Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e95dffa8-ebb5-349a-b030-302ffeff63fa.roa
File:                     e95dffa8-ebb5-349a-b030-302ffeff63fa.roa (raw, json)
Hash identifier:          qzvgTd1eKP3KTn2r4HKprJdNfHR48GhewAtiREDwRx8=
Subject key identifier:   CD:F2:A7:AA:F6:48:47:34:0D:03:85:D2:0B:4A:F4:B4:AD:E0:C9:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF2AD27BC99779465504EAF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e95dffa8-ebb5-349a-b030-302ffeff63fa.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:ad:27:bc:99:77:94:65:50:4e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=ccbc25fc-9b50-44c3-87d1-bee1993506b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:fe:39:1b:99:ee:10:9b:bf:46:87:78:5b:
                    7f:1e:b4:b7:9b:b0:b3:25:41:d7:77:b0:da:00:8b:
                    7b:5c:81:7c:41:a2:a7:62:ff:b1:ec:63:af:6f:80:
                    50:48:3d:96:8e:b1:8c:1c:05:7e:44:74:86:e3:ff:
                    4d:9d:f4:c6:72:61:cb:cb:ca:b9:aa:81:67:eb:ae:
                    28:07:4f:6b:77:b7:c6:97:3b:96:76:7f:72:6d:a7:
                    c0:c6:6e:1e:c6:e6:9e:1e:9c:19:d7:27:91:08:02:
                    33:10:c2:9a:d1:09:17:ef:8a:56:63:ab:d4:da:c6:
                    ad:74:d1:6c:1c:79:10:88:1f:5a:18:60:ac:e5:44:
                    ec:67:51:21:e4:3d:cb:93:05:0f:fe:a3:e7:a9:eb:
                    30:fe:51:00:68:0c:7f:42:ee:a2:7f:40:18:14:e8:
                    85:e0:9c:3e:68:1f:b7:c7:5f:d4:cb:ec:48:3d:83:
                    eb:e4:b0:a4:2e:83:2f:da:38:22:e5:50:d6:21:4f:
                    f9:75:77:d7:63:7a:e3:84:15:0f:df:0d:72:9f:cb:
                    d8:04:23:b5:d1:82:97:42:fb:83:15:f6:83:74:47:
                    a9:89:83:eb:54:a8:08:f7:d7:31:01:ad:2c:bc:de:
                    af:22:56:9c:48:5f:a7:6a:38:0d:82:60:f8:6e:3b:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F2:A7:AA:F6:48:47:34:0D:03:85:D2:0B:4A:F4:B4:AD:E0:C9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e95dffa8-ebb5-349a-b030-302ffeff63fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e9:8b:79:d8:5f:7d:ca:dd:2a:7d:bd:2d:1e:e8:c6:7d:49:
         76:3e:50:2c:3d:0e:1e:98:3f:81:e3:f2:b4:a5:31:54:c9:ba:
         40:94:f1:c7:22:27:b4:6b:f3:af:7a:46:f9:6b:6c:21:06:ed:
         aa:19:c5:b7:28:7e:72:1b:b2:52:b7:4d:a8:fb:58:ff:18:21:
         0b:5d:e2:c6:c4:16:96:f9:d5:ba:20:e5:b6:59:77:a0:2e:69:
         64:b7:ee:f8:61:68:8f:49:b8:5a:a3:7e:75:f1:0d:96:86:c7:
         cf:8b:94:77:b7:f3:15:f7:06:71:e2:77:e4:59:aa:91:7f:de:
         e2:31:62:24:ac:49:91:fc:38:c4:f8:b6:8f:0c:ee:da:22:bc:
         2f:52:a2:68:bf:b1:67:78:d7:c2:7c:3f:de:4b:f0:d3:f0:3e:
         40:75:4f:a4:85:e1:1d:4b:b4:53:70:e4:e7:ec:14:c2:27:6d:
         b9:c8:88:08:5b:be:62:df:da:71:0c:78:e9:2d:af:24:c0:79:
         07:7b:cc:e9:9c:b4:ca:2a:07:01:37:0f:32:83:53:1c:70:bf:
         2b:58:91:01:a9:67:46:41:98:dc:6d:34:42:97:ca:70:e5:c4:
         8d:6f:66:c9:98:f9:94:52:71:3c:97:fc:68:aa:3a:69:e2:d0:
         84:78:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:12 2025 by rpki-client