Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd92fa0f-3f0f-3708-827e-cd7ae7aea478.roa
File:                     dd92fa0f-3f0f-3708-827e-cd7ae7aea478.roa (raw, json)
Hash identifier:          It0LcMM/reAs/NXKiDF0oL5hT7IG9PDE6GsjPYIt5eI=
Subject key identifier:   FC:2B:B8:65:AE:61:B4:4A:87:6F:D1:42:01:2D:70:68:57:C5:65:6D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B5EA6441EDA7A5A15B231800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd92fa0f-3f0f-3708-827e-cd7ae7aea478.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:ea:64:41:ed:a7:a5:a1:5b:23:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=ddb6500d-db01-4dd3-b521-94493f9010b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:76:b5:d9:1f:d2:84:ea:14:f3:bb:1f:dc:
                    72:6f:cd:6b:8e:9b:4e:fb:94:04:a8:2b:85:72:22:
                    51:ab:c3:f1:12:80:90:f8:ae:1d:91:6b:7d:2d:25:
                    84:15:1e:53:1d:3a:f4:5c:69:87:b6:05:d0:29:ee:
                    ca:39:4d:9d:ec:d8:a5:b1:3e:b1:04:92:ac:5f:e5:
                    0b:27:de:b9:ed:a8:2a:69:fb:de:34:8f:71:68:22:
                    cc:ed:c8:ac:2d:4e:16:71:26:56:ea:d5:f7:7e:70:
                    0c:98:27:3c:8a:f0:53:c3:8d:7b:fb:80:b3:78:c0:
                    1a:09:4f:96:1c:59:81:90:88:81:92:bc:9e:97:e3:
                    53:23:7a:92:05:b9:72:55:e6:35:8c:c8:f4:35:05:
                    a4:ea:8c:a0:58:db:4d:a8:c8:02:45:44:1d:1f:08:
                    9e:a4:e3:6a:a9:68:38:df:76:39:51:07:d3:53:3e:
                    7f:75:3b:8e:a9:b1:71:d0:ba:11:b4:80:e7:28:2e:
                    cb:f7:0f:48:b9:27:5c:ed:0a:1b:0b:70:24:c5:14:
                    99:33:5d:4d:0a:93:a4:af:62:60:f2:92:98:cb:eb:
                    b0:64:1f:49:d8:6d:79:a1:6a:04:4b:21:89:16:63:
                    0d:78:6f:4e:90:3c:cd:d4:16:f8:e7:0c:16:f1:ae:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:B8:65:AE:61:B4:4A:87:6F:D1:42:01:2D:70:68:57:C5:65:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd92fa0f-3f0f-3708-827e-cd7ae7aea478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:96:6b:ed:dd:34:ed:d7:9a:3e:46:eb:c9:62:ee:c6:5d:14:
         3a:02:97:68:b8:71:9a:60:7a:f6:4d:66:91:ab:06:67:bd:37:
         bf:a9:5d:c8:15:54:ea:2c:e1:c9:cb:8c:79:ff:fa:64:f2:df:
         60:f6:fa:fa:96:dc:40:7d:98:6d:9b:99:06:a2:c2:7c:a9:c8:
         98:25:26:59:59:8a:a4:8b:d1:2b:d6:dc:30:1e:63:ff:c0:ab:
         92:38:91:62:a7:f2:ac:37:43:09:f1:f6:01:3e:79:b9:55:f6:
         0e:c1:2a:4d:5a:2e:10:5a:f2:c6:80:8f:1d:5b:6d:e2:7c:b1:
         a5:b3:dc:5b:15:de:ba:ba:f7:5d:3c:92:a3:b9:b9:74:19:2a:
         9e:47:13:71:99:f6:fd:88:96:f8:9a:e9:05:95:32:cd:ce:fe:
         86:7a:d4:7c:ab:49:5a:63:2a:2c:58:38:bb:29:bb:ee:67:8e:
         fa:38:90:2b:b2:1a:4d:38:24:6a:c3:11:4a:15:07:a3:7c:c2:
         68:30:fa:5d:52:ef:0f:8e:94:87:47:18:71:eb:aa:74:ef:19:
         61:a5:3a:e0:e6:78:6f:ba:0c:e7:32:bf:73:86:0c:32:3a:05:
         ae:fe:20:29:ce:eb:30:bf:7d:bb:57:a2:9d:a8:8f:47:e8:f5:
         30:0d:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:11 2025 by rpki-client