Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d59d40f1-e003-373a-9d33-90e1b8ffb2d6.roa
File:                     d59d40f1-e003-373a-9d33-90e1b8ffb2d6.roa (raw, json)
Hash identifier:          4ItHPi6tRhL2iy3dQ5LJk1bzHYWAJ0/5p7OeT4MW+Dk=
Subject key identifier:   0E:6E:3C:15:92:34:E6:FF:83:BC:37:08:B2:B7:3C:B3:93:E4:41:5F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CC80C7A5EA7C4A01ABE25F4A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d59d40f1-e003-373a-9d33-90e1b8ffb2d6.roa
Signing time:             Tue 01 Feb 2022 05:00:00 +0000
ROA not before:           Tue 01 Feb 2022 05:00:00 +0000
ROA not after:            Tue 08 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.94.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c8:0c:7a:5e:a7:c4:a0:1a:be:25:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2022 GMT
        Subject: CN=42bf45ba-6612-4139-ab44-cce0a1b58e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:c4:5a:ae:13:58:4e:4f:65:33:7d:62:75:
                    05:54:7b:bb:f5:9b:12:4f:3b:c9:ee:01:2a:dd:67:
                    4c:d1:2e:1c:85:82:dd:c9:ae:bc:f6:78:90:a4:c6:
                    55:81:0d:c1:1c:73:ec:e0:47:da:a7:b5:39:87:20:
                    e6:c1:8a:1c:ef:69:3c:54:e0:5c:6b:ac:6d:89:83:
                    f4:31:0f:05:fe:15:fa:49:31:b5:b2:cf:32:a5:fd:
                    b3:96:28:bb:4c:bb:7b:d7:1f:39:1c:f7:39:6d:93:
                    7e:39:a4:09:2e:34:d2:24:f1:f2:06:71:56:70:50:
                    e5:93:3c:c4:79:f5:4b:bc:9c:62:83:9b:63:90:62:
                    45:a9:ec:c2:6b:7e:1c:d9:e9:39:d7:ae:fa:69:e1:
                    a8:ae:46:22:88:dc:d4:65:10:0d:32:2c:9d:7d:7e:
                    e7:6f:e5:d5:49:4f:94:cd:75:7c:87:d1:f1:cc:65:
                    3a:ed:19:43:99:74:59:0f:a2:9c:f7:57:42:d6:9a:
                    a4:1a:5e:59:bb:ba:35:aa:9f:54:f6:48:75:07:5f:
                    89:10:88:e5:45:5b:ab:d4:54:71:e9:63:2d:bf:21:
                    d4:93:8d:4f:fb:ea:b8:4e:96:2b:0f:45:a7:07:5c:
                    3d:a9:5e:e6:6b:e0:46:b3:d1:44:f7:59:da:34:f3:
                    e5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:3C:15:92:34:E6:FF:83:BC:37:08:B2:B7:3C:B3:93:E4:41:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d59d40f1-e003-373a-9d33-90e1b8ffb2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:03:2b:f3:a2:4a:0a:a7:b2:54:8d:e7:94:dd:a9:bf:9c:52:
         21:59:91:24:59:8a:f5:00:1b:75:65:27:8d:8b:ac:31:d4:80:
         d5:04:78:df:07:ac:23:71:c8:0b:ad:42:c0:60:31:d1:25:a4:
         8e:49:37:ba:08:34:c2:5d:77:60:25:fd:0a:62:c2:58:ee:ba:
         b6:f0:28:59:df:1b:1d:64:81:cb:65:66:4a:5a:d9:03:8e:ce:
         95:87:83:ed:52:70:1d:b2:73:76:e3:8e:74:60:4b:d1:9d:ee:
         d8:ed:99:e9:91:26:18:a9:0a:f0:a4:9a:4c:77:9c:24:2c:2a:
         15:a7:df:81:5d:6e:04:6d:88:94:1b:6a:9d:9e:62:70:48:c5:
         ab:bf:24:06:b3:35:b2:9f:4f:9d:a4:53:6c:aa:c8:48:66:e3:
         a4:a3:88:3a:be:e5:8d:20:7b:ed:6f:34:a6:31:c7:2f:25:1e:
         d3:ff:5c:ef:a9:7a:e5:64:65:87:10:b4:f5:19:f1:80:df:06:
         d9:32:78:01:3a:98:6e:13:9e:c7:51:12:3d:65:ce:03:12:d8:
         36:97:59:67:6e:02:1d:d1:ba:a0:04:f9:37:71:af:70:6c:24:
         48:7e:7b:01:39:6e:be:45:0a:06:88:50:16:97:97:08:f5:b4:
         96:be:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:26 2025 by rpki-client