Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed9e6f23-95bd-365e-9943-f04a58c1ec2a.roa
File:                     ed9e6f23-95bd-365e-9943-f04a58c1ec2a.roa (raw, json)
Hash identifier:          W+33qRayBYErgJvn0VPYX1JVIMDS6WKCce73ir0pntA=
Subject key identifier:   E1:F9:55:C0:E3:09:9D:51:F2:51:A3:24:3F:B5:7C:D8:9F:8C:20:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DDB962DCFDC01D4C245E9D8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed9e6f23-95bd-365e-9943-f04a58c1ec2a.roa
Signing time:             Tue 10 May 2022 16:21:07 +0000
ROA not before:           Tue 10 May 2022 16:21:07 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.88.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:db:96:2d:cf:dc:01:d4:c2:45:e9:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 10 16:21:07 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=d79e2919-17bb-4018-904f-2e0d1acb11f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:7d:81:c7:6a:3a:be:e4:0e:65:f9:81:eb:
                    1f:55:ca:75:f7:9c:0e:3d:8a:63:b4:bf:45:9e:40:
                    fc:66:d3:a4:e3:bc:b9:c3:fc:04:cf:77:18:82:6a:
                    7a:8f:04:3d:e1:da:e5:88:9b:64:38:3f:b3:41:0b:
                    b2:fb:83:d7:42:01:0b:c3:23:e3:58:99:31:64:1c:
                    e6:84:9a:59:9e:46:a9:ff:ba:1c:ec:03:44:ce:6e:
                    34:94:a2:de:14:91:3b:57:51:2e:07:2d:d2:92:27:
                    ba:13:d3:47:2d:36:ea:71:0c:26:7d:c9:c6:e5:75:
                    dc:68:9c:66:e4:19:41:3c:3d:2a:06:cb:03:52:5c:
                    6d:d0:33:54:38:c0:8c:31:ff:1e:a4:81:5b:b9:68:
                    42:01:06:61:92:63:b8:44:ed:50:36:b5:48:de:6c:
                    af:a9:9f:08:f6:ba:0a:4c:d2:75:50:cd:d3:27:fe:
                    58:e0:24:60:3f:0d:3e:1f:40:f4:35:b6:c4:bb:a9:
                    f9:ca:a2:83:e8:b8:63:b5:30:08:45:54:8a:98:c4:
                    ef:0e:05:68:98:f6:dd:30:59:f2:55:b2:0e:05:a4:
                    9f:b2:a6:b6:bf:c8:32:92:fb:86:92:9d:47:0e:10:
                    9b:50:3b:de:26:f8:f1:00:6d:6c:bc:f9:ec:32:0a:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:55:C0:E3:09:9D:51:F2:51:A3:24:3F:B5:7C:D8:9F:8C:20:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ed9e6f23-95bd-365e-9943-f04a58c1ec2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:12:ba:84:bb:98:4e:d5:3f:d3:75:d7:4d:14:4c:f9:d5:
         0c:89:1f:56:84:9a:c5:b8:d8:6b:5e:eb:9b:fa:fd:7b:76:ce:
         fb:26:f5:3b:78:1e:9a:78:3f:34:d7:fb:79:62:3b:d1:64:9b:
         f3:f3:20:3b:2a:fe:44:bc:1d:aa:55:e6:2f:79:70:62:3e:ea:
         ae:04:54:cd:92:da:ab:89:c8:3e:8e:c9:2e:b9:d0:12:77:47:
         6d:86:2b:53:b7:9f:44:65:8a:48:aa:f8:20:da:98:7c:cd:23:
         82:ff:22:48:40:0b:ec:2c:31:b8:ea:cf:f3:a7:6e:f3:60:d7:
         c8:3f:58:ed:06:b6:e2:8c:4f:71:ea:bc:53:f1:44:81:a4:5d:
         80:8d:d1:91:d3:d2:f3:3c:42:76:f3:b4:64:e0:69:74:65:10:
         6e:af:72:c1:9c:ad:14:10:fb:8c:78:d3:3f:21:bc:2a:f7:79:
         fe:67:8e:21:7d:8c:76:58:28:be:8e:6a:f7:43:74:62:33:71:
         b4:9f:42:01:f9:2d:32:76:4c:60:58:17:a9:6c:63:93:f6:b9:
         84:63:c3:96:e1:74:a3:e4:9e:63:a5:0b:8b:48:36:15:08:6f:
         30:93:bb:83:c5:44:c2:14:af:79:ba:af:9f:a8:e0:ed:39:b9:
         8f:06:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:00:37 2025 by rpki-client