Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0279984-8ad9-31ff-8b1c-1933c64925d2.roa
File:                     d0279984-8ad9-31ff-8b1c-1933c64925d2.roa (raw, json)
Hash identifier:          Zm0U6OY3833LYc9/5JM+1mqWIjpzN3xbU3BSvpV1OjY=
Subject key identifier:   8E:84:81:B9:55:AF:3A:5B:E1:3C:FD:FD:64:E0:21:9D:28:12:2B:3E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF52D2AFAE156DEC3C091D100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0279984-8ad9-31ff-8b1c-1933c64925d2.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f5:2d:2a:fa:e1:56:de:c3:c0:91:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=f59ea742-66f6-450c-a154-b0569d49c1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:14:fa:c1:a2:de:ae:34:45:b1:f5:da:1d:
                    9c:d6:1b:ab:f1:dd:0e:03:4e:9f:f4:b5:b6:51:d6:
                    59:f1:47:a1:c8:5f:c0:e4:6a:f4:39:ef:24:14:95:
                    e9:a2:ad:c0:1d:e1:0f:2c:1e:67:0e:93:87:6f:76:
                    98:a7:66:17:3d:40:d5:e1:18:15:b1:1f:a8:08:6d:
                    e6:28:c1:d8:9a:c8:59:4b:6b:69:2e:23:ea:81:21:
                    94:e6:6d:29:13:a7:a2:9b:27:5e:e1:3e:92:a4:e9:
                    83:83:2f:2d:31:f1:fd:cc:ca:62:76:1e:e0:c7:5a:
                    89:45:7f:24:3f:41:84:87:61:93:98:4f:1d:35:90:
                    ff:4f:49:a9:2e:3b:ff:db:d5:b8:a5:47:38:17:f2:
                    9d:c6:48:6c:06:fe:40:cc:78:27:4b:d9:0b:cb:38:
                    bf:b3:eb:4a:15:5f:6b:5f:1c:50:e4:fd:c4:95:61:
                    2b:3b:29:31:2f:9c:47:e6:f7:17:70:71:e7:87:84:
                    a2:93:f4:0e:05:99:d6:a2:78:7d:07:fe:3d:7d:da:
                    2b:a3:63:fc:59:db:08:1b:85:e6:d8:0a:d2:93:a2:
                    f4:a3:bb:5c:9e:de:26:5e:d3:b1:0b:95:14:72:6e:
                    42:16:40:b4:9b:eb:42:5b:af:80:2a:a5:43:ad:40:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:84:81:B9:55:AF:3A:5B:E1:3C:FD:FD:64:E0:21:9D:28:12:2B:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0279984-8ad9-31ff-8b1c-1933c64925d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:10:c5:6f:9a:8a:55:26:68:88:d2:4f:80:06:f3:c9:44:
         92:b9:a0:90:b6:36:a3:0c:30:aa:72:82:af:7d:54:9b:fa:e3:
         ce:7e:60:3b:0c:19:b6:ef:aa:5e:44:25:f5:2f:1e:d6:c3:1b:
         96:60:20:b9:07:59:7e:1e:ac:27:0b:80:64:94:12:f5:11:ee:
         ec:4d:63:d6:30:b4:28:33:86:8a:bd:88:f3:36:8a:29:2d:52:
         85:f0:49:df:86:28:a1:0d:48:3e:81:ab:39:07:70:91:0a:34:
         28:fa:56:cf:92:49:02:e5:8b:01:75:82:79:96:ba:c2:a7:7a:
         75:3d:20:f3:5e:a4:d4:ee:a8:25:ee:1f:5b:66:9f:00:64:60:
         50:fe:02:93:27:42:56:95:5f:70:5b:b5:ca:db:c5:2d:5f:b2:
         8f:90:ad:93:9b:17:7f:2d:cc:c5:b9:41:f3:42:19:8c:88:15:
         a9:45:8a:33:20:0d:b5:16:cb:bb:62:83:ce:3c:d3:ec:a7:c0:
         73:bb:4a:27:e9:64:84:e6:ca:b3:7a:e6:5c:f0:36:4c:89:39:
         93:5f:4f:a6:54:6d:2a:ee:0a:a7:5d:20:03:09:6a:9a:01:93:
         ed:90:3c:de:55:a3:d8:34:8d:e6:6c:47:af:11:cd:b2:70:5a:
         01:df:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:45 2025 by rpki-client