a6:10:6a:a4:ab:29:08:
         f4:ef:ec:5d:77:6f:d1:f0:9e:90:43:a4:b6:fe:ad:ff:a4:4f:
         ed:96:fb:a7:b9:a2:d0:66:59:10:52:66:1f:f5:f6:46:ac:b4:
         4e:38:95:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:12:05 2025 by rpki-client