Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2dafe35-8db1-3976-a7eb-e5597cb19ab4.roa
File:                     d2dafe35-8db1-3976-a7eb-e5597cb19ab4.roa (raw, json)
Hash identifier:          X9NttdJK6ognobudRypGjD2QWCaBhhyT6KP25YMzf1s=
Subject key identifier:   D7:02:39:E5:28:06:F9:8E:85:C9:4F:13:DE:4D:62:0A:19:27:01:85
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E00F455019EAA2C3B966B0680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2dafe35-8db1-3976-a7eb-e5597cb19ab4.roa
Signing time:             Mon 23 May 2022 12:00:00 +0000
ROA not before:           Mon 23 May 2022 12:00:00 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.50.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:00:f4:55:01:9e:aa:2c:3b:96:6b:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 23 12:00:00 2022 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=18fed536-5d35-4a11-af26-71c96e88cf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:16:b9:67:29:7e:33:1c:a7:af:ec:f5:23:
                    20:0a:fc:28:80:fc:16:f7:47:88:59:f1:e0:b3:d0:
                    77:fb:4f:72:d6:49:c0:13:2d:b0:32:c9:0d:9a:86:
                    17:62:38:eb:19:e3:0b:f2:10:34:7f:62:0f:a1:7c:
                    60:df:8d:fe:57:0e:63:ab:02:d0:78:ab:2f:0a:c0:
                    e3:87:c7:17:3b:8d:e6:e4:35:75:6b:d7:3f:34:82:
                    9a:1b:01:58:41:a3:61:0f:93:e4:94:e0:84:f6:3c:
                    9a:b8:8d:84:a4:3c:31:71:37:f2:0c:2f:fd:6d:19:
                    ee:c0:b6:94:4a:55:89:e4:59:46:7b:f0:0f:b7:51:
                    06:ea:af:02:85:f2:09:dd:b7:c3:57:2b:d1:de:fa:
                    a9:c3:45:c1:f3:31:5c:04:9b:a2:1d:a4:e2:cd:22:
                    d3:e0:6b:11:69:4a:31:8d:84:9c:af:50:6d:d2:0a:
                    2c:2a:cb:cc:d7:ac:47:71:d5:84:3e:89:97:fe:a5:
                    7c:c0:9a:7e:48:71:0b:72:a8:b2:63:22:88:fe:1e:
                    44:f0:b9:19:6b:e7:e2:8d:41:15:1c:63:5c:bc:35:
                    47:76:d3:d1:75:1f:53:cd:b7:8e:d1:e9:88:2f:a6:
                    e1:66:35:71:0f:e6:88:10:54:16:59:86:34:ce:06:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:39:E5:28:06:F9:8E:85:C9:4F:13:DE:4D:62:0A:19:27:01:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2dafe35-8db1-3976-a7eb-e5597cb19ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a7:d6:06:f9:b9:0b:3d:17:f7:04:51:ba:fe:83:a1:ee:d0:
         ea:bd:e0:1f:0d:42:8b:b2:30:26:35:80:a7:48:e7:60:05:a9:
         76:2b:4f:18:00:cc:97:ba:4b:9c:a5:df:72:f8:88:ca:c4:5b:
         3f:b1:23:b2:f0:9f:90:0d:50:89:12:1d:37:ad:1f:b6:24:2a:
         08:79:46:d1:3f:1a:90:22:b9:b9:7d:b5:69:d7:a0:29:fa:af:
         a1:32:38:51:a3:54:d3:c1:55:98:b0:06:61:2a:7d:e6:35:f1:
         2f:58:c3:ba:98:6a:ca:4a:49:17:71:66:f1:81:2e:ad:3d:66:
         c1:b2:26:14:92:26:55:ca:33:0a:3e:6f:57:c7:de:e6:ea:6b:
         fa:20:6c:b5:52:40:c7:17:e1:0e:2e:06:3f:d9:6b:2c:24:ae:
         5b:39:bb:88:e3:30:d0:b7:2c:e9:4b:4d:08:aa:06:df:41:7e:
         da:f2:83:28:91:f6:a8:4c:9a:12:02:ce:49:02:78:c2:eb:d0:
         ca:b7:14:15:43:97:e8:51:c5:96:08:80:59:26:36:f7:a2:6e:
         ff:ca:a0:40:29:f1:92:c0:be:15:f8:3e:bd:44:8d:26:4a:dc:
         91:ee:ea:49:bc:9f:6f:bf:a5:99:9f:09:62:50:3a:f5:d3:9a:
         1c:d3:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:33 2025 by rpki-client