Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc2e591-046b-33ac-b4ea-e3cbf47888c9.roa
File:                     dbc2e591-046b-33ac-b4ea-e3cbf47888c9.roa (raw, json)
Hash identifier:          sKKhXA1MTgfK9+xGjusPmg8DoLJAGHRHSE7+GCRBfdc=
Subject key identifier:   5A:62:30:DF:BB:26:55:9C:88:FF:8D:7B:00:58:0C:F4:20:99:4B:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FD7731513DAB3081675B9D500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc2e591-046b-33ac-b4ea-e3cbf47888c9.roa
Signing time:             Mon 07 Nov 2022 22:33:08 +0000
ROA not before:           Mon 07 Nov 2022 22:33:08 +0000
ROA not after:            Tue 13 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d7:73:15:13:da:b3:08:16:75:b9:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  7 22:33:08 2022 GMT
            Not After : Dec 13 05:00:00 2022 GMT
        Subject: CN=ebb4b3d7-01ad-48fc-a829-26489e8d8db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:2d:b0:4c:e4:b8:9c:6d:1c:f5:af:1e:1a:
                    05:98:ac:0f:23:36:35:1d:f8:82:51:8d:62:c9:b4:
                    10:df:e7:df:52:99:57:b7:6a:25:c2:26:ff:1e:cf:
                    58:3b:7f:6d:36:9e:d1:40:56:c5:fd:cb:e6:61:18:
                    17:c5:c0:ac:ab:39:d0:28:28:b2:76:c3:62:3f:2e:
                    a5:5a:3b:34:22:81:f4:8a:a7:4f:40:a1:be:5f:df:
                    c2:e4:c7:0c:9f:9c:0d:da:3d:0f:23:51:1e:e0:c3:
                    43:69:98:e4:84:47:f5:80:6c:b0:f8:73:e9:0c:b2:
                    2a:77:bd:1e:7a:b4:1a:ad:ef:0b:f0:a2:d9:7f:93:
                    78:5e:e1:a5:df:7c:c9:67:bd:83:47:39:dd:c0:54:
                    6a:b0:ca:c1:0a:7a:cc:dc:f0:43:5c:0a:23:10:28:
                    39:ef:b9:c5:dd:17:f0:44:bc:26:6d:77:d4:f7:86:
                    4b:f8:9a:6c:7d:e9:1b:13:47:d9:e4:92:97:0d:db:
                    97:f7:9a:ea:1b:28:2f:c0:94:0f:71:51:48:cc:58:
                    c5:2d:86:75:70:1e:96:90:e0:35:35:af:02:a8:cf:
                    55:7d:75:9d:68:f6:e2:e3:e7:c8:71:c5:e5:b6:51:
                    69:e6:6f:96:88:23:80:11:4f:c4:ba:fd:38:42:99:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:30:DF:BB:26:55:9C:88:FF:8D:7B:00:58:0C:F4:20:99:4B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dbc2e591-046b-33ac-b4ea-e3cbf47888c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:be:8b:d8:22:51:53:11:53:e9:18:9f:88:52:14:9c:e7:
         b9:62:b3:22:d3:e1:67:05:73:3f:66:7c:0e:a7:a7:e3:45:ca:
         26:57:9e:02:4d:6d:9a:9c:7a:f9:9c:a2:3c:20:6d:fe:39:3f:
         26:88:9a:e9:d8:2a:85:71:c3:be:24:36:5c:f0:25:50:6a:1c:
         d8:df:e7:5a:84:d4:14:22:e1:e0:8e:36:40:49:39:96:ee:32:
         53:c3:09:34:e5:d8:89:f3:bf:89:28:de:f1:8e:69:8e:bb:70:
         df:7f:6d:dd:71:56:92:ed:8b:95:33:5e:dc:a1:fe:00:48:20:
         91:a6:13:67:dc:59:a2:72:ca:7b:48:26:2a:d1:38:da:ac:a0:
         50:55:1d:ce:40:10:41:82:29:2b:2b:fe:5f:c6:ec:22:15:dd:
         7d:86:53:73:58:8a:5c:0d:dc:3b:6c:ee:4f:d4:3f:06:e9:a3:
         a1:28:62:70:2b:ed:50:b3:88:03:67:12:11:00:8f:cd:0b:2b:
         c9:9e:d7:b1:b8:dd:80:00:e1:a8:cd:ae:30:7f:bb:e1:88:3f:
         52:df:08:8d:95:3d:32:55:f1:d0:a0:cb:38:b3:57:31:31:ba:
         49:9a:e8:65:25:25:df:97:c5:0f:34:c3:10:54:17:37:4a:ec:
         99:94:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:38 2025 by rpki-client