Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee56d6bc-8e63-37b4-8870-15ff9dc3835b.roa
File:                     ee56d6bc-8e63-37b4-8870-15ff9dc3835b.roa (raw, json)
Hash identifier:          cJM50cB0GQGFJKfHpuIgbKn0XeMcDcj0tOxgrTzeVBo=
Subject key identifier:   A9:3D:B6:13:CA:89:D7:EF:6B:23:A8:23:F2:4D:CE:23:32:17:7C:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D594E2A5F437719A8BDB76960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee56d6bc-8e63-37b4-8870-15ff9dc3835b.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:4e:2a:5f:43:77:19:a8:bd:b7:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=f03c933c-a57d-4a21-bfe0-b3c62d67a53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:75:70:60:49:9d:28:a8:7b:70:c9:0d:e5:
                    bc:fe:34:c5:ba:e7:82:d7:4d:a1:f6:d9:b9:fd:45:
                    1a:11:8f:58:be:25:b2:07:04:aa:6a:23:b7:d0:36:
                    1e:81:81:db:9e:13:e3:ac:60:19:be:bd:3c:05:ed:
                    51:62:60:09:d7:b9:4d:24:03:a4:5e:d9:86:f1:09:
                    aa:6f:90:eb:86:50:6b:2a:0c:14:3c:44:53:94:c6:
                    32:89:db:dc:94:37:3f:76:b9:fe:83:ab:f5:91:6a:
                    5b:52:1c:8c:2c:ab:2c:35:d1:2b:51:9e:5c:94:c9:
                    05:c9:5d:98:22:86:24:17:e9:16:47:f0:4a:37:64:
                    c4:1e:ff:3c:8e:2e:39:cd:61:42:8e:d9:9d:47:0a:
                    bf:f8:0e:d7:d8:2d:3a:6e:07:65:c8:5b:8e:23:68:
                    4e:cb:c7:9b:8a:dd:72:99:84:56:cc:f4:6f:56:8a:
                    2c:79:64:23:d1:bd:08:47:ed:c3:1f:97:60:ad:42:
                    9b:eb:77:f9:68:cb:1a:72:00:a1:13:ca:d5:67:81:
                    33:1e:c8:17:a9:de:a1:97:d6:7c:ec:f2:c5:d0:37:
                    2a:ce:92:7d:3e:43:19:e2:2e:16:1a:7a:95:b1:f1:
                    d9:e9:31:15:cd:c6:e3:a5:d9:22:4a:eb:5c:ce:57:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:B6:13:CA:89:D7:EF:6B:23:A8:23:F2:4D:CE:23:32:17:7C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee56d6bc-8e63-37b4-8870-15ff9dc3835b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:e8:90:43:34:fd:2a:f5:ff:8c:0b:1e:af:68:cc:57:f7:
         25:15:7e:9f:47:51:af:84:1b:92:92:19:82:3f:eb:8c:70:48:
         dc:18:9c:f6:38:d6:21:6e:6b:4c:fc:52:9f:8e:cb:b0:4a:8b:
         a6:21:5c:45:21:60:4c:a6:6c:3c:55:47:f5:13:21:2a:57:00:
         08:52:25:b7:8f:e5:7b:14:1d:92:9b:cb:9e:59:cc:aa:9c:b3:
         bb:76:6a:c8:98:5b:1d:1e:11:8e:1e:82:5c:1d:f7:39:a4:86:
         d8:3f:87:40:c7:68:bc:32:8a:4c:f0:b2:55:d7:4c:3b:a7:aa:
         8c:6d:4f:d3:05:d5:9d:5f:72:2f:49:b6:4a:65:ad:25:ff:32:
         e1:17:e4:43:54:d0:4a:c5:09:4a:3f:b8:39:6d:6c:ab:73:13:
         3b:f0:10:bb:d5:09:90:cc:91:c7:68:a8:0a:70:5f:32:37:95:
         52:a5:b9:fe:b4:91:fc:26:fc:4d:f1:d6:93:dd:93:35:55:17:
         52:ca:5f:8b:b5:d2:a9:61:41:c3:4b:86:07:18:de:f6:95:79:
         4c:59:78:42:07:47:e7:bf:bc:01:9d:b3:27:55:33:a0:97:56:
         53:40:8a:ec:7f:54:fb:47:f0:50:25:20:42:92:4b:cd:52:d8:
         92:17:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:06 2025 by rpki-client