Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14f2f7e-db9c-34b4-9852-243f649cefa1.roa
File:                     f14f2f7e-db9c-34b4-9852-243f649cefa1.roa (raw, json)
Hash identifier:          NUXfRBYWVAAgGTxVjxs7/WgNtVvzEQMz4agFWLIv4J4=
Subject key identifier:   9A:2E:23:C3:FE:71:38:14:8A:7A:BA:E7:63:AE:6B:7E:3E:20:2C:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CB9B5EC4931DFDAE3FAE590C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14f2f7e-db9c-34b4-9852-243f649cefa1.roa
Signing time:             Wed 26 Jan 2022 05:00:00 +0000
ROA not before:           Wed 26 Jan 2022 05:00:00 +0000
ROA not after:            Wed 02 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b9:b5:ec:49:31:df:da:e3:fa:e5:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 05:00:00 2022 GMT
            Not After : Mar  2 05:00:00 2022 GMT
        Subject: CN=fff90aba-a4eb-4e12-89e2-7ac7a88ad399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:85:db:e5:52:d7:20:13:9a:dc:c2:7f:5f:
                    6a:a1:b0:5c:0a:7c:59:72:5a:46:07:08:16:9b:6d:
                    2a:21:34:fd:2a:c7:fc:74:3e:60:5b:7b:15:4c:7d:
                    58:c9:d9:d3:aa:01:70:c6:e8:cd:5c:6a:d9:da:33:
                    d1:fb:4a:95:47:aa:11:35:c6:a6:d1:13:e2:38:a2:
                    8f:d0:91:78:6d:f9:6e:60:93:a7:7e:8c:5e:89:d3:
                    c2:65:20:58:95:e2:a5:be:0c:98:93:3e:2c:8a:e6:
                    2a:6a:5e:9e:50:cc:82:ce:1a:15:b6:68:c2:c8:36:
                    47:d9:09:60:08:cd:b2:0f:e1:54:87:e6:55:1f:5b:
                    47:c8:f1:dc:96:79:df:f9:22:db:d7:aa:94:21:50:
                    8f:9b:02:b9:68:4c:20:29:d4:b2:0f:1a:a4:fc:35:
                    e6:98:f0:3a:a4:bb:1c:32:8d:49:ac:ab:1b:91:ad:
                    eb:ab:f0:8a:26:10:6b:18:6b:fe:e3:2b:a9:e7:15:
                    a9:2f:0d:d5:59:d3:21:dd:2e:e0:af:c5:61:4a:44:
                    9b:ab:74:4b:ba:4a:14:49:c0:ed:c2:70:10:ab:90:
                    6e:cb:41:5c:ea:d1:5b:aa:13:db:83:c8:4c:6c:82:
                    5d:64:d7:81:cd:b5:11:e2:d5:93:7a:d0:24:aa:a1:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:23:C3:FE:71:38:14:8A:7A:BA:E7:63:AE:6B:7E:3E:20:2C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14f2f7e-db9c-34b4-9852-243f649cefa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:a1:ea:36:43:f3:55:ff:5d:4d:cb:41:6f:78:11:60:ae:
         62:c8:f3:0c:d2:f1:89:73:19:86:7c:9d:e5:09:bf:64:61:3f:
         4f:5b:1a:da:be:04:db:ef:52:be:f6:a5:af:85:b6:69:12:e7:
         63:cc:04:54:65:76:39:e6:d0:da:7e:cc:77:56:23:71:28:9c:
         d8:3b:68:cc:3c:91:d8:26:93:4e:1b:1e:19:f0:c8:85:cd:fd:
         98:e5:85:c5:f4:c3:15:07:28:14:10:1f:d8:60:6f:43:a9:f5:
         eb:42:45:80:0d:06:e5:11:d2:7b:a7:43:19:ba:2b:53:27:f7:
         95:4c:fb:06:21:a9:1a:4c:fd:4e:36:30:fa:33:b8:bc:1c:f3:
         6c:b3:81:ad:d3:33:96:32:b7:52:e4:34:9d:c5:49:d6:89:bc:
         46:5e:40:d6:69:e3:7e:05:b5:9b:1c:1a:32:0b:fd:01:7b:1c:
         e5:7d:b0:b1:2e:65:5a:b5:07:d5:f2:7a:91:8f:5d:43:ba:67:
         17:fe:06:e8:24:34:f7:d8:a4:fd:e3:f5:cd:b3:10:fe:a6:65:
         db:7a:b7:56:ed:2e:52:16:cc:57:07:c5:2d:d5:81:76:8e:d8:
         30:6c:75:49:8e:14:c7:6b:30:a6:a9:7c:f5:1a:62:b8:0b:39:
         04:84:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:43 2025 by rpki-client