Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2946359-c4d2-3dbc-9f1d-c97dd5a70533.roa
File:                     e2946359-c4d2-3dbc-9f1d-c97dd5a70533.roa (raw, json)
Hash identifier:          0rz9iQgbRM/dh4rRbHpYmIi32c25WXRG3lQ3oRpRJ40=
Subject key identifier:   8B:15:DD:69:2F:DC:3E:16:30:33:A3:E5:83:32:86:48:9C:D1:D2:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D588CA7BF61F3F6807E7C7260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2946359-c4d2-3dbc-9f1d-c97dd5a70533.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.71.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:58:8c:a7:bf:61:f3:f6:80:7e:7c:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=6f6c9457-9a8e-487a-8dee-2533b0872c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:0c:2a:91:30:24:5f:18:fd:16:e9:54:6e:
                    63:a3:b2:56:14:7c:b7:22:e2:5f:61:0e:5f:2a:4e:
                    eb:c8:a9:56:7c:64:01:b7:1c:4f:6a:ac:83:ab:e8:
                    41:29:99:3a:06:6a:06:c4:a7:80:f9:64:e5:c1:71:
                    05:46:df:b3:86:54:ba:8b:51:9e:fb:5c:e2:d4:5d:
                    ef:63:89:94:b1:a9:f1:ad:c9:47:f2:8b:5f:1a:c5:
                    c6:66:35:82:ce:a5:8a:01:fc:96:03:90:3e:18:1d:
                    f7:1b:33:46:f2:04:91:be:3a:c7:2b:4b:a8:b8:72:
                    a9:37:54:00:b7:ff:36:ee:1b:09:77:a5:7c:0e:56:
                    23:62:b4:a6:67:be:18:45:37:ca:ee:b0:db:33:e4:
                    cd:ff:fa:22:92:c1:0a:ee:53:84:f1:a2:91:6c:c3:
                    76:e8:6c:c8:c5:71:1a:0c:a3:48:15:c4:c8:32:f2:
                    bd:ac:f9:4d:2b:06:87:3b:a9:7a:f1:ec:bd:0a:44:
                    6d:d6:63:77:df:86:7c:f3:12:b7:2e:78:1a:a4:bc:
                    91:12:3f:0a:aa:da:90:3b:e9:70:8b:5f:3f:d5:40:
                    9b:2b:f5:5e:16:28:25:3f:93:c9:40:03:a2:a6:7d:
                    dc:ff:68:1e:79:f4:cf:b3:b0:51:32:13:6a:18:0f:
                    a8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:DD:69:2F:DC:3E:16:30:33:A3:E5:83:32:86:48:9C:D1:D2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2946359-c4d2-3dbc-9f1d-c97dd5a70533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:39:05:e1:ee:e6:a7:83:aa:5e:96:0f:ac:ac:f1:ad:23:
         5f:88:dc:90:ca:4d:9d:04:e0:de:b7:ca:90:9b:58:7e:f3:bf:
         7b:2e:ee:66:17:0b:da:ac:5a:55:07:16:58:8b:97:bb:c1:7b:
         92:cf:cf:d7:bc:7b:4f:fd:04:ff:07:65:eb:8e:17:12:32:15:
         b9:34:21:a9:77:aa:d0:b1:4f:16:27:b0:f2:87:38:a2:f2:ad:
         da:3c:fd:fc:e4:d6:e2:92:29:f1:1d:96:59:59:c0:78:c2:0c:
         03:5d:f0:e8:53:d0:44:3b:05:f0:ba:2b:21:03:1b:6a:ed:b7:
         fc:5e:88:2f:90:c4:a7:d9:eb:86:e0:73:38:32:e2:af:0d:c2:
         73:b3:9d:cc:43:82:cd:42:c1:e1:5a:69:95:d4:94:1c:d2:0d:
         6f:98:8c:a8:ac:23:71:a1:74:25:55:86:d0:32:83:b3:1b:53:
         d3:a9:de:d0:6e:f7:90:63:b7:26:cd:72:75:72:62:77:59:36:
         0a:58:e0:9a:15:e1:86:12:bd:ea:ad:af:24:a5:4a:b9:d1:5d:
         f2:fd:20:54:c6:fa:2d:6d:05:64:4b:35:d7:27:c2:60:9c:be:
         d6:1f:c3:45:c3:21:10:6c:79:f5:d3:1b:50:96:a7:d3:76:06:
         a7:29:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:36 2025 by rpki-client