Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a181e2-a104-34f4-9048-74315e223fb8.roa
File:                     f2a181e2-a104-34f4-9048-74315e223fb8.roa (raw, json)
Hash identifier:          fcYxiIYE2Fjv/z2CnPIgMjVYkQWMjO/s52Kzy6dKnWk=
Subject key identifier:   3D:A6:FA:F9:48:46:52:A4:6D:94:82:C5:0B:14:89:46:25:3E:6F:14
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8072E27851BA0C3939964900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a181e2-a104-34f4-9048-74315e223fb8.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.214.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:72:e2:78:51:ba:0c:39:39:96:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=250b4cd5-d62b-4b6e-ab8f-be22d4ecbd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:e7:f8:e0:da:61:b7:3b:4c:9c:33:1e:38:
                    ed:ff:70:b0:11:53:63:e8:84:f4:02:67:84:ae:d4:
                    8d:1c:c6:02:2f:8c:e1:ed:e7:68:03:34:21:7d:3d:
                    b5:56:07:46:2a:d2:7f:0b:cc:70:81:ad:14:ce:fa:
                    8b:31:32:7b:9c:75:a8:76:6b:ca:d0:91:09:bb:3e:
                    56:e4:62:78:ac:eb:3e:66:71:4a:88:5c:c9:8a:71:
                    85:40:8a:9b:1d:3a:61:e5:32:6a:6d:59:89:27:12:
                    b5:0f:0a:6c:58:94:ed:ec:89:b1:8f:c9:ea:b6:06:
                    e0:d8:58:6c:c7:70:45:5f:da:9e:ce:be:26:e1:30:
                    5c:6c:a7:9e:3b:83:39:93:96:b4:17:e0:6f:66:fa:
                    c3:ad:9a:b9:0c:ac:01:8d:70:ff:af:6e:46:76:c5:
                    85:2c:4f:e1:ae:fd:8f:27:49:ca:2a:18:5f:c4:8d:
                    16:e0:a6:a2:b9:9b:3c:7d:5f:f7:95:aa:26:be:05:
                    ed:03:c5:90:05:90:e2:f7:63:b5:9f:44:27:6a:7f:
                    1e:1e:2e:c7:99:64:95:6c:4b:89:7d:35:78:ae:bc:
                    8c:71:aa:64:0c:67:e6:ed:df:54:96:11:b3:68:c9:
                    09:1d:64:36:78:29:a3:07:e1:dc:98:6c:5e:01:9a:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:FA:F9:48:46:52:A4:6D:94:82:C5:0B:14:89:46:25:3E:6F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a181e2-a104-34f4-9048-74315e223fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:41:1a:ea:a1:6d:fa:a6:11:06:42:61:fc:b8:cc:bc:a0:
         c0:85:f7:9b:e1:ee:23:ef:e0:63:b3:5c:12:20:2a:d2:2b:c6:
         38:fb:38:c6:3b:15:0a:1f:71:dd:17:f9:0d:85:f0:43:d6:be:
         e5:8a:87:06:b7:88:ff:2b:03:fa:96:80:9f:4e:44:3c:71:25:
         84:c3:9e:a8:ba:63:fb:53:76:25:35:63:a7:36:e6:6e:b7:ef:
         cd:c6:1f:15:85:89:8a:28:66:42:54:81:9e:44:d0:a7:bb:1e:
         c7:6f:b2:18:71:8d:c7:ca:64:9d:ea:01:57:f8:03:f9:47:9f:
         41:a8:c1:64:08:a7:83:45:f3:eb:8e:68:9d:1b:cf:9d:c7:ef:
         56:2a:c3:07:7d:3e:1a:c2:d0:58:b8:ad:12:66:d2:01:92:2b:
         83:a0:54:9b:da:62:77:98:36:03:c3:45:31:54:30:15:27:a5:
         73:d0:b3:3b:f6:3f:e1:21:27:dd:44:27:8c:cb:1a:f8:bb:fa:
         81:73:87:a2:a1:9c:50:10:f1:01:25:cd:51:7a:55:d5:52:df:
         f4:5e:97:60:ea:57:23:41:21:16:ac:1b:1c:15:41:29:91:e5:
         9b:a0:97:46:c0:b5:ca:ff:ec:86:4d:9b:a4:14:c2:fe:c7:25:
         a7:1d:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:12 2025 by rpki-client