Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece95e3d-afc2-325b-89b6-1619914cf1f4.roa
File:                     ece95e3d-afc2-325b-89b6-1619914cf1f4.roa (raw, json)
Hash identifier:          6IuxyZdp7tx8BwsvEQMpYYYcDVI14kG6XySmUS3p60I=
Subject key identifier:   21:B8:10:E0:C5:93:4F:9C:96:A8:68:6B:3D:55:6A:D8:93:52:F2:36
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0A7F0FEFB8BAC8B19A74C700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece95e3d-afc2-325b-89b6-1619914cf1f4.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.89.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0a:7f:0f:ef:b8:ba:c8:b1:9a:74:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=c5bede4c-b424-4e56-b728-02f5d3f94e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:8a:1a:ea:39:17:f8:9a:94:95:a1:37:c8:
                    22:99:5b:fd:03:5a:d4:91:b5:27:3f:e8:46:f3:e6:
                    f6:e3:67:f7:6d:6f:11:0f:8d:2c:13:ee:be:e5:7c:
                    82:2c:a8:82:a4:10:ae:e2:2a:e8:b4:d6:b5:01:85:
                    f7:0f:0d:cc:24:52:21:13:46:03:51:4d:8b:69:a0:
                    56:96:75:f0:5c:f6:c9:50:69:e0:17:8f:8a:8d:cb:
                    ef:9e:76:63:81:27:96:e3:ce:dc:49:33:de:26:ce:
                    45:fd:26:c4:f3:c5:e0:22:82:c4:eb:e5:1b:9b:2e:
                    24:47:76:c8:0c:5a:41:66:ea:a2:ab:90:80:a7:d8:
                    a6:c2:2c:fb:a3:8e:c8:2e:36:68:fe:9d:17:8c:93:
                    55:e7:6d:9b:2b:e3:46:69:71:df:e5:7e:2c:3e:38:
                    c5:06:b5:eb:1f:2a:bf:fe:37:85:9d:f6:57:90:85:
                    ac:5a:22:fc:0b:0d:57:c9:27:3b:c7:bb:9f:5d:97:
                    ce:90:66:58:de:53:1e:bf:25:3c:d8:16:16:a7:71:
                    67:21:af:f0:c1:b7:ce:45:c0:e2:91:45:18:d5:96:
                    86:c5:9b:4b:c3:c1:d3:04:5f:13:00:30:f8:7d:0c:
                    0b:12:7f:6b:a5:2b:29:63:de:9f:92:f0:07:16:4f:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:10:E0:C5:93:4F:9C:96:A8:68:6B:3D:55:6A:D8:93:52:F2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ece95e3d-afc2-325b-89b6-1619914cf1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b5:cd:15:cd:1d:9a:36:7f:c3:bd:ba:8e:d2:bf:9b:ae:e0:
         1b:4d:1f:41:2c:e2:56:b2:6b:e0:f3:0a:81:2c:72:4d:96:2c:
         23:0a:de:e0:01:bf:d5:92:d6:e6:d1:20:88:ff:61:4a:95:10:
         dc:b3:61:73:1d:4c:31:a8:0a:6b:2c:ba:57:a3:2e:dc:42:6b:
         4c:e2:ea:9a:d8:df:fc:b2:a1:b9:8f:f6:13:a7:d7:d1:20:e5:
         29:e9:03:17:85:0f:cc:03:41:40:fb:bf:ec:43:ce:f8:8c:39:
         f1:3c:23:a8:5c:9c:16:1c:b1:cb:31:95:cf:43:0d:42:c4:a0:
         ae:77:e2:6a:9b:62:75:8f:cd:ec:48:f6:8e:bd:54:2b:d8:aa:
         55:9b:ca:e9:32:3a:17:3e:0b:22:20:0b:54:ec:f0:a9:1a:7f:
         30:16:60:26:59:25:6e:2c:6c:0e:e2:6d:28:52:68:ef:46:f1:
         6e:75:00:7d:6d:5d:e9:09:2f:6c:92:b6:c0:a1:7f:0a:51:e0:
         26:f5:eb:b9:a1:fa:1a:0c:d2:a0:44:4a:f2:eb:df:e1:9d:65:
         59:4d:4f:38:25:54:1d:69:0e:86:ee:8e:43:59:a0:e4:ee:98:
         36:a6:c3:cf:a1:c2:0b:b6:c8:f9:f6:57:0a:55:3d:83:91:80:
         f2:4e:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:33:09 2025 by rpki-client