Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6caff36-21a4-39a3-a446-55f9a50d1a80.roa
File:                     f6caff36-21a4-39a3-a446-55f9a50d1a80.roa (raw, json)
Hash identifier:          W5EdZrAMT6yqXijmutcObed58n/m8tVOeKZeex3AptI=
Subject key identifier:   3B:B7:6D:70:01:A1:80:3A:1F:66:D3:65:C6:50:AD:57:F8:D2:81:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DDA1A411D3BDCDBED9093EC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6caff36-21a4-39a3-a446-55f9a50d1a80.roa
Signing time:             Mon 09 May 2022 12:00:00 +0000
ROA not before:           Mon 09 May 2022 12:00:00 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:da:1a:41:1d:3b:dc:db:ed:90:93:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  9 12:00:00 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=152f3a80-5f09-456a-b1aa-c7b2097333d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:b4:30:47:d9:7e:a7:47:94:56:a2:13:45:
                    ae:c9:0e:ba:89:0a:bf:d8:27:70:e0:c8:eb:36:87:
                    8c:0f:68:a1:28:0a:74:4b:5f:5a:78:2c:e6:ed:cc:
                    24:2e:f4:5a:92:c1:1a:3f:b7:23:8d:87:ad:bf:bf:
                    e7:27:8f:67:c0:b0:36:63:3f:5b:0d:c9:38:cb:a1:
                    9a:49:9b:16:06:45:14:c1:10:54:ba:5a:9a:31:f5:
                    cf:f2:7b:7e:37:b4:11:97:51:88:82:32:b6:47:c6:
                    9c:c7:ae:50:f4:cc:ba:48:13:71:f2:6f:03:43:41:
                    1b:a0:f9:e5:ea:c7:be:93:c7:ad:fc:f2:93:1c:17:
                    f4:b0:67:ba:a3:28:4d:3b:23:a8:71:3f:1d:e1:df:
                    dd:52:ea:56:72:0f:60:e5:3d:8c:2a:2b:4e:40:a5:
                    97:ea:30:1b:75:3b:7f:1d:14:4a:91:87:f6:60:a1:
                    d6:50:6d:7e:95:4e:2c:62:28:ec:16:2a:18:97:e0:
                    ad:d4:77:2b:05:96:a7:7d:23:d7:a2:58:bd:3c:e9:
                    9e:78:82:5f:0c:15:e0:a1:88:97:31:a2:93:ec:b0:
                    69:80:4b:9e:ea:59:51:00:94:bc:d1:72:1b:6a:d0:
                    f3:f7:f2:40:88:36:25:7b:98:94:4c:73:63:77:be:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:6D:70:01:A1:80:3A:1F:66:D3:65:C6:50:AD:57:F8:D2:81:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6caff36-21a4-39a3-a446-55f9a50d1a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:d5:16:e6:7f:8e:9d:68:d5:d2:8d:81:0d:1b:5b:63:9c:
         f1:12:b2:4e:ba:01:b3:33:bd:9b:9f:2f:f5:f9:6f:dc:41:b3:
         00:06:77:97:51:b7:6a:bc:1f:c5:2d:8f:fc:02:6a:42:96:25:
         97:f3:41:62:1b:27:56:85:cc:48:e7:0d:ba:a4:f2:61:ce:ee:
         2a:b3:73:db:82:47:79:84:fe:db:97:d3:65:80:1c:98:2a:1f:
         a7:2a:d3:e6:cc:28:f9:a9:ac:fa:d5:13:fa:c7:0c:3c:2f:b5:
         fc:53:ea:f5:ef:d9:04:f0:df:e9:df:c9:8d:7a:e0:e8:03:df:
         b7:5e:99:a0:3d:83:5b:ea:47:e7:42:52:ec:80:67:da:0e:2a:
         0f:6d:c5:b6:f5:e5:c3:0b:b9:b8:8b:38:57:0d:1c:90:70:13:
         0d:fb:cf:61:59:c3:65:83:fe:7c:fc:32:1c:21:32:b1:f6:2b:
         6d:7e:b0:b1:5d:f3:43:5e:e7:92:e6:93:2f:a9:31:c6:66:7c:
         a8:19:90:cf:88:f7:8b:ef:a4:61:a6:6e:e2:15:59:23:8d:e0:
         84:78:54:c3:c6:7e:5f:d2:36:47:76:76:47:14:71:99:37:c6:
         cf:e5:96:ee:19:af:ea:1d:ab:58:ad:4c:8f:6e:2a:a9:ce:77:
         62:ac:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:02 2025 by rpki-client