Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90324e0-4cf0-36be-a3da-cd50262a7345.roa
File:                     e90324e0-4cf0-36be-a3da-cd50262a7345.roa (raw, json)
Hash identifier:          IcbIT8K6Kci836VAulw//MsAqyT5j/jkconhiZ+0WUM=
Subject key identifier:   E0:01:00:D0:05:D5:58:B3:A5:BD:09:02:1A:59:3E:3B:63:AF:83:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE121EC2642F5B023F039F900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90324e0-4cf0-36be-a3da-cd50262a7345.roa
Signing time:             Fri 11 Nov 2022 12:00:00 +0000
ROA not before:           Fri 11 Nov 2022 12:00:00 +0000
ROA not after:            Sat 17 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.52.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e1:21:ec:26:42:f5:b0:23:f0:39:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 11 12:00:00 2022 GMT
            Not After : Dec 17 05:00:00 2022 GMT
        Subject: CN=0513ce7f-4e88-452e-8d5f-e228ffb06b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:75:24:21:d5:b0:f4:74:a9:8c:de:67:2a:
                    19:b6:5e:81:86:6a:ad:44:2d:10:76:80:1c:6e:11:
                    30:2f:1f:89:8c:cf:41:40:79:67:36:25:e6:c1:bf:
                    d1:fa:06:d7:09:19:da:71:64:7e:61:e1:92:db:0a:
                    ae:e3:29:e2:f8:d3:c0:f1:d5:90:14:80:5c:7d:39:
                    a0:91:06:66:c1:65:06:9c:92:e4:9d:20:66:21:60:
                    13:a0:ea:a3:5b:6a:34:d2:2a:9c:32:71:57:9f:ae:
                    40:e1:96:d4:99:1e:23:d3:31:6d:55:2b:3f:a3:c7:
                    8c:82:44:00:18:af:69:d0:3e:ae:c5:3b:d8:1c:bd:
                    3a:1e:ea:df:60:6b:c2:20:2b:41:a1:9f:45:c4:6d:
                    2a:aa:57:6b:35:3b:c1:16:8b:3c:ef:83:cf:c6:e9:
                    23:04:48:c6:3a:1e:60:f9:41:4f:4b:2e:3c:3a:14:
                    6a:b9:58:42:1d:eb:7e:ac:47:58:0f:ac:cf:75:80:
                    0f:06:70:c9:7d:dc:06:82:8e:05:25:d6:c3:67:db:
                    81:5c:4a:24:69:96:ce:86:99:3d:b3:83:6b:f1:84:
                    58:c9:ea:a9:3a:51:e1:fe:f9:cf:06:a2:8c:cf:ed:
                    07:a1:3d:35:ac:43:58:a3:d1:5e:bf:01:0c:19:a1:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:01:00:D0:05:D5:58:B3:A5:BD:09:02:1A:59:3E:3B:63:AF:83:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90324e0-4cf0-36be-a3da-cd50262a7345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:01:4a:1a:ce:aa:2a:ba:81:65:31:ec:1c:73:4f:11:8f:
         71:f3:27:da:34:c4:d2:75:bc:e8:3d:5d:16:f3:e1:03:27:4c:
         dd:70:a4:42:c5:64:df:c8:51:dd:14:16:62:5a:29:86:44:0a:
         4e:b0:d7:d8:c9:01:7e:a8:ea:e4:11:4f:f7:57:c7:7d:25:0c:
         49:68:2d:3a:ba:6f:38:61:4b:56:01:99:5e:24:9b:3c:44:b5:
         42:4a:16:d0:6b:4b:4a:95:72:d4:33:a7:29:a7:bd:27:c5:37:
         9f:ce:6e:a7:7e:5f:e5:16:0f:86:20:a3:ee:96:eb:29:eb:29:
         6c:96:c1:b5:05:b4:27:e2:a7:26:dd:75:56:8c:56:ca:ff:ae:
         ec:bb:d0:84:58:2f:38:a3:3f:4b:18:26:ce:e6:75:99:da:1c:
         6d:d9:05:51:e0:11:78:c3:46:bb:6d:be:0c:01:05:94:29:6d:
         74:a7:53:17:3a:c9:96:09:07:ed:d1:19:f2:75:0c:a7:d1:f9:
         80:3b:77:03:2f:27:ec:2e:e0:02:60:07:e7:e3:9c:d3:39:a8:
         9d:11:82:91:c6:69:da:69:7a:a7:51:9a:25:40:86:6f:28:e6:
         75:ea:21:3f:2b:35:9e:66:4a:cb:b2:72:a0:04:84:2e:cf:cc:
         0a:53:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:22 2025 by rpki-client