Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de29edc9-9b80-328c-ab5d-da855f672043.roa
File:                     de29edc9-9b80-328c-ab5d-da855f672043.roa (raw, json)
Hash identifier:          MON1HlDNjR1OJQW0m2nkpRFezacthOc3kerpDOqIAbA=
Subject key identifier:   39:E1:C5:95:69:A8:99:A3:01:41:A1:DE:9D:97:E9:18:44:37:ED:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404B6C37CCBBDB1CF6C2D94500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de29edc9-9b80-328c-ab5d-da855f672043.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.115.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:6c:37:cc:bb:db:1c:f6:c2:d9:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=cac15e0d-aee4-4efe-9421-5a7b13aaf6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d8:11:d5:ad:fe:0e:1c:72:23:db:ae:98:e5:
                    49:ce:00:68:03:40:89:37:c3:29:16:57:2a:3d:17:
                    62:8e:bf:c2:66:9b:4a:11:a5:94:b3:86:42:c2:ec:
                    29:3e:f5:e1:93:ee:02:e7:59:7c:e7:fb:d8:0d:41:
                    29:f7:e2:13:e3:79:3d:b2:53:34:fb:d5:ce:d2:bf:
                    5c:e3:9c:7e:e0:c4:e5:5b:52:d4:19:63:9a:ff:f4:
                    58:79:d6:81:86:f9:74:37:3a:24:9b:8c:14:a5:bf:
                    9a:ef:ed:9a:ba:a5:24:28:7a:3e:37:7d:e5:1f:a6:
                    dc:45:94:d9:dd:7d:0e:ea:6d:4e:9e:b2:24:69:81:
                    b3:41:d8:ce:7f:29:98:3d:b2:d7:7a:b1:a5:36:1e:
                    99:91:e1:06:bb:43:f2:dc:95:c5:38:1f:af:65:89:
                    b9:47:cc:9e:9f:36:aa:21:e2:7e:d0:dd:10:b1:67:
                    82:32:9f:07:4a:19:2f:64:05:f4:53:9c:25:96:d0:
                    ed:53:41:3a:59:42:58:34:d3:26:09:d8:17:45:d9:
                    07:f5:20:df:41:3a:4f:05:49:09:b6:46:87:73:b3:
                    93:95:e3:e6:7d:39:af:d7:d8:4c:f6:9d:d8:dc:ec:
                    30:9c:63:a2:e9:93:7b:9c:7a:18:1c:47:c2:20:8a:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:C5:95:69:A8:99:A3:01:41:A1:DE:9D:97:E9:18:44:37:ED:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de29edc9-9b80-328c-ab5d-da855f672043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.115.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:40:8e:08:64:fa:52:af:f1:99:29:b6:f2:44:5c:95:e0:54:
         37:de:3c:cb:79:48:44:0e:db:97:55:68:b9:ac:ee:96:0d:2a:
         24:53:72:8a:95:b0:b1:b7:65:01:81:c1:09:85:51:37:e6:f3:
         70:47:a5:19:fb:f3:d8:20:4d:12:24:56:bc:74:67:21:8b:ff:
         0c:ac:e1:35:14:27:e0:2e:c2:01:ac:8d:e4:26:48:a1:bb:b0:
         bd:ad:62:cf:f4:0a:b7:e3:21:e1:ce:1c:0e:f3:96:f6:15:32:
         3a:e8:51:57:16:c2:47:e3:39:8a:26:a3:98:7e:bc:c8:90:ed:
         15:be:fd:c7:9e:68:39:1b:ce:8d:a2:12:d5:14:aa:a7:f6:a4:
         f8:bf:c9:3b:06:c5:6e:98:41:0a:4d:05:dc:25:92:b6:a2:df:
         d7:51:e2:6f:b9:8a:d8:b1:37:f8:97:5c:a8:48:52:af:76:ca:
         ad:1b:70:b8:66:b4:0c:4a:9e:27:51:83:a6:49:7e:f0:c0:8b:
         1a:f1:ae:d4:8d:bb:ff:10:53:29:d2:62:8e:69:36:a0:ac:8f:
         ab:0b:8e:06:27:42:ac:a3:35:b9:f3:e1:81:6f:ef:92:24:ab:
         3b:0f:5f:7a:41:d1:b9:47:74:fc:f6:97:3b:7c:ff:7a:36:7d:
         36:c8:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:21 2025 by rpki-client