Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddabfaad-f5c9-391d-b0a2-598ff82cb3b2.roa
File:                     ddabfaad-f5c9-391d-b0a2-598ff82cb3b2.roa (raw, json)
Hash identifier:          DN/H6Psh7H9WVtNRgkGaX7YWc3HnS0k/St5RDPpdcJc=
Subject key identifier:   AB:AE:D7:7F:8D:5D:B7:6D:52:22:96:00:E3:A9:27:91:26:0C:81:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA5A238F36D73E07188467BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddabfaad-f5c9-391d-b0a2-598ff82cb3b2.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.77.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:a2:38:f3:6d:73:e0:71:88:46:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=0bd7a740-d095-406e-8f50-70271fa2722d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:37:8c:66:f7:9a:07:47:c4:90:2f:4b:2b:
                    96:f5:96:c6:f4:21:b3:cc:07:6e:9a:28:d0:52:23:
                    ba:86:2d:cf:b3:2e:b8:3f:1b:d0:1c:72:b3:31:bd:
                    2a:33:98:9f:ef:1d:30:32:7e:ef:e1:ac:91:ba:3c:
                    45:2c:ba:06:b7:94:36:4b:53:9d:33:2e:cb:88:1e:
                    13:37:13:b9:8c:14:16:c9:71:90:eb:28:d8:cc:c3:
                    49:73:2b:e5:07:83:b5:da:d3:13:d7:05:33:17:03:
                    ca:0f:bb:85:6b:d8:e9:47:a9:37:59:2f:be:d9:6d:
                    bb:e5:c0:ae:10:03:6b:40:ed:28:ef:a9:e8:a3:c6:
                    96:be:38:f7:b8:50:f1:5c:b1:cc:49:69:a1:90:62:
                    8e:69:c9:ea:9b:e7:ab:4c:b6:e2:f2:c9:20:02:3a:
                    c1:47:1b:f9:46:37:70:66:29:97:29:c3:67:c7:6f:
                    a6:fb:3d:ff:8d:4c:90:38:82:13:21:04:59:88:ef:
                    6a:40:5d:ef:da:47:3a:02:e8:3b:2c:10:f5:df:06:
                    74:a3:79:28:55:e4:a5:36:07:5d:04:17:72:f1:66:
                    c5:19:1c:bc:10:f2:16:22:c1:28:7e:b5:9a:ce:2b:
                    ee:7d:29:3c:8c:e6:c6:d2:7a:74:a8:09:f7:a7:b3:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AE:D7:7F:8D:5D:B7:6D:52:22:96:00:E3:A9:27:91:26:0C:81:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ddabfaad-f5c9-391d-b0a2-598ff82cb3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.77.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:12:72:1f:84:fa:73:01:b2:29:13:ca:10:4b:80:f7:5d:b4:
         d6:1e:fc:3e:0b:ba:d3:7b:5d:c4:de:ad:23:68:8c:ac:73:6e:
         5d:39:16:9c:6f:75:03:11:6c:92:82:22:f7:81:dc:44:cf:dc:
         33:04:6c:44:24:be:80:4b:5d:09:8f:ef:9d:3a:2c:a7:bf:69:
         7e:55:04:0d:ce:cf:4e:12:98:de:5d:c6:00:1d:6b:f0:c7:49:
         d3:bb:b5:4e:e1:12:95:a3:32:fd:fd:dc:e1:69:f8:10:98:ce:
         8d:7c:fc:62:ee:b3:ab:a9:66:06:5c:68:62:f5:58:d6:dc:4c:
         20:1c:b6:94:d9:95:20:69:99:75:8c:40:f8:ec:a9:8c:a8:7f:
         24:3a:30:41:e1:7d:b9:29:37:d9:60:a0:a6:1b:53:bb:bb:53:
         40:cc:15:55:5a:0e:6f:d1:6b:44:a2:35:13:97:97:11:15:ff:
         1c:f7:4a:3d:2c:27:a2:c4:af:64:e0:a2:fb:4f:d9:58:11:23:
         58:88:2c:87:48:ee:41:f3:09:e4:04:9b:6f:95:0d:ae:87:83:
         7e:d1:ae:6d:5b:91:c5:c2:62:c8:29:97:1d:e9:19:d5:b4:73:
         c7:9c:a0:09:03:a7:54:90:6b:54:02:73:f3:f6:49:29:54:46:
         80:86:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:35 2025 by rpki-client