Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd03b038-0725-3689-9106-9fe69475357e.roa
File:                     dd03b038-0725-3689-9106-9fe69475357e.roa (raw, json)
Hash identifier:          mOA+WkUPv3acrnBisejMvkuWMJ6e02sh29Wh/mvOJpk=
Subject key identifier:   E3:8E:77:A5:8D:97:D1:E0:02:93:01:33:09:0F:30:A8:59:5B:E6:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402B15C47AB7689B72EC9F04C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd03b038-0725-3689-9106-9fe69475357e.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.118.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2b:15:c4:7a:b7:68:9b:72:ec:9f:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=60072841-c701-46da-b65a-36aa793a1872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:4c:a4:32:bc:8c:e2:39:5c:01:15:50:be:
                    e3:00:49:23:d4:9c:30:ec:a2:77:ff:77:ef:7a:a5:
                    7e:be:19:b5:ba:94:4d:df:61:87:a4:6e:b0:a9:38:
                    e8:10:cb:be:68:aa:5f:98:24:59:c6:05:a1:fe:83:
                    b7:23:ae:80:c6:4e:d7:db:e6:61:4c:3d:7b:e6:39:
                    5f:98:22:fa:a8:c9:7c:86:f7:e7:4a:ba:7a:9d:a9:
                    a7:57:d4:cf:ab:5a:cf:2f:81:33:53:80:8c:f9:b4:
                    5e:57:e5:69:0a:e8:f5:da:d0:08:31:03:d1:3e:b9:
                    f1:d6:a7:27:39:f5:25:3c:47:18:d7:17:87:57:73:
                    7e:7f:f3:7b:6e:39:60:78:78:24:bd:31:a4:0c:80:
                    1b:3b:65:f0:39:77:f7:1e:8c:40:9a:b7:68:31:a8:
                    ee:1d:8c:d3:c7:bf:27:ae:aa:19:a0:2b:2a:01:99:
                    60:79:93:9d:ec:42:c4:48:26:95:55:cc:f0:dc:44:
                    a6:70:96:c1:eb:01:eb:0c:57:fc:c2:ea:14:6d:25:
                    46:2d:37:77:b5:eb:e6:0f:2b:62:2b:b8:85:d8:5f:
                    17:20:62:71:16:42:1d:11:82:1c:fa:d2:ba:cd:4e:
                    67:9c:3d:c8:e4:e9:8a:4e:36:7c:fd:a6:bb:cd:f7:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8E:77:A5:8D:97:D1:E0:02:93:01:33:09:0F:30:A8:59:5B:E6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd03b038-0725-3689-9106-9fe69475357e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:65:d5:88:85:19:20:c8:dd:06:bd:d2:c1:18:3f:62:c2:
         0b:88:56:33:1e:10:7b:31:0d:9d:75:ff:84:70:12:3a:49:e8:
         9d:10:8d:b7:45:f6:3f:b3:42:ac:69:4c:f3:e2:3f:70:c1:58:
         20:37:c3:80:5e:28:c9:33:f2:d9:4b:fe:98:24:28:c8:97:0d:
         58:71:3e:32:91:cf:b0:9a:49:11:5c:46:49:5d:1d:47:c6:ee:
         aa:65:73:df:7b:30:65:03:43:ac:73:a0:82:6f:29:62:cd:0a:
         d7:b5:6d:69:6d:a1:20:f1:5c:90:c6:c7:8b:03:72:7b:d9:fc:
         29:34:96:11:75:07:c7:a0:ca:f1:b3:9e:d1:fb:45:80:6b:f9:
         68:66:0b:24:8e:bf:5c:aa:c1:81:22:bd:a4:15:d4:e4:79:c8:
         68:f3:f3:37:48:0b:ff:c8:c6:72:3d:d5:70:18:85:bd:a4:f7:
         37:e9:b3:c7:eb:f3:fb:aa:c8:d4:85:0d:20:ee:8c:d7:4d:25:
         24:d5:7c:e8:ed:03:0b:23:90:ae:76:de:87:6a:26:16:79:ad:
         8a:21:e7:c2:8b:8f:e8:10:86:87:ef:1f:48:12:ae:2a:5d:47:
         6f:23:5e:07:f0:3b:5b:51:a0:2c:e8:87:43:8c:1f:dc:31:27:
         b3:f0:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:49 2025 by rpki-client