Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3cde672-0eec-3ce1-92d9-4d236d8d8260.roa
File:                     e3cde672-0eec-3ce1-92d9-4d236d8d8260.roa (raw, json)
Hash identifier:          jkeHSm/iBbIG6CwKWilEbTYBeY5wC0ac3Hk41MdlPno=
Subject key identifier:   2C:FA:18:85:C5:62:0E:D3:AA:4D:3B:0B:79:47:8B:2D:34:8D:16:08
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBC2EA5710839C239DF551580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3cde672-0eec-3ce1-92d9-4d236d8d8260.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.108.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bc:2e:a5:71:08:39:c2:39:df:55:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=8bdbb783-5f05-4a5d-9c85-aebcb5265406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:cf:07:99:11:9e:d4:92:21:1f:b7:11:45:
                    91:70:ad:58:7f:ac:05:a2:62:a3:35:c8:03:ad:a5:
                    f8:ff:69:09:3b:e7:fa:de:a1:67:10:d2:79:b1:6b:
                    2e:0e:8c:ad:44:68:a9:b3:0a:f2:63:ce:99:0f:92:
                    00:d4:f4:68:c7:9a:2c:6d:4b:b0:96:45:dc:94:4d:
                    1c:69:b2:7e:11:19:a9:75:35:62:5b:46:b4:e7:d0:
                    37:18:43:57:52:a2:ae:3a:e2:55:4a:04:dd:a5:0f:
                    6d:64:81:a7:86:61:dc:66:56:d8:cb:22:e4:94:ba:
                    c4:e6:eb:90:78:96:85:b3:35:8e:04:18:f1:c8:3d:
                    20:7b:7b:84:78:a8:f9:73:67:8a:11:95:e9:7c:16:
                    bc:bd:0c:6f:89:4a:a3:40:01:4c:1f:19:3d:69:5e:
                    91:61:69:af:5e:a4:d4:55:cc:07:8c:fc:28:a2:91:
                    68:fd:11:a7:69:a6:07:37:eb:39:25:9a:10:58:f3:
                    85:07:45:2b:99:24:dc:c4:bb:1a:b8:ca:fb:f4:33:
                    fc:8b:ee:de:46:90:1f:93:31:ce:e9:f3:a7:09:57:
                    8b:97:13:95:d3:80:e2:43:ba:39:3c:9c:1a:70:61:
                    cc:b8:fd:84:07:00:57:7e:fc:35:ab:b6:a8:30:31:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:18:85:C5:62:0E:D3:AA:4D:3B:0B:79:47:8B:2D:34:8D:16:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3cde672-0eec-3ce1-92d9-4d236d8d8260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:48:e6:ec:30:33:76:b6:30:73:26:23:fc:2b:8e:18:2a:
         88:e2:fe:53:6a:9d:55:93:71:08:3f:6a:b5:ee:b0:4d:a8:39:
         6e:d9:eb:d6:45:88:28:25:5d:a3:7a:3b:9f:c9:db:37:e1:44:
         52:e4:b9:58:05:b7:e6:70:68:ee:cf:ac:6c:5c:ca:f7:8c:ff:
         4a:9c:04:00:d9:05:42:87:81:f9:33:e9:6a:b2:26:9e:95:bf:
         28:96:56:50:83:f0:d8:7e:0d:b4:82:f5:e6:ab:09:71:68:4c:
         52:e7:7f:2f:5f:b7:3e:e9:ed:e6:a9:4d:ad:e3:80:1d:c8:dc:
         af:bf:ae:6c:5b:9b:bb:cb:38:79:34:e3:d2:30:81:e5:94:a0:
         ab:09:fa:6c:ef:7a:f5:ce:84:19:f9:87:f4:d1:32:a4:4d:55:
         a3:b8:0b:c9:8a:a4:01:ab:ec:c5:f8:56:22:02:5d:bd:01:6b:
         86:4f:02:1d:3f:bd:d8:5b:35:bf:14:78:85:86:fe:e2:ef:b8:
         35:35:45:2f:f7:b1:87:5d:cf:aa:e4:a2:9e:c9:f2:a7:76:47:
         25:81:9c:85:1a:ff:4b:2c:67:04:de:d3:69:bf:15:54:a2:85:
         ad:72:48:05:9c:c3:08:87:fd:22:5b:52:2b:7f:ec:38:64:5c:
         74:be:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:51 2025 by rpki-client