Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da5854c2-0d7e-3b20-8a37-b9ee24bfeb77.roa
File:                     da5854c2-0d7e-3b20-8a37-b9ee24bfeb77.roa (raw, json)
Hash identifier:          76sheWk+JelX5j9RUSf8ImwiKkqBtM1rKKj1KmiATBw=
Subject key identifier:   EB:01:91:AF:7B:56:14:4D:26:D6:FB:07:22:E8:44:8D:5E:1A:A6:3E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3D6AECA55F282AE8A3522800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da5854c2-0d7e-3b20-8a37-b9ee24bfeb77.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 19 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.126.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:6a:ec:a5:5f:28:2a:e8:a3:52:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Apr 19 04:00:00 2022 GMT
        Subject: CN=e5f08d43-20c5-4e2f-8ee2-fd89a3ff76f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:35:02:ae:aa:ad:64:56:04:7a:2a:b1:47:
                    34:bb:13:4f:28:67:1e:77:1b:42:82:6b:fb:8c:bd:
                    e8:2f:df:01:62:cd:ee:e6:ac:ba:90:8c:32:ff:87:
                    94:5e:10:14:43:44:aa:a0:33:40:5c:e7:05:d6:cb:
                    e9:03:dd:80:a9:1e:29:9b:b7:fe:7d:eb:9d:eb:85:
                    53:b0:90:9f:22:24:0a:13:07:bd:13:7e:07:ce:38:
                    35:19:4a:ef:1a:27:9d:fd:fe:3e:e8:c2:12:f4:96:
                    3b:85:0e:f8:57:ef:10:1f:70:8f:54:11:bd:c9:26:
                    00:92:23:53:41:e0:91:81:37:4b:ce:fa:3b:79:71:
                    f6:6f:ee:a2:11:04:fd:b2:ed:53:3f:0f:e6:f5:a9:
                    61:9f:72:8a:ec:70:49:13:8e:92:9c:3c:0c:cf:b2:
                    9f:86:3d:25:0d:c2:d6:f6:6f:19:53:4c:88:f3:aa:
                    2c:f4:e9:3c:f1:84:ed:da:f4:74:57:6b:cd:6f:3c:
                    4e:96:29:31:21:1f:a1:28:2e:b7:84:fc:a6:93:a7:
                    3d:29:35:b7:c7:6d:64:d4:58:2b:63:e5:7f:b5:ff:
                    ae:66:db:50:ec:35:94:65:16:1a:b3:36:42:d9:81:
                    3a:4d:d3:c5:99:b0:f3:6d:6a:7f:fd:1f:a3:40:3b:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:91:AF:7B:56:14:4D:26:D6:FB:07:22:E8:44:8D:5E:1A:A6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da5854c2-0d7e-3b20-8a37-b9ee24bfeb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.126.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:17:f6:9b:89:bf:82:65:43:0c:74:80:2c:30:59:51:5d:
         43:bc:bc:2c:da:6e:28:d2:0f:d3:36:10:4a:2c:f4:a7:da:5c:
         22:4b:7e:85:25:db:da:c1:6c:83:1e:1a:97:e7:0e:a5:73:f8:
         00:47:5b:1a:f9:ea:44:4f:89:1a:89:46:4f:7e:91:b6:8e:1a:
         78:c1:70:32:52:eb:41:ba:9b:b3:95:59:73:54:dd:0e:17:d8:
         af:38:29:01:57:b9:72:ce:66:1e:67:5f:87:25:31:9b:62:16:
         dc:26:e2:61:e4:80:1e:7d:8b:9a:43:44:10:7f:08:9e:00:e7:
         02:2e:72:03:bc:9a:00:85:47:bc:3d:fa:1a:de:8c:17:a7:fe:
         d0:33:6a:f7:ad:f4:01:25:6d:21:b8:2a:01:65:99:4e:fc:bd:
         74:0e:51:79:34:19:78:5a:0d:d7:57:e5:37:c7:f0:75:93:41:
         ae:df:b6:3a:58:ae:e4:f2:d7:77:08:6b:9e:df:d8:6f:ee:e4:
         53:ea:ba:98:d8:f0:fc:69:b6:ed:c4:78:a2:e1:c0:42:c9:1d:
         51:b5:1a:b8:9b:c8:2a:21:38:d5:ab:b0:61:34:ec:24:dd:69:
         4f:a8:af:be:d5:70:dc:ca:85:dc:4f:6f:d5:f1:f1:06:43:07:
         22:df:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:04 2025 by rpki-client