Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc10b4f8-87f4-3ab0-b77a-ffd654bbf995.roa
File:                     dc10b4f8-87f4-3ab0-b77a-ffd654bbf995.roa (raw, json)
Hash identifier:          WCbHfz0Hw0XKHjn/KMqMwye9YWqiQsBf0qLCENuQrJc=
Subject key identifier:   C6:AE:4A:BC:3A:81:C5:3C:4B:3F:6D:67:DB:B5:34:6A:A6:AA:9A:58
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F79FC138E602C48B429F43740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc10b4f8-87f4-3ab0-b77a-ffd654bbf995.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.156.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:79:fc:13:8e:60:2c:48:b4:29:f4:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=15edeb59-cb90-4218-97fb-649e6e5fe417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:42:7c:a9:01:4e:9d:dc:3f:1e:61:40:14:
                    6a:13:51:d1:d5:3b:64:e0:60:fe:5e:ce:55:59:df:
                    61:86:c9:56:f3:9b:e8:eb:1f:8d:ca:29:6b:2c:ab:
                    dd:41:16:fa:c0:01:25:9e:1c:44:5b:dc:77:9a:13:
                    fb:c3:99:e9:aa:d7:5e:c6:23:c4:a7:68:66:18:7a:
                    f1:c2:ef:75:59:93:2e:da:e0:59:64:62:83:a2:fa:
                    a4:22:de:a1:0b:0b:9c:5d:cf:57:de:73:c4:af:c6:
                    61:41:d7:7c:70:f2:d1:ec:ff:15:3e:91:d5:7a:0c:
                    a0:5a:f2:7e:b1:47:76:5c:88:40:87:55:0a:c4:22:
                    67:d8:ff:03:42:07:6e:dd:cb:1e:b9:87:ff:68:84:
                    96:22:37:c5:fc:33:00:d7:db:75:76:5d:9d:2f:7a:
                    ba:1a:06:8e:77:4f:4b:63:5c:e9:ab:c3:14:20:24:
                    1a:45:81:2d:fc:ac:a7:ac:c3:2b:36:b9:da:4f:9b:
                    08:a5:53:a3:a1:0a:26:bf:0c:e9:7b:07:dd:af:1a:
                    b6:c8:03:80:d0:7f:ba:9e:7a:5c:03:71:33:7b:6e:
                    5b:a6:3d:e2:b5:02:63:6f:17:6f:74:5a:43:3a:d1:
                    16:90:55:2a:97:a4:e5:b3:56:28:42:95:62:08:a8:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:4A:BC:3A:81:C5:3C:4B:3F:6D:67:DB:B5:34:6A:A6:AA:9A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc10b4f8-87f4-3ab0-b77a-ffd654bbf995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:41:9d:74:27:64:2f:4b:9f:08:ef:a5:3e:2f:28:eb:1c:
         88:a7:9a:f4:fa:43:be:ee:6d:e5:db:b7:1a:85:01:9d:ca:c2:
         f3:e2:f8:11:72:19:11:2b:c7:a4:d1:64:21:0d:c9:42:89:26:
         84:76:a1:c3:1e:12:6b:cc:f8:eb:eb:35:e5:30:c9:6a:28:27:
         c1:11:c0:72:38:31:84:7f:af:4e:22:88:e4:3f:81:94:af:01:
         b1:fc:6c:e9:fb:b2:45:15:ad:7e:07:95:e3:74:c3:3c:47:ea:
         69:40:ef:11:dd:a9:28:b4:5a:c3:5a:af:5c:ed:d8:2a:86:9d:
         e4:71:d4:64:5d:70:5b:7b:5a:20:5c:0f:a1:6c:0e:98:71:10:
         c5:f3:c5:95:9d:44:e5:de:c6:d8:55:e2:18:1a:36:81:bd:41:
         4e:c3:81:9a:85:20:43:a4:2b:c5:b9:af:65:cd:53:b4:78:3a:
         35:40:50:eb:50:b5:39:c0:fc:7e:eb:3c:c8:90:08:66:10:5a:
         66:e5:f2:a2:31:40:31:18:54:55:f7:f1:97:28:24:03:bd:ca:
         3e:90:5c:80:dd:39:5a:28:a1:04:fa:f4:2a:c3:ce:a5:2d:8f:
         81:68:c0:3b:35:00:13:f8:4c:39:de:97:ed:88:f9:c0:b1:85:
         cd:6c:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:34 2025 by rpki-client