Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f166d39b-fb86-392c-b3e9-39c6f5b03cdd.roa
File:                     f166d39b-fb86-392c-b3e9-39c6f5b03cdd.roa (raw, json)
Hash identifier:          r/5JezofRK2KJs7HNy5xTA2hORWumw/vicGAbrcrvD4=
Subject key identifier:   48:1A:23:61:EB:6F:85:EF:68:85:B3:95:B6:A7:DF:9F:B7:4B:5E:35
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840465CD53F24279F22DBB53CB4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f166d39b-fb86-392c-b3e9-39c6f5b03cdd.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:5c:d5:3f:24:27:9f:22:db:b5:3c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=f44f5828-43a4-417e-8272-72360b9f41fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:fc:bb:76:76:4f:6b:bb:54:48:08:91:ff:
                    af:0e:b1:fc:61:2a:9e:87:3e:01:06:e5:70:88:0c:
                    55:53:be:f5:f8:ae:a8:98:38:b3:1a:7a:87:87:4d:
                    ca:8c:83:1c:c5:b7:3d:11:6c:37:a1:fd:83:8b:9e:
                    bd:4b:49:fd:11:68:de:5d:d1:8d:cf:8b:22:1a:2f:
                    e3:43:80:4a:43:df:97:1b:40:6a:54:93:97:48:dc:
                    bd:52:fb:da:9c:98:4b:52:77:c3:b6:b8:08:0d:d2:
                    30:32:23:ac:9c:a8:c0:5f:36:65:41:da:6e:d5:dc:
                    97:f0:ae:30:9c:eb:ca:9c:68:6d:f1:4a:56:bf:ad:
                    40:2e:38:13:24:9e:94:7c:36:4e:3d:5c:10:a1:11:
                    32:a3:6b:f9:b5:fb:29:0b:d0:22:6d:bf:1e:05:fb:
                    36:4b:2b:93:83:c2:79:ab:98:7e:c4:3d:c6:ca:3f:
                    0b:3f:68:99:e0:ce:23:2d:9c:84:a1:58:bf:e9:89:
                    f6:d8:68:30:82:14:ec:a6:a4:90:93:f1:05:11:d2:
                    56:07:a3:8e:a2:e2:77:0e:3f:e4:23:9b:5f:7c:9a:
                    06:1a:4e:18:2e:0f:11:80:e7:c2:f4:26:b6:1f:01:
                    5b:a0:28:69:74:7a:46:20:05:0a:05:ec:22:17:f5:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:23:61:EB:6F:85:EF:68:85:B3:95:B6:A7:DF:9F:B7:4B:5E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f166d39b-fb86-392c-b3e9-39c6f5b03cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8b:dd:b2:75:2e:4e:d3:42:ca:e6:71:7d:74:2c:19:70:ea:
         cd:e2:ac:9e:04:bf:59:38:f4:36:8a:c8:b5:20:db:29:4d:ad:
         c2:d7:46:36:1e:ad:90:95:17:d3:aa:29:31:fc:79:32:a4:27:
         2e:0a:1d:da:47:3d:35:48:b7:08:8b:1d:c6:92:55:f7:95:13:
         98:b1:84:34:e8:ed:ca:2e:86:f3:ab:e9:c3:b5:18:2f:ec:50:
         b7:3a:4a:e9:10:b2:92:44:21:e5:ec:37:f2:ba:8b:c1:4b:50:
         bb:a1:39:07:31:ee:a4:1f:88:aa:c0:c6:ac:bd:14:3b:6a:5f:
         b9:be:c4:3f:ea:7c:d1:0d:b4:99:3e:2a:5a:8e:f7:af:d5:15:
         8c:53:7d:96:17:cf:1e:e6:4c:84:ed:be:e2:c6:2b:ab:f2:01:
         6f:b6:53:4e:0a:22:e6:03:39:12:90:36:88:b5:00:76:79:03:
         de:f0:c0:fd:f6:ca:db:32:60:0b:62:16:20:3b:f8:a9:44:13:
         eb:f8:19:c9:4f:f6:2a:63:53:2f:08:d6:3c:02:a1:ab:19:f4:
         2c:94:61:1c:24:8a:c4:dd:57:ea:fa:de:c0:29:3d:4c:b2:73:
         73:12:22:75:71:25:70:a8:9e:a3:68:44:53:02:68:1b:82:4b:
         8c:b2:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:05 2025 by rpki-client