Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cea8210b-dfd3-32c8-bd86-bef9c194689a.roa
File:                     cea8210b-dfd3-32c8-bd86-bef9c194689a.roa (raw, json)
Hash identifier:          cU2qBN4TWdSkaC7glWaJeHq6ZEkMKAJi+CbWFBwCbOI=
Subject key identifier:   13:CE:8E:6C:D4:EF:5A:5E:C2:BA:06:06:FC:2B:3F:35:84:84:63:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E19CA27F8AD63D95F44FFEEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cea8210b-dfd3-32c8-bd86-bef9c194689a.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:ca:27:f8:ad:63:d9:5f:44:ff:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=3c1790fb-1e09-4c2b-9e74-61b925fa6db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:02:18:5f:82:e3:55:9d:01:58:16:03:53:
                    7b:c4:2c:fb:42:57:10:0d:d0:57:df:2e:f4:8b:f7:
                    d3:93:11:ff:65:23:e8:12:cb:87:60:b7:7c:65:f1:
                    48:ac:dc:b4:f4:71:02:63:df:0b:4a:70:89:0b:50:
                    00:e4:86:6b:34:1d:5e:7f:48:43:5a:0c:8b:61:94:
                    3c:3f:d0:a3:bc:dd:fa:f4:5e:f9:1b:2a:12:78:d3:
                    a8:f5:46:5d:18:62:f2:92:36:75:62:a3:be:20:02:
                    80:6f:c8:dd:fd:6e:e1:bc:1f:62:89:c9:0c:e4:b3:
                    d8:9e:ca:d3:56:f6:92:b0:53:38:11:e4:4d:91:e9:
                    74:76:3f:6a:f8:52:da:0d:75:73:a7:8b:25:e9:88:
                    af:34:6b:25:42:34:38:a6:6a:2c:f0:d8:d0:7a:a6:
                    58:5a:75:5f:f5:e2:ba:f7:15:4c:f5:29:e6:63:54:
                    67:34:50:4c:65:b7:dd:28:23:51:d4:00:6b:ab:51:
                    72:e4:24:d8:aa:a2:53:d5:5c:c6:8b:d1:0c:fe:7b:
                    2f:b0:0d:51:27:1b:28:9d:49:d1:7b:b9:1e:19:79:
                    67:b7:4d:b1:68:92:8a:48:54:fa:0c:9a:0c:43:30:
                    2c:f8:c3:9f:12:b9:e1:f9:9a:57:2c:fc:3d:b6:ec:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CE:8E:6C:D4:EF:5A:5E:C2:BA:06:06:FC:2B:3F:35:84:84:63:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cea8210b-dfd3-32c8-bd86-bef9c194689a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:61:fe:bc:0b:0e:ec:80:d0:3d:6c:d8:77:cb:ec:14:c6:
         fc:d2:44:95:f1:bd:d8:60:9f:3e:92:ec:ea:d4:ad:e4:ab:a2:
         86:93:9a:44:a4:ff:c1:96:16:3e:d9:00:49:81:d0:c0:d4:30:
         fe:d0:c4:9e:e1:dd:a5:22:e0:45:8c:3d:fa:db:dc:f9:0c:89:
         35:8e:da:04:63:eb:1f:99:5f:1e:ef:ed:4c:76:4f:9f:8b:74:
         f5:ee:60:41:f5:90:4c:4d:05:72:c6:ea:43:4b:ef:d1:54:5d:
         29:4e:e6:b8:c9:b6:1f:b4:fe:70:ab:14:f3:ea:3e:7f:98:40:
         dd:16:b1:2e:52:79:38:da:e4:85:7b:71:da:a5:34:2a:52:6d:
         52:5b:91:43:ee:b0:2c:f2:69:f5:7d:6b:14:9f:0e:79:f0:bd:
         e0:92:db:69:b3:0d:37:72:e7:39:8c:4d:87:53:b1:c6:b1:dc:
         d9:57:96:ab:bd:f6:c3:91:e5:8f:53:dc:35:ff:df:69:70:38:
         b2:b2:8c:5a:52:ef:c6:79:00:cf:1f:e2:1b:c7:9a:07:67:8c:
         63:5f:2d:cc:6f:0e:db:fb:e4:02:26:45:15:9e:6b:46:c7:dd:
         58:9f:5f:6b:97:15:eb:65:cd:77:43:a6:e7:68:23:ac:48:f9:
         0f:d7:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:51 2025 by rpki-client