Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdf78dcf-a20e-3414-be16-49465fe0f5cd.roa
File:                     cdf78dcf-a20e-3414-be16-49465fe0f5cd.roa (raw, json)
Hash identifier:          m039sjPrc92Tccoo1oDUMjZl2pPQd4pyvxqiYD2fPN4=
Subject key identifier:   36:A2:22:48:4E:88:B7:2E:1C:74:4C:12:09:C3:EC:FF:1D:9C:9E:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA16363319D0E6F74C2FE8980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdf78dcf-a20e-3414-be16-49465fe0f5cd.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:63:63:31:9d:0e:6f:74:c2:fe:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=dcfee7fb-23b6-406c-8ae2-cf5dc2840cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:cf:75:98:33:d3:06:49:cc:50:6f:4c:c8:
                    52:55:d8:ee:60:62:73:e9:cc:65:85:75:a8:d4:65:
                    5f:17:92:24:c9:58:85:5a:8c:b9:9f:e5:14:83:82:
                    14:d1:92:18:51:23:94:a9:d5:1c:26:c5:2d:06:c0:
                    4c:7c:1c:1c:44:76:72:5c:82:2a:b7:11:6b:0b:1b:
                    66:65:0d:f0:2d:db:13:6c:18:b0:c6:a2:2b:de:bf:
                    e2:87:4a:50:21:71:fc:c1:cf:19:db:87:08:f0:bb:
                    7e:85:8e:bf:9b:23:95:b0:6f:94:97:ca:a6:6b:ae:
                    c1:c5:5d:f3:af:19:44:8e:58:f7:93:80:65:02:48:
                    4e:85:eb:81:cc:38:1f:c3:0b:84:b4:58:6b:0f:ec:
                    a6:c4:21:95:5e:3b:b5:ff:ce:5a:e0:02:cc:82:61:
                    62:0a:d6:78:69:93:e7:c1:2b:dd:02:db:3a:d4:20:
                    a9:a2:93:93:94:4f:56:0a:3b:15:ab:ef:f4:61:bd:
                    56:d4:33:df:72:a6:dd:fe:c6:37:75:43:30:8c:89:
                    64:05:5c:e0:b6:f5:ad:dc:36:88:51:ad:99:2d:a1:
                    41:33:92:0c:9b:c3:7f:ee:72:2c:af:a3:d1:3b:27:
                    b1:f9:28:1f:4b:45:71:2c:0a:55:8e:a3:7a:77:f1:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:22:48:4E:88:B7:2E:1C:74:4C:12:09:C3:EC:FF:1D:9C:9E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdf78dcf-a20e-3414-be16-49465fe0f5cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:5d:25:07:82:5f:de:03:f9:61:68:10:b6:99:28:e0:b5:
         56:0b:d6:b3:b2:e4:16:14:f0:cb:a4:1e:1d:25:67:4f:ec:04:
         39:82:2f:51:a6:ae:14:08:43:4f:37:cf:16:33:f0:24:8b:65:
         02:32:6c:2b:de:c0:5d:08:ea:15:9d:e1:b1:0b:db:81:0d:4e:
         cd:40:bb:a0:4f:69:be:44:f1:24:9b:86:7f:a6:b8:6f:77:92:
         79:9b:35:0d:65:f0:52:c5:69:a4:2b:a4:3d:d7:e4:6b:29:64:
         88:a2:14:0f:78:11:5f:b6:3d:c9:ff:48:c0:5b:33:6d:a8:a5:
         aa:58:80:fb:44:1c:1b:e2:05:7a:62:86:00:ad:d0:93:8b:86:
         35:69:c3:19:8f:c7:13:4a:70:c4:37:f4:1e:4b:8e:0b:e1:3f:
         f1:39:94:b1:b9:96:b7:70:11:c8:15:ed:07:bd:21:ef:17:b1:
         2f:24:a9:c4:0b:0b:bd:4b:ce:94:78:a9:85:5f:bc:de:c6:28:
         37:fc:bc:6d:2d:94:f4:e5:1f:16:ca:1c:02:01:c8:24:66:b3:
         da:8b:1b:d4:83:30:20:f1:0f:2e:e1:1a:01:5b:11:48:cf:fe:
         c5:cf:46:19:cb:9a:77:ea:48:63:93:72:6e:95:73:22:4a:6f:
         c2:77:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:58 2025 by rpki-client