Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4826c9c-0744-3edb-826f-6c169c4fc06e.roa
File:                     e4826c9c-0744-3edb-826f-6c169c4fc06e.roa (raw, json)
Hash identifier:          8XVARUXo4+ovooDQY+qsQbNdBA0P13A6PCVztSkfi4s=
Subject key identifier:   82:A4:71:45:00:12:80:44:A3:D9:23:4C:96:CD:FF:73:3B:22:4B:66
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840353C24D2C04443A24F081B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4826c9c-0744-3edb-826f-6c169c4fc06e.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:3c:24:d2:c0:44:43:a2:4f:08:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=06b2a00d-4b0a-4585-931e-4368c1eb5146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:47:78:8e:a1:87:b7:7d:6c:9e:c4:f6:75:
                    c7:6a:5d:e2:f2:d9:d1:d3:91:7d:9e:c4:26:e9:ae:
                    d5:22:3b:b3:95:37:2b:3c:49:af:c6:06:15:aa:0b:
                    4e:b0:7e:51:e4:c4:d5:19:40:3a:67:3e:d3:a2:17:
                    1b:93:c1:b2:0a:33:ba:52:e1:17:4a:1e:69:13:64:
                    4e:10:7d:87:a4:f6:bc:b4:31:ae:e1:77:ad:fe:6f:
                    d9:c9:c6:25:ee:7f:e5:8c:d4:a1:83:a7:a9:a9:4c:
                    dd:4d:5c:ad:81:ae:f6:10:bc:92:c9:22:15:84:ad:
                    7e:86:0b:7f:de:58:83:79:f4:ef:02:93:ad:41:bb:
                    0c:51:db:07:b0:b1:1b:1c:6a:67:c6:ac:36:57:fd:
                    df:be:b3:87:0e:91:ee:17:cd:31:3d:39:3a:75:02:
                    93:9a:11:65:07:cb:80:cf:2a:06:31:fe:c2:8e:04:
                    86:bd:b5:34:48:df:e0:67:ad:02:2a:4c:65:64:c1:
                    0f:89:99:09:57:e5:ba:29:c1:65:c2:af:f5:f9:b3:
                    be:6b:7e:16:a8:21:20:ad:c9:93:3c:af:f5:1d:92:
                    43:d1:15:bd:24:02:40:ce:e0:b9:f5:ed:14:91:29:
                    d6:be:35:59:86:05:29:dd:15:11:fe:e9:ca:eb:fd:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:71:45:00:12:80:44:A3:D9:23:4C:96:CD:FF:73:3B:22:4B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e4826c9c-0744-3edb-826f-6c169c4fc06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:49:19:f6:b0:08:92:97:3f:0e:fb:b9:6b:81:e3:53:2b:ca:
         b4:ae:34:e5:22:ae:5e:f0:83:56:9c:6b:28:d5:dd:c8:8d:ee:
         55:f7:6d:3f:56:b5:bd:7d:9d:ea:9d:27:cb:0d:04:cb:bc:84:
         18:a5:6b:43:ea:34:ec:b6:05:6d:b0:6e:01:81:20:61:21:c7:
         35:6b:f0:cd:e0:ea:a5:05:74:1e:23:7f:1b:dd:26:70:26:8e:
         29:0a:d3:ff:77:09:38:c2:f6:69:d3:12:d4:1c:cc:30:be:45:
         07:ec:57:2e:62:a1:84:3e:cd:1c:2e:80:55:c1:ed:c4:c5:71:
         d9:6a:59:22:41:7f:4c:8a:dd:9e:53:c2:5f:7b:b8:e6:b6:53:
         88:a9:82:85:ec:a4:68:17:54:ab:64:f7:13:cf:98:63:48:3d:
         f2:57:f8:3d:c8:d9:85:4b:22:fb:0d:06:84:00:89:32:32:c0:
         2f:a7:8a:2a:a2:e4:9e:f2:9e:01:8c:0a:5f:ab:69:83:d0:49:
         b6:b4:de:7a:90:8f:f2:a4:10:3e:78:8c:a6:76:fb:0c:db:73:
         e3:7e:62:77:10:47:96:ff:36:2a:01:ec:58:5b:3b:13:80:88:
         60:90:82:d2:5f:c6:25:b4:80:99:af:7f:de:0b:c0:bc:f3:f2:
         8e:7b:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:52 2025 by rpki-client