Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1117cc8-e35a-340f-979c-a6c538ddecc0.roa
File:                     d1117cc8-e35a-340f-979c-a6c538ddecc0.roa (raw, json)
Hash identifier:          z3f2j5hBtLrKa4okSqqlA4c+BdF/V293hDOkk0oab28=
Subject key identifier:   AC:20:8B:29:91:43:5F:5B:E1:82:76:0C:14:62:F4:F1:47:89:46:AE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C79FF0F45FEA382F8507FFBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1117cc8-e35a-340f-979c-a6c538ddecc0.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.185.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:ff:0f:45:fe:a3:82:f8:50:7f:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=ec0c0c95-626b-49ef-b99b-ca2ef1f88588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:e8:29:04:f9:d3:70:ee:d7:21:26:cc:bf:
                    8c:ae:98:e7:70:67:f5:15:2a:98:a7:48:cd:78:c0:
                    2c:fc:20:c7:93:90:d6:a7:13:47:e7:bd:14:34:24:
                    9c:40:14:aa:16:98:91:8e:86:79:68:3e:c9:83:e9:
                    ab:81:3a:fb:8d:16:33:3e:bc:49:d6:be:fa:48:aa:
                    cb:c5:9b:0f:e6:88:28:b7:ef:9a:98:da:c0:c6:c4:
                    74:05:7b:64:ad:f6:e0:31:e3:e4:30:47:de:5b:dc:
                    76:b1:d5:b9:70:f4:d7:e7:b1:75:01:ae:56:28:47:
                    fa:a4:f1:9b:8d:fd:51:52:a1:14:ff:a0:e3:74:d4:
                    8d:82:18:e7:f5:b2:c8:3a:5a:7b:7e:4c:fa:b5:37:
                    27:bd:63:78:d6:e3:89:d8:41:bc:8b:8b:7c:70:30:
                    ca:dd:9a:6f:84:c6:9f:94:28:fe:b6:60:11:de:18:
                    41:4a:fa:56:66:c6:a1:3d:24:88:af:7f:ab:91:94:
                    7d:7b:b4:1c:3c:d0:e2:7e:64:b9:c3:61:48:aa:24:
                    93:f2:85:5c:8c:16:47:68:12:6c:1c:41:61:80:4d:
                    77:73:c3:f7:56:e8:1d:81:35:e3:aa:b7:20:b6:62:
                    32:3a:0d:48:a4:9a:79:24:ae:95:77:08:8a:56:2d:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:20:8B:29:91:43:5F:5B:E1:82:76:0C:14:62:F4:F1:47:89:46:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1117cc8-e35a-340f-979c-a6c538ddecc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:fa:a5:3d:da:71:20:fe:e1:85:54:c1:58:62:58:3a:89:
         2f:7d:8d:44:ac:08:eb:41:dd:7e:ee:2b:bf:69:19:bb:ce:06:
         4f:eb:a0:53:66:0e:50:33:3e:bb:4c:9c:1a:d0:8e:9e:7a:ec:
         04:e7:ca:b5:c2:05:23:84:96:85:cc:a9:8a:c7:0a:d1:42:4b:
         70:9c:ca:bb:c4:45:61:d3:87:ac:36:11:b3:77:01:52:48:fc:
         bf:56:c9:43:a4:f4:0e:49:1f:a3:54:af:15:fd:60:6e:89:02:
         39:bf:ee:ae:56:8c:28:5d:a2:ad:eb:a3:e5:8f:df:66:f6:ee:
         e5:86:e6:db:64:63:20:cf:2b:00:ff:7c:4e:bc:ba:eb:29:7a:
         57:3e:a7:b2:b2:f2:ad:3e:db:3b:3e:ef:8d:c1:0f:40:3b:36:
         6c:a3:71:c5:9d:da:77:0b:90:27:78:bd:a1:28:62:05:eb:24:
         8d:d2:25:31:25:39:c3:13:77:85:15:48:22:8c:a2:9c:02:41:
         73:4c:2a:5a:b8:35:b6:57:68:69:13:32:ef:52:74:76:d9:8e:
         3e:67:63:59:af:87:4a:5b:fc:ac:c9:1e:31:0e:f7:70:bf:5b:
         94:92:0e:cd:fa:80:22:e1:4f:56:29:c8:3c:7a:30:50:83:c2:
         39:4e:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:53:00 2025 by rpki-client