Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6102922-98dd-36f8-8029-e9d4ee1aa8b3.roa
File:                     e6102922-98dd-36f8-8029-e9d4ee1aa8b3.roa (raw, json)
Hash identifier:          Sp4IySAQTidnO7wGg9moIjim09iHGT0hb++37N2SeAc=
Subject key identifier:   BF:8D:EA:1C:C1:16:A1:26:82:C7:7E:DD:AB:BE:1C:A7:F1:E7:7F:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7EC0BD6512EC64F8FA760100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6102922-98dd-36f8-8029-e9d4ee1aa8b3.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:c0:bd:65:12:ec:64:f8:fa:76:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=4b71db5e-eeed-4779-8e73-a12ca1650e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:4b:20:d0:c1:65:97:5e:72:f0:51:85:d3:
                    7d:30:28:a3:b6:9c:a1:68:d0:06:b2:5d:2a:2f:3f:
                    5d:89:7a:6f:5e:42:a1:b2:d4:69:81:7a:50:9a:a4:
                    be:10:99:5f:a5:38:5f:f6:af:37:43:71:b6:1d:11:
                    07:2a:f5:9c:43:35:24:07:ad:3f:e0:9d:74:ff:42:
                    35:d6:91:3e:e4:f3:b6:be:85:d8:21:6b:9c:28:ac:
                    8c:6e:4f:69:c6:c4:e0:27:44:43:8d:56:16:d5:91:
                    fd:fa:3a:c9:f8:c0:d1:66:ef:10:3b:69:59:54:0b:
                    e5:99:3e:5a:21:c0:ae:3f:22:73:5f:21:bb:d7:3a:
                    6a:67:ac:91:de:bd:56:36:2a:35:dd:ea:14:a6:2a:
                    10:8f:9f:43:9b:3a:73:26:f5:4f:49:17:63:f2:1e:
                    ba:f1:64:a0:4d:16:92:69:3d:34:7e:98:38:fa:6a:
                    89:98:ab:5d:6d:0f:8a:71:82:48:48:2d:d1:33:db:
                    c0:2e:f9:6c:06:78:73:ca:76:80:c3:3b:45:df:79:
                    2e:2d:4a:42:eb:7e:26:d7:dd:bd:15:11:37:b5:7d:
                    04:2e:80:aa:4e:8f:a4:d9:20:2f:28:4a:6e:72:67:
                    4b:3c:6d:d3:af:e2:46:d6:e4:f8:10:20:d2:b8:c7:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:EA:1C:C1:16:A1:26:82:C7:7E:DD:AB:BE:1C:A7:F1:E7:7F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6102922-98dd-36f8-8029-e9d4ee1aa8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:43:cd:7d:d0:1a:d6:f3:57:31:7a:d0:a3:12:18:d9:8b:63:
         e9:23:25:9a:5e:f0:b0:1e:d7:db:31:77:e6:e4:63:82:fc:42:
         73:c7:b6:70:54:9b:b9:c7:64:0f:08:d7:78:3c:73:88:83:b7:
         7a:5c:69:1e:19:9e:6a:cc:67:c8:a0:3a:c4:db:76:fe:4b:02:
         af:9b:1b:f3:a4:08:d3:73:88:ab:c1:67:7d:7a:40:9b:88:5f:
         92:b0:d9:78:0a:c4:b1:cb:c0:b9:5f:00:bb:ab:9a:16:64:d3:
         79:76:3a:f1:1f:f1:26:ad:10:8b:a5:92:ae:4f:7b:cf:ac:22:
         e7:12:50:ff:e1:59:6f:31:26:47:7e:50:ad:ac:da:c3:92:35:
         93:db:af:5a:29:53:b0:33:a1:e0:01:e1:29:66:7a:75:e4:34:
         00:5c:52:f9:4e:64:b3:36:9e:07:7b:bd:3b:a0:ba:46:e5:a9:
         e3:1a:75:e8:f2:ea:47:00:c0:1a:0a:40:89:0d:ca:26:55:f6:
         c1:b1:0c:30:f2:42:ed:ea:27:e6:ba:b0:59:d4:8f:d5:18:e6:
         77:a5:9c:d8:de:57:48:2c:4d:51:85:75:21:73:70:6c:1c:a9:
         6b:b2:4d:5d:da:6b:93:fe:ca:4a:7e:52:e3:4a:ff:e1:10:f8:
         df:2d:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:42:35 2025 by rpki-client