Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d36491c3-972c-31e1-b783-658ff3e92ef8.roa
File:                     d36491c3-972c-31e1-b783-658ff3e92ef8.roa (raw, json)
Hash identifier:          mszR5vKHl7b2RW5XDSRpDhvlvB4Hshnc5VtuDNg6eLM=
Subject key identifier:   78:8C:97:C6:A8:0B:0A:A8:02:CC:37:EF:F6:91:FB:0C:03:11:1A:F8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6B7BEE489FC6847C0EF23500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d36491c3-972c-31e1-b783-658ff3e92ef8.roa
Signing time:             Wed 29 Dec 2021 05:00:00 +0000
ROA not before:           Wed 29 Dec 2021 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:7b:ee:48:9f:c6:84:7c:0e:f2:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 29 05:00:00 2021 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=9121934b-4cfe-4c55-8118-53f1c79d6369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:21:cc:6e:34:0c:c5:f1:17:40:ae:7f:8a:d6:
                    ae:a2:01:62:51:b6:53:03:a1:21:04:c8:59:09:3e:
                    ae:18:a3:87:50:7a:75:fd:70:4d:8a:e5:a4:e2:7a:
                    e2:f0:ed:3c:72:ab:42:71:56:94:3a:16:de:ec:53:
                    f3:68:6f:2d:17:dd:59:9e:a4:29:b9:b6:18:88:36:
                    65:04:ca:b5:b0:17:2d:5a:42:4f:0c:f5:72:e3:a8:
                    0c:bf:ae:dc:9e:50:17:0f:bb:b4:0a:f5:17:43:f9:
                    f4:23:0b:fd:ab:b7:7c:31:d4:ad:ff:5f:08:1a:98:
                    ae:31:22:52:ff:39:0d:17:c1:92:39:89:e6:cf:bf:
                    eb:15:79:b0:35:98:a0:f7:78:f7:5a:d8:42:f9:5c:
                    50:36:90:03:d5:82:48:10:b9:ce:65:e5:f7:78:55:
                    db:a0:93:e3:be:34:6a:c4:8a:b8:7b:4f:8d:a9:20:
                    73:d8:79:0c:40:2d:7f:f5:a6:1d:7f:58:1f:e5:22:
                    d4:90:f6:66:cc:b1:d9:b1:47:4f:8a:81:3e:dd:1b:
                    14:ca:a4:74:30:9d:66:bd:c5:b7:d8:7f:ce:14:a3:
                    3c:21:0d:24:46:8e:10:92:8f:bf:eb:34:9a:74:08:
                    27:ae:19:8f:70:8a:bc:fe:5b:55:99:84:01:e7:4f:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:97:C6:A8:0B:0A:A8:02:CC:37:EF:F6:91:FB:0C:03:11:1A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d36491c3-972c-31e1-b783-658ff3e92ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:15:79:ab:ec:f9:27:c4:a4:29:d4:ad:ec:8c:34:83:13:7c:
         0e:5d:44:03:d2:c9:da:59:ab:70:81:11:12:9e:43:7d:46:39:
         a3:df:a8:56:d0:39:ac:36:86:db:9c:02:be:f4:a4:ce:ba:b2:
         7a:31:85:39:6f:d7:21:77:d1:78:82:2c:5b:48:6d:8a:c8:f8:
         4e:33:64:99:45:97:16:0a:50:50:26:45:8b:e1:f2:a6:bc:05:
         ba:a3:29:60:a6:ba:20:de:d4:99:85:6b:64:6f:97:f5:05:7d:
         b9:28:a4:ee:74:d2:d0:e0:8d:9b:b1:b9:55:92:7c:09:25:fe:
         59:d5:0a:56:0a:54:80:cf:11:bc:0d:ee:f5:dc:9c:fd:e8:a8:
         45:52:9b:2c:35:0f:7c:41:8c:65:12:3e:25:65:d5:c1:a5:6a:
         e4:0c:cb:13:e0:d6:ea:25:2c:50:05:27:a6:16:c8:c5:a7:dd:
         24:e4:de:cb:f7:ad:7a:7e:b5:3d:65:ca:69:1b:d9:1a:13:0a:
         e2:fc:0e:0b:19:37:2b:66:94:e0:f3:bb:fc:1b:ed:00:5f:d1:
         e1:eb:31:9e:cd:60:7b:f5:e2:31:64:0c:1e:ce:71:7d:b8:8a:
         5e:eb:8d:a8:ac:78:11:a1:e3:a8:ce:f2:48:1b:cc:c3:f9:97:
         d2:2a:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:58 2025 by rpki-client