Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d704dd12-8a28-3246-9282-b2e6bee506fd.roa
File:                     d704dd12-8a28-3246-9282-b2e6bee506fd.roa (raw, json)
Hash identifier:          oLIdhm65cLSyVrtxpqTiufPZuDYuSPCV/Rd90yqtsuU=
Subject key identifier:   D6:0F:F4:F5:47:99:ED:45:8B:61:2A:F8:19:72:0A:E2:A5:A9:D3:EB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F543CB1047F0E2569DDBD61F8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d704dd12-8a28-3246-9282-b2e6bee506fd.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.56.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:3c:b1:04:7f:0e:25:69:dd:bd:61:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=4cb25aac-a7d1-4bd5-a3e3-e8d8d59a650a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:ea:56:aa:61:33:be:73:f3:79:2f:60:2f:
                    ea:97:9e:c1:43:55:45:0d:94:5d:76:87:7d:41:67:
                    b7:95:da:cb:79:c4:cb:a7:5d:4c:9c:bd:cb:1f:e3:
                    38:e4:71:c9:23:90:e6:eb:4e:22:4f:f5:47:87:6f:
                    76:24:a8:9d:22:67:8f:cb:98:f6:c4:30:d3:4e:88:
                    99:c4:36:fd:7f:4a:f3:db:b9:b8:e7:db:b3:1e:83:
                    6d:94:b4:68:cb:e7:df:d0:82:26:da:1f:7b:f4:38:
                    28:e7:72:4e:4c:e3:3b:cd:be:db:21:db:1b:b8:2f:
                    5f:fe:bc:07:88:e8:e5:f0:ba:ba:ca:d2:b5:04:81:
                    00:f8:5b:af:93:eb:71:65:ee:4a:11:3c:5f:a3:73:
                    5c:52:28:75:de:dc:7f:ef:92:38:bb:74:68:85:a4:
                    42:f9:39:90:dd:1e:07:f9:45:27:e0:d8:23:9d:72:
                    38:d5:cc:2a:31:5a:47:30:62:1c:ad:cd:86:49:3d:
                    29:be:64:80:4b:d1:38:2c:9d:10:6c:3a:af:2b:b5:
                    76:a9:0d:20:ee:93:09:da:e5:6c:ae:18:63:18:fd:
                    aa:1e:ff:f8:89:a6:ff:a3:49:0c:95:c6:78:01:1a:
                    7e:b8:58:0c:e8:0a:c7:0b:9e:50:31:f1:1c:8e:04:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:F4:F5:47:99:ED:45:8B:61:2A:F8:19:72:0A:E2:A5:A9:D3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d704dd12-8a28-3246-9282-b2e6bee506fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:ba:6c:bd:12:dc:48:1e:fa:d2:86:df:f0:82:b9:14:99:
         6b:65:22:5e:92:31:51:e5:e4:81:91:97:dd:11:57:1a:ed:1a:
         d1:1e:e4:a0:39:cb:fa:cb:db:bb:16:a4:88:73:9c:18:98:80:
         2f:71:d7:75:67:18:43:9f:81:33:69:d6:ae:fd:11:37:a7:b2:
         64:eb:26:06:d5:8a:8d:3f:5f:71:16:21:a9:47:41:6a:fa:50:
         ac:91:84:42:5f:6f:b2:76:b6:f0:56:3d:5e:3b:d6:ce:a6:88:
         b3:f2:38:ea:52:f0:5d:29:f8:e3:ae:e3:1e:25:9a:32:53:11:
         38:98:73:5d:fd:60:de:69:39:28:47:86:b8:9c:2f:30:ff:bb:
         02:f9:d0:62:e5:6f:5c:3c:df:dc:b4:8c:9e:ea:81:1b:03:73:
         be:d5:24:c8:3c:0d:2b:79:0b:04:dd:8a:ee:78:44:9e:0b:86:
         81:da:6e:57:28:11:76:2d:bb:eb:6d:ce:48:f0:76:87:dd:16:
         56:9c:2d:1d:9c:8d:00:15:25:13:c9:77:9a:2a:a4:67:e4:65:
         72:f2:b3:58:ec:a8:c3:f6:f3:e2:6f:2d:ae:2e:1a:d2:e2:c1:
         fa:ea:7e:db:9c:b8:ab:28:4b:b9:81:9f:74:d7:ab:1a:7c:1f:
         41:b1:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:26 2025 by rpki-client