Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc0542b4-6ee2-38cf-90a1-fcded4e92ab6.roa
File:                     cc0542b4-6ee2-38cf-90a1-fcded4e92ab6.roa (raw, json)
Hash identifier:          FVWTwyl7ipkOCej/7nUMV1iQ15Kkn8OV9MLh0IQt9jM=
Subject key identifier:   82:E7:46:90:41:9B:E6:36:58:B6:69:78:75:34:F8:16:9F:57:19:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D1646D2DC574E4925B37C3340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc0542b4-6ee2-38cf-90a1-fcded4e92ab6.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Tue 05 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.20.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:46:d2:dc:57:4e:49:25:b3:7c:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Apr  5 04:00:00 2022 GMT
        Subject: CN=7faa41b1-e166-41dc-b42b-1651f33d53e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:54:17:9b:4a:3f:db:5f:fa:b0:57:5b:44:
                    9c:3a:81:13:c7:c9:30:88:ac:fe:7d:6e:dc:77:4c:
                    61:f8:92:da:24:45:51:fd:9d:65:3a:09:69:4b:58:
                    1f:a1:6d:32:5d:a9:44:b7:9f:55:c5:5e:b9:58:e3:
                    3d:cc:da:f5:b7:9c:76:39:7e:79:cb:e4:c7:84:2c:
                    88:52:41:bd:c1:73:d8:a6:59:06:4e:ce:ea:ca:79:
                    10:e8:bd:34:25:e5:63:07:6f:32:b4:1a:a0:b0:3a:
                    d2:1d:30:b8:b9:56:33:e3:82:1d:bc:1f:a8:b6:ad:
                    39:51:c8:c6:85:70:3a:ea:a6:e7:c7:d9:af:a8:ea:
                    cb:d7:24:fa:3e:b9:a0:04:6b:34:d8:ef:55:a0:b7:
                    42:94:7f:13:cb:8e:3a:07:4b:92:ef:d7:bf:c7:7e:
                    6b:4c:22:a8:a9:dd:0f:d9:51:9e:3b:71:0f:99:91:
                    95:10:e2:3e:f1:75:9f:b1:16:fd:7e:25:67:6e:01:
                    6e:54:40:5c:f4:c4:b9:80:51:1a:12:cd:8a:de:69:
                    d3:78:1c:b9:25:80:82:c6:ed:dc:da:f0:27:67:94:
                    32:b6:c0:8e:10:ca:63:70:bb:80:ab:b3:ca:94:76:
                    3b:40:8d:b4:4c:2a:c7:64:ce:50:47:a9:9a:99:ee:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E7:46:90:41:9B:E6:36:58:B6:69:78:75:34:F8:16:9F:57:19:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc0542b4-6ee2-38cf-90a1-fcded4e92ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:02:0b:a8:fe:63:f4:bd:97:e6:32:a5:9b:5c:42:4e:22:cc:
         96:26:e0:f5:e6:02:e7:63:7f:c8:57:6f:c7:3d:00:56:8f:45:
         d2:2a:b0:b2:7b:8f:50:d4:a2:5c:80:6d:6a:8a:bf:bc:55:27:
         4c:47:76:0f:21:97:b8:51:45:f3:1f:8e:6c:2d:04:49:b7:87:
         8b:20:bc:e3:46:a2:3f:49:49:03:c7:3a:87:24:1a:8f:6a:02:
         5f:03:24:29:7d:31:06:8b:e9:4c:7b:cd:a2:ea:40:11:cd:ae:
         84:ee:ab:39:49:05:b4:26:51:56:0d:f0:23:55:d1:bf:cb:76:
         ca:10:29:e8:0c:92:b6:1c:d5:a7:03:24:8a:42:e9:58:bb:25:
         a4:05:e5:7e:74:25:a6:d0:a9:d4:18:11:e4:7e:04:a0:62:99:
         da:97:09:74:2e:64:fd:07:2c:69:36:ff:b2:c6:6d:3b:e6:ce:
         80:b0:70:67:51:84:83:41:c7:f0:9f:92:00:73:17:e1:7d:f0:
         49:94:fd:09:7b:11:41:b8:2a:10:c7:3c:41:05:7d:bd:a4:13:
         7b:17:af:dd:60:e6:91:55:94:d6:9a:44:ab:86:34:7e:dd:03:
         16:f2:cb:ab:28:62:40:11:17:46:c4:45:7b:11:41:7a:43:17:
         5c:9c:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:43 2025 by rpki-client