Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daf26ca1-16cb-39ba-bbf1-5e5da29b2379.roa
File:                     daf26ca1-16cb-39ba-bbf1-5e5da29b2379.roa (raw, json)
Hash identifier:          2H1H0D+AnBcKzFlcBzA+3sxjvJjdRDk36Pypgdmo4jA=
Subject key identifier:   CE:83:4E:29:8D:0F:54:D8:DD:3C:4F:9D:19:28:7B:BD:44:11:5F:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA8C7290D4CC4E46877F9BA20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daf26ca1-16cb-39ba-bbf1-5e5da29b2379.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Sat 27 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.30.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a8:c7:29:0d:4c:c4:e4:68:77:f9:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Aug 27 04:00:00 2022 GMT
        Subject: CN=806eec2c-9193-4aca-9c49-e0be209aeca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:83:3a:f5:a4:0d:49:e6:95:fd:51:78:f7:
                    45:7c:b6:4a:73:8d:bc:9b:cf:09:8e:a5:d5:86:7d:
                    93:fc:32:eb:b2:62:5f:9f:d2:60:f6:3e:ee:8b:2b:
                    a7:2f:a7:cd:59:b5:48:bd:80:17:af:3e:07:96:16:
                    49:e9:3e:d5:05:9c:96:c3:a2:6e:28:b7:2e:de:d1:
                    d6:70:1b:ff:97:2e:57:ef:9b:b0:6a:5a:56:23:04:
                    8d:51:81:0b:cd:0d:32:23:0d:b5:d5:af:cf:38:ce:
                    65:a7:47:4c:a3:75:da:f5:5e:70:c1:76:f4:a3:60:
                    a5:76:04:07:20:b5:ab:e9:57:0c:03:6d:a2:a2:b1:
                    31:fd:9d:fe:78:62:f8:9b:d6:3b:0d:e0:12:15:ef:
                    bb:eb:d9:e9:cf:ce:6b:92:74:7d:7e:78:d1:f1:88:
                    17:4e:5b:ec:b6:1b:96:a1:54:4f:df:00:d9:0a:24:
                    54:d6:2d:1f:f1:13:13:dc:d6:91:07:71:59:3a:94:
                    0d:d6:6e:02:50:49:0f:18:40:74:f0:a0:e1:f0:7e:
                    5d:a5:c7:6c:97:fc:14:2e:aa:55:12:2c:f4:9b:10:
                    59:74:7b:a6:98:5f:ea:94:fc:95:99:ac:bf:3e:13:
                    0e:16:22:cb:b8:e3:df:bb:61:4c:82:d4:10:79:ab:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:4E:29:8D:0F:54:D8:DD:3C:4F:9D:19:28:7B:BD:44:11:5F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daf26ca1-16cb-39ba-bbf1-5e5da29b2379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:b2:45:83:60:c8:db:94:fc:d6:20:e7:9f:70:5b:d6:96:
         d1:2a:be:ee:fa:a3:eb:6f:0d:9d:37:db:03:3e:51:e5:42:6a:
         5c:e4:b7:0c:41:b8:5a:21:e0:c6:df:de:51:1e:41:c8:d1:4e:
         88:49:c0:2f:44:79:cb:b4:93:cb:b9:be:ed:ef:bb:da:f7:77:
         16:9a:69:50:a9:6f:21:94:de:39:3a:e6:31:53:21:0d:ed:00:
         07:dc:36:03:9e:db:2c:87:fa:99:4c:0b:fb:bc:2d:36:4e:b7:
         b8:ab:ae:83:76:2c:8b:24:b9:94:43:0e:58:11:1e:88:4a:bd:
         ad:08:b8:5e:28:05:41:23:ef:12:84:66:9d:00:19:62:71:34:
         f8:6a:34:ed:37:48:13:7e:b7:47:b0:a1:72:f0:d4:02:f1:5a:
         8a:1e:44:3b:9f:de:3d:4b:4f:95:07:af:d7:4b:5b:1f:a2:12:
         79:22:9d:7b:89:e3:95:e5:df:94:e4:b1:60:57:18:24:3a:8d:
         ee:17:99:6d:45:74:f3:b9:c9:f7:de:09:26:a8:a9:e2:a3:d4:
         31:c6:27:3b:fb:ea:30:96:ef:2e:60:e6:21:de:6f:29:10:1d:
         ae:a2:d1:45:30:f1:73:1e:c4:ba:9c:52:47:05:f9:b7:92:ea:
         90:15:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:27 2025 by rpki-client