Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f28e0017-0d38-3b8d-be56-6394656c36e9.roa
File:                     f28e0017-0d38-3b8d-be56-6394656c36e9.roa (raw, json)
Hash identifier:          GCekCjuVvIKMzDTykHdmbRSgRlmV1SwwfczjVNOhINQ=
Subject key identifier:   EE:10:97:62:08:CA:17:E5:16:DB:EF:6E:1D:43:E4:95:ED:7C:98:CB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95C4758289E413E80DF0B580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f28e0017-0d38-3b8d-be56-6394656c36e9.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:c4:75:82:89:e4:13:e8:0d:f0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=1fc65fc9-311b-480c-a966-e1e84110b5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:c3:d4:8b:48:5c:34:f6:bb:fd:13:bf:b0:
                    b4:07:5e:b0:68:c4:53:29:86:49:85:07:f4:89:8a:
                    b2:3d:49:cf:10:8f:4c:6e:37:02:04:65:84:bb:43:
                    9d:da:8d:d6:54:32:b7:2e:ee:4e:38:c5:d9:cd:58:
                    d7:05:34:70:86:23:4f:e9:13:6b:f6:7a:eb:60:2e:
                    5e:17:f0:47:0e:f3:1b:d7:1a:ec:68:ff:ca:84:dd:
                    32:d9:85:db:ab:a5:85:95:db:13:4a:6b:c8:e9:9c:
                    39:c4:8e:a1:14:38:8c:aa:c3:bc:78:f4:ab:30:63:
                    5a:ea:0f:30:9c:6f:46:f3:f7:ad:c1:47:4e:c0:3e:
                    63:3c:91:42:8d:02:3e:c0:53:83:d3:61:d2:a7:b4:
                    ee:37:6a:17:35:aa:ee:a2:d5:06:d8:ba:a9:84:d9:
                    d5:3f:6e:8b:af:61:48:c4:b6:79:4e:19:bf:cb:89:
                    5e:06:03:9e:68:0c:67:05:53:5b:06:a7:5b:dc:6a:
                    6f:84:2c:e3:9b:e5:05:22:a2:44:d1:99:2c:7e:5b:
                    48:5c:2e:0b:64:ff:dd:73:1b:54:d8:78:98:c1:e9:
                    c9:9f:ea:2b:7e:49:57:a5:ea:7e:a9:0c:a5:1f:fe:
                    1a:bb:82:de:33:35:5e:ad:e1:a9:61:8c:60:23:59:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:97:62:08:CA:17:E5:16:DB:EF:6E:1D:43:E4:95:ED:7C:98:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f28e0017-0d38-3b8d-be56-6394656c36e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:20:67:0a:75:81:ef:c7:10:dc:ef:ae:bf:55:85:7e:58:14:
         70:86:cd:78:e8:d3:81:ee:b1:a7:57:87:8a:0d:68:ad:9e:bf:
         fa:73:58:6f:42:cd:80:60:49:39:c6:ac:54:4a:00:ae:53:0e:
         9d:18:94:70:a1:a1:4b:f2:ff:da:c2:6f:9b:4b:c6:b5:de:e8:
         1c:d3:f9:c7:72:d7:b3:ea:c3:4e:1a:04:01:b3:6d:75:82:00:
         8c:aa:87:8a:0b:b5:71:85:5e:6d:c8:c0:aa:66:f8:05:e8:24:
         e9:6c:57:d3:2d:3d:b8:6d:81:ba:33:30:c2:13:11:14:b4:c2:
         76:a3:f5:d9:63:95:b1:d2:d9:76:f3:39:73:a9:22:5c:8a:f9:
         63:ff:dd:54:8a:67:5f:db:84:94:d0:06:4b:cc:d3:c6:01:92:
         00:ac:75:78:38:3c:4d:c0:a8:03:17:b9:21:f0:e2:c5:77:6c:
         e2:8a:a9:a0:34:bc:03:2e:cc:d8:98:b0:b6:8c:f3:a2:02:c3:
         49:90:78:ce:39:78:5c:8d:e2:43:b1:51:8c:9e:b9:5d:17:2b:
         d2:36:f4:27:9d:f3:47:96:84:92:b2:af:a3:4a:fd:61:36:9f:
         d0:91:ec:80:08:c3:a5:76:51:06:64:00:8c:9d:dd:1a:b3:ad:
         5d:e9:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:07 2025 by rpki-client