Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e61a7c65-d6e0-3c97-9760-afbee2294132.roa
File:                     e61a7c65-d6e0-3c97-9760-afbee2294132.roa (raw, json)
Hash identifier:          a0nLFwpttCHA7Umnw1Y/c+Qj6+Pdey4tOlQYhK31wW8=
Subject key identifier:   5E:77:E6:8B:53:ED:FB:32:22:60:21:30:A8:B1:22:40:0F:08:87:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8B9D2C0DA31A8C40E1283528
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e61a7c65-d6e0-3c97-9760-afbee2294132.roa
Signing time:             Tue 12 Apr 2022 04:00:00 +0000
ROA not before:           Tue 12 Apr 2022 04:00:00 +0000
ROA not after:            Tue 17 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.50.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:9d:2c:0d:a3:1a:8c:40:e1:28:35:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 12 04:00:00 2022 GMT
            Not After : May 17 04:00:00 2022 GMT
        Subject: CN=21ad96eb-2e65-48cd-8309-8d22755852b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:61:d6:48:e8:ab:f5:e1:45:a1:87:f0:e6:
                    4d:9e:1c:72:26:8e:64:83:58:d5:9e:86:b6:f3:ca:
                    1a:f2:5d:82:5a:b5:5c:f4:d0:29:f5:6a:8e:cd:5a:
                    53:be:91:e6:72:da:63:af:8e:21:90:7a:e4:33:c7:
                    ac:72:21:e9:1d:48:00:6f:f5:b8:7d:35:e1:33:03:
                    8d:08:29:31:f6:b6:ac:8d:b1:32:cc:8b:7a:08:51:
                    e4:ea:0e:3c:54:86:5d:26:31:a7:75:41:8e:c5:c1:
                    7f:15:51:89:6c:57:dd:1f:7b:1d:3b:a7:e2:f0:e8:
                    2b:22:7e:2b:38:7f:ad:9a:18:8f:66:e0:0c:a4:ed:
                    dc:ef:a8:2d:9f:85:1f:dd:2f:2d:4c:92:01:5d:28:
                    35:6c:4c:ad:16:36:56:e3:00:50:71:c9:4a:0b:0e:
                    3c:43:af:08:88:ce:22:b1:24:86:78:0a:a8:98:bc:
                    aa:19:b0:f1:c8:51:be:01:51:11:ce:aa:b1:4b:46:
                    e9:d2:ed:76:96:fa:c7:ba:0e:02:c4:78:55:02:16:
                    4f:a7:17:fd:a9:ab:c0:1a:ff:f1:07:c7:d6:f1:4d:
                    ba:40:5b:b1:46:dd:ce:c4:7c:34:4b:0c:c2:4d:09:
                    e7:72:d7:92:f2:5e:ef:d0:33:b4:c2:76:c0:4d:c0:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:E6:8B:53:ED:FB:32:22:60:21:30:A8:B1:22:40:0F:08:87:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e61a7c65-d6e0-3c97-9760-afbee2294132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:28:50:40:2b:a0:f7:2a:36:8b:fb:af:a7:4f:c2:93:56:85:
         97:3d:97:d0:e7:28:f6:46:44:41:25:d7:15:36:f7:75:85:d5:
         eb:7b:54:78:f4:bf:4c:41:95:93:43:00:80:36:0e:f1:a7:ec:
         18:36:c4:78:87:b3:26:07:04:33:6f:a2:36:a4:3b:21:07:65:
         0c:b8:d6:b1:fc:22:e9:f6:2a:41:f7:d0:9d:b9:5e:d9:6f:35:
         c1:39:92:e3:a7:9f:8c:7c:f7:a6:ad:28:58:06:3a:c7:0b:62:
         5c:7d:5f:af:20:aa:94:3a:6e:be:12:4a:74:18:18:ae:1e:d5:
         fe:3f:e8:3b:8a:95:07:a7:63:93:6e:7c:74:d6:43:4f:8d:3e:
         92:7e:e7:f5:6b:98:36:8e:17:6a:12:12:73:2f:f0:de:aa:de:
         1f:6c:b8:0e:47:d3:99:24:ba:32:95:ed:ef:33:ea:87:24:d8:
         8e:55:ce:6c:54:05:b6:08:e0:4f:a1:dd:5c:ed:65:38:5b:1c:
         ca:4c:ea:46:27:92:bf:4c:ef:4a:2d:47:8f:4c:6c:90:f8:35:
         65:d8:41:6a:31:aa:8e:3e:81:84:40:d8:49:28:76:5b:fd:ac:
         b0:7a:23:b7:88:47:e1:7a:24:2a:33:8b:7f:95:6b:89:63:9d:
         71:e3:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:11 2025 by rpki-client