Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac488f-ca84-3c70-b9e8-3a45d53fc023.roa
File:                     f1ac488f-ca84-3c70-b9e8-3a45d53fc023.roa (raw, json)
Hash identifier:          MN/7eoKfdoEx86mLAOWNEJJ0qoYIME0y8BV43F5RPy8=
Subject key identifier:   A5:64:54:8D:F9:BA:48:5C:1D:DC:D0:8A:A8:04:20:31:29:6F:5D:FA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403EDBFB9C60E8F4C4D169ACC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac488f-ca84-3c70-b9e8-3a45d53fc023.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:db:fb:9c:60:e8:f4:c4:d1:69:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=bed369dd-4711-41f8-8b1d-5f359dece7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:52:5d:d4:29:94:1e:7a:8f:9f:04:33:d5:
                    53:15:f2:90:44:1d:38:b5:4e:2d:4c:2f:78:fd:ce:
                    2b:93:ee:04:de:74:28:88:a1:dd:76:73:a4:3c:34:
                    90:96:62:71:01:99:14:b2:6a:d4:cf:b7:a9:a6:27:
                    2d:5e:d0:b4:4f:d7:9d:ab:18:85:bb:f1:73:63:43:
                    ad:b6:05:96:6e:76:b9:01:c0:e4:69:cd:25:aa:58:
                    63:c0:0d:83:a6:b6:85:b3:26:f5:e3:d0:39:a9:d3:
                    da:47:7d:2c:a4:80:e9:42:d1:3b:9f:d0:ff:07:29:
                    cb:8f:7e:91:6b:83:48:f0:c3:27:6a:5a:48:80:f9:
                    55:d7:7c:81:b9:e4:a4:38:2b:52:a3:c2:ef:05:13:
                    c7:87:3b:cb:76:0b:e0:2f:af:b6:1e:d2:5e:04:cc:
                    24:94:7c:43:2a:1b:eb:f8:eb:65:8f:c1:1e:a1:82:
                    05:7d:9e:06:b4:af:67:2e:bc:a4:00:c8:2d:b5:8f:
                    f2:1c:c6:05:ef:b9:82:1f:d1:1f:80:02:96:c8:f6:
                    73:ac:62:cd:45:21:6f:c3:c9:e1:f9:3f:e1:24:c5:
                    96:98:69:95:de:56:8a:fa:5d:8f:56:91:7f:5b:7e:
                    7a:ad:a8:91:ce:7e:40:87:46:69:f7:f1:23:f8:fc:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:64:54:8D:F9:BA:48:5C:1D:DC:D0:8A:A8:04:20:31:29:6F:5D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1ac488f-ca84-3c70-b9e8-3a45d53fc023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4f:e7:77:0f:90:3c:db:a8:e0:37:5c:95:c1:98:a5:70:8b:
         5d:18:89:ca:1e:88:4c:79:90:14:a2:80:a3:48:66:fa:60:f1:
         74:5b:df:b7:4c:b7:22:cd:57:13:f5:cc:c0:cc:ce:e8:aa:21:
         4f:1e:71:25:b1:02:43:0b:8f:fa:c4:47:93:2c:86:c8:dd:be:
         8e:56:d9:dc:1c:f9:83:e0:83:1e:1d:cd:2e:6f:41:98:75:19:
         1c:75:e9:43:81:7c:8f:3a:b8:ef:08:ce:a6:80:b5:3a:9b:dc:
         8e:1a:1b:44:00:c0:fd:de:f9:8c:2c:2f:d6:10:1b:28:8e:22:
         6a:74:97:12:3f:26:de:15:bb:b3:b2:51:29:73:ad:68:0e:5f:
         bd:8f:9a:96:c3:07:96:3b:fe:0e:07:a1:de:ac:8a:40:98:51:
         e8:22:1d:83:a9:e9:b2:de:cf:6a:45:0a:64:77:87:32:d7:af:
         a5:1b:12:29:4e:0f:9a:d0:5b:46:be:4a:ca:78:61:5c:26:9e:
         53:91:1f:1c:b7:72:3d:d5:90:79:15:aa:d3:0d:90:63:f9:63:
         ae:0a:81:7b:41:69:74:21:a5:47:ae:69:fb:21:ba:51:25:1e:
         a3:75:22:0d:b7:72:a3:1b:0c:6d:f4:38:d6:95:20:84:a5:32:
         c5:9e:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:17 2025 by rpki-client