Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbfb78b4-c45a-3c72-87a3-17eef138114a.roa
File:                     cbfb78b4-c45a-3c72-87a3-17eef138114a.roa (raw, json)
Hash identifier:          aF/z3DPS5Tkvs1vFvZsB654XJyl/vyVoaTLec8xnZhc=
Subject key identifier:   E8:5C:98:E3:2C:71:07:A4:71:C5:83:D1:B5:AF:F7:3E:D1:36:0D:D0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7FB1142A52A48E07D4D83180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbfb78b4-c45a-3c72-87a3-17eef138114a.roa
Signing time:             Thu 07 Apr 2022 04:00:00 +0000
ROA not before:           Thu 07 Apr 2022 04:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7f:b1:14:2a:52:a4:8e:07:d4:d8:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  7 04:00:00 2022 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=9ce45669-a8d0-48bf-af64-af08bba9a528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:ff:1a:48:56:65:63:89:64:3b:6f:7e:d9:
                    6b:87:ad:3f:10:43:9e:46:aa:4d:17:e8:67:35:0e:
                    52:ee:1d:07:f6:21:21:4b:74:ec:99:e1:7b:87:36:
                    83:88:b6:03:59:96:7d:bd:5c:95:00:36:0e:26:21:
                    b9:bc:f2:8b:a3:17:84:6c:e8:8d:36:d3:50:b1:61:
                    c4:3d:55:16:6e:46:10:05:41:b0:60:05:cc:28:9d:
                    91:6d:6c:46:dd:88:09:dd:de:28:02:06:fc:d5:ab:
                    17:47:24:e5:12:32:17:cf:49:8d:3d:6f:09:8d:7e:
                    61:85:b1:72:bb:68:97:be:79:6f:73:32:97:aa:6f:
                    b8:e9:3f:ed:20:2a:d5:a7:48:92:4c:fe:12:3c:80:
                    f9:a6:d3:54:89:d5:53:b7:76:70:ce:8a:e3:64:c3:
                    42:38:0d:ea:53:75:69:fd:c3:2e:1f:25:9e:3c:43:
                    2d:ba:0b:f2:72:9a:ba:3b:89:1c:30:86:fb:43:be:
                    b8:31:c2:9f:74:f4:b3:dd:08:3e:b0:cc:8d:84:2e:
                    4f:6a:94:e2:29:95:ba:11:11:2c:d6:ee:da:3b:8f:
                    2b:96:9b:4e:5e:e5:69:cc:28:56:7b:1b:7a:e7:e0:
                    5c:31:c7:50:86:8b:de:7b:fb:67:77:f1:97:7c:61:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5C:98:E3:2C:71:07:A4:71:C5:83:D1:B5:AF:F7:3E:D1:36:0D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cbfb78b4-c45a-3c72-87a3-17eef138114a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ac:68:ac:31:20:eb:e3:04:5e:78:af:8d:70:8b:23:57:ce:
         36:56:b0:06:28:97:3e:7e:47:bf:c1:39:e3:7d:82:38:bc:bf:
         54:ab:d1:ea:bf:b2:ce:57:e6:9c:42:6c:5e:cd:65:6c:cf:34:
         28:86:81:a5:45:d6:e0:cc:cb:21:01:3d:4b:2a:28:20:fe:59:
         26:78:e1:f5:ab:bf:1a:5b:66:0e:d1:83:91:0c:36:0e:3f:ea:
         41:e4:9c:90:e3:b4:67:e8:f4:58:47:94:a1:ae:41:8b:5c:b2:
         0d:c4:b4:d5:c9:b8:bb:5a:40:76:04:4c:04:93:cb:39:b6:3e:
         2d:af:85:e8:5f:59:51:f0:27:44:43:62:22:69:29:ce:78:83:
         5d:7c:e0:81:6c:d6:fb:8a:4a:01:8c:73:62:56:c9:97:74:8a:
         cf:14:b5:05:c6:b9:55:82:d4:ac:fb:61:f1:b0:7c:c3:8f:b2:
         17:03:31:58:38:d6:88:49:c3:81:6c:ea:d5:0b:7d:01:5b:fd:
         21:40:59:0d:75:aa:a0:1d:77:0f:d1:81:24:c4:df:8e:f6:2a:
         98:ee:f0:6a:1b:ab:e0:0f:9c:ed:6b:93:94:c9:21:46:90:cf:
         f2:2b:29:2b:4d:6c:47:99:df:60:48:ac:9a:fa:1c:5c:a5:3b:
         2c:b3:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:16 2025 by rpki-client