Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d192b695-1d25-3bd1-a761-e2f7c67240c1.roa
File:                     d192b695-1d25-3bd1-a761-e2f7c67240c1.roa (raw, json)
Hash identifier:          QCjILsUYjgHU2po3NuhN8G6E42Qm8MVgd6PbRDJZ2wQ=
Subject key identifier:   22:13:47:65:AB:8A:21:05:9A:D9:C0:A4:89:C5:5F:F7:41:2A:7C:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B5CCAFEB72BB2659230CF140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d192b695-1d25-3bd1-a761-e2f7c67240c1.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.17.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:cc:af:eb:72:bb:26:59:23:0c:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=efcc4fc7-10cb-485e-97b6-ccddc3af6a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:79:ed:21:d9:0c:a9:13:d3:60:6f:c0:1d:
                    9b:c9:b9:00:09:d1:d9:84:aa:1a:b8:aa:82:c9:e5:
                    9e:25:89:23:9a:29:71:9e:93:1f:b5:fd:88:ee:0f:
                    52:8a:95:ab:82:81:b6:c2:bd:90:e9:9e:13:cc:9c:
                    7d:a4:ce:68:c4:bf:b2:7c:19:ce:ee:18:82:f1:8f:
                    89:84:23:0d:ca:5a:17:3e:82:11:85:d9:86:4e:0f:
                    61:5b:1c:27:64:28:da:37:82:99:41:e0:e2:58:50:
                    12:7c:68:90:d7:39:4c:84:23:57:ad:5b:e9:ad:36:
                    70:4f:59:3b:d1:ae:f4:2d:b4:5a:bb:b0:18:a7:64:
                    59:1c:b5:62:0d:f4:ae:83:32:5c:be:34:4e:76:f6:
                    a4:f9:86:67:d2:a0:e1:c9:2f:78:c7:6b:1e:61:95:
                    15:d5:2d:08:e1:49:76:78:19:2e:95:42:ff:48:f8:
                    7c:4b:1f:52:c8:4b:26:c7:cb:f7:6b:d7:7b:8a:cb:
                    c1:b2:31:ac:94:49:2f:31:1c:8f:85:d1:2b:b8:06:
                    88:10:dd:7e:4a:20:ef:f9:c4:61:8a:2a:15:7d:15:
                    76:f7:82:de:f5:d2:49:91:4b:73:49:1a:45:b3:5f:
                    10:0a:9a:ee:d7:21:35:27:2d:bb:f9:35:85:22:10:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:47:65:AB:8A:21:05:9A:D9:C0:A4:89:C5:5F:F7:41:2A:7C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d192b695-1d25-3bd1-a761-e2f7c67240c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.17.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bf:e1:dc:49:b5:a4:be:f7:61:da:b9:16:c2:49:9f:cb:e9:
         f5:39:80:be:54:e0:f8:56:92:6b:9c:ee:ad:8a:23:c5:5d:2c:
         e2:63:06:c3:7a:39:c5:23:f4:09:6b:42:2d:e7:c6:62:54:8b:
         35:3f:27:97:8e:d6:3c:7d:2c:02:4f:7f:be:97:cc:c6:36:44:
         b2:4f:88:80:f7:20:5d:b2:42:8a:62:5a:bc:37:8d:e2:07:45:
         d5:25:8f:95:02:08:14:11:f8:c0:38:c6:19:59:55:ce:3e:39:
         0b:c3:08:70:7e:c0:c6:cf:0e:c7:88:bd:df:e6:d2:d0:97:c6:
         5d:9f:da:19:e1:e3:6e:8c:d8:11:78:76:05:4f:24:7e:84:5a:
         06:23:9e:23:d3:30:ff:b6:99:4e:f1:cb:6b:7b:d1:03:f1:7a:
         79:ef:fb:0c:31:47:49:59:e2:3c:32:e5:70:92:1a:c0:7a:88:
         46:19:99:79:b0:16:21:23:60:14:11:da:17:d5:ef:62:5b:66:
         0e:0d:c9:4c:c2:41:b4:69:f8:f0:6b:84:b3:e1:48:74:76:8a:
         50:fd:44:88:36:0e:47:de:7d:36:ea:96:8b:4f:63:60:8f:3b:
         21:82:ba:48:45:e4:e6:7c:4f:6a:da:09:a3:62:89:ed:3c:20:
         9b:c6:cb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:14 2025 by rpki-client