Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecff63d5-b661-3e64-a821-a40cf7efe558.roa
File:                     ecff63d5-b661-3e64-a821-a40cf7efe558.roa (raw, json)
Hash identifier:          OganovbT74s8WyuQcCQYG5PxRqkNccEKTXJeBkKcD5o=
Subject key identifier:   8E:E1:5B:ED:BB:32:7F:3B:4F:D4:1C:5D:02:50:83:2E:E1:E7:9C:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC810E130110D8D9FBD0E8D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecff63d5-b661-3e64-a821-a40cf7efe558.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.75.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:10:e1:30:11:0d:8d:9f:bd:0e:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=3f0ee52e-9e33-49b8-86f7-66de998124ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:62:c9:9c:05:d2:5e:21:79:59:82:51:87:
                    82:53:36:a3:02:17:e7:72:bb:7e:7c:d3:08:e6:cd:
                    94:2b:53:be:72:48:0b:e8:03:7e:21:4a:91:fb:65:
                    d9:25:29:20:89:af:a4:ef:09:ae:27:53:c6:fc:59:
                    c2:0b:d0:3b:71:e3:7d:06:7b:11:1a:7d:a0:48:0d:
                    b1:53:25:98:32:c1:fb:c6:c4:f4:21:d9:3e:9c:0c:
                    33:18:2f:a2:70:b9:7a:1d:ae:cf:5f:cf:26:c0:a9:
                    2f:a0:e7:01:f6:e0:6f:96:e9:7f:bf:96:95:d4:1b:
                    f0:57:a4:20:89:77:36:91:e4:1b:c0:85:3c:25:9e:
                    a2:1b:b0:00:37:46:22:74:41:ea:0f:b4:f6:81:73:
                    e2:a8:71:8e:88:a5:40:31:58:92:4b:ec:dc:f1:b9:
                    75:3b:7c:78:04:52:ee:9c:4f:69:71:99:96:60:3e:
                    45:ec:60:28:d3:fc:c1:e9:5a:07:de:95:46:05:76:
                    84:04:cb:04:c2:f4:f8:2f:b6:97:6d:63:c8:14:78:
                    8b:bd:c7:36:c4:0d:90:08:97:a4:d1:57:72:3d:3f:
                    95:14:58:10:d4:42:d6:4e:ad:29:bf:b1:64:7f:0b:
                    18:1f:f3:b4:ce:1c:c3:61:e3:16:73:98:28:c3:f8:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E1:5B:ED:BB:32:7F:3B:4F:D4:1C:5D:02:50:83:2E:E1:E7:9C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecff63d5-b661-3e64-a821-a40cf7efe558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:78:1b:1a:13:27:8d:86:ac:52:f9:dc:8b:2a:24:d6:12:ad:
         da:fe:c0:61:62:9a:c3:ed:04:58:42:83:00:ec:50:6c:b3:c7:
         4a:6a:b4:f2:3c:c8:bf:b6:36:12:f6:58:46:e5:46:23:08:cf:
         16:ba:29:05:46:dd:b1:17:55:d9:08:5c:15:ad:5e:35:8f:a6:
         2d:b6:73:a8:0a:2a:02:aa:f8:b7:25:2b:e3:73:a3:13:47:e7:
         25:94:57:50:32:e4:79:3e:0f:56:2e:58:66:2c:02:bd:33:a8:
         df:eb:af:65:d7:1e:59:bb:fe:3b:18:ac:b7:ca:9a:97:69:5a:
         79:45:d6:35:db:19:07:c7:0c:58:6f:cc:d0:d1:36:25:f8:0d:
         c3:4d:8c:87:46:09:42:cb:2e:1e:6a:93:d6:2b:2c:27:31:c7:
         c3:e1:07:43:6c:81:26:56:9c:48:94:2d:c4:82:63:00:ad:23:
         c2:f4:86:12:32:27:b1:3a:f2:fe:22:78:41:c5:f1:5b:9e:29:
         d0:38:90:9d:fa:15:38:0f:f1:a7:aa:42:b3:e8:c5:a4:c1:b1:
         e1:79:a7:c2:eb:dd:58:7b:1d:05:03:c5:17:3b:21:f3:a8:2d:
         89:c6:66:7a:d2:d7:42:b2:78:5b:7f:f7:24:06:65:20:d6:60:
         a6:ac:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:56 2025 by rpki-client