Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76414f6-4c57-352e-9f7d-36da247d6e89.roa
File:                     f76414f6-4c57-352e-9f7d-36da247d6e89.roa (raw, json)
Hash identifier:          0fyeA9OEpsQrMxWE3u5nRtuSqYghasn3ocd4GWrzm5Q=
Subject key identifier:   C3:58:69:A9:12:89:A3:EE:9B:77:78:E2:00:D9:AE:21:4F:C6:51:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCDF9D10F9C31DB0047354240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76414f6-4c57-352e-9f7d-36da247d6e89.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cd:f9:d1:0f:9c:31:db:00:47:35:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=779868d6-c029-4b09-b0d8-625b894d2cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:87:ea:35:e0:c6:3f:b2:21:bc:73:38:94:
                    fa:71:e1:e4:aa:76:6b:4c:dd:f3:8a:22:3a:1e:50:
                    a3:3b:04:ff:2d:c1:30:19:ab:48:00:ac:e0:97:1c:
                    42:1c:40:c3:5c:d7:a7:2c:5d:a5:ad:cf:14:40:f8:
                    b3:e8:fa:ca:96:97:cf:39:33:d6:0f:e9:0c:78:d5:
                    c7:7c:24:95:58:d7:9d:ec:12:57:60:97:37:60:d7:
                    e8:7c:50:e3:d5:37:1f:2f:17:bd:c0:bd:6a:39:55:
                    34:5e:e4:94:09:d1:7a:63:32:fc:e6:fb:c3:88:0d:
                    bf:38:ed:4c:8b:c7:60:9e:be:4c:54:c6:ff:16:8f:
                    ff:8b:b6:12:36:52:6b:bd:fd:4d:56:9c:4d:6b:80:
                    bf:25:32:af:22:af:df:82:b2:c6:18:76:80:82:a4:
                    41:d3:d6:d2:9e:3c:38:71:8f:15:31:45:cd:1d:bc:
                    f8:a7:5b:74:cb:87:91:31:10:09:3e:8b:54:7d:41:
                    bc:e8:85:22:d6:7b:a5:9b:ac:4e:fc:00:77:20:1d:
                    57:d0:c9:ab:bd:c7:2b:d6:0a:e9:df:f7:0c:6e:37:
                    7a:dd:17:ea:82:fc:f2:88:93:70:a1:b8:46:97:1a:
                    11:c8:95:0a:00:04:a0:3d:e8:f3:8d:d1:41:97:49:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:69:A9:12:89:A3:EE:9B:77:78:E2:00:D9:AE:21:4F:C6:51:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76414f6-4c57-352e-9f7d-36da247d6e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:12:af:ec:1a:28:ee:1c:c5:d3:bc:d8:90:83:44:98:3c:77:
         62:2d:ac:9d:1c:60:8a:18:73:5f:87:65:e1:34:5a:21:19:de:
         18:e5:29:ac:67:95:89:3a:57:2a:ab:57:82:3f:72:ae:42:f0:
         c3:c5:72:ab:57:ea:1e:79:d9:1d:3b:60:3a:9c:1b:25:59:74:
         73:5d:b2:20:3a:9c:c1:6a:1e:a9:81:d0:03:29:a5:9f:50:27:
         c5:4b:b1:ae:aa:69:f2:98:4f:69:b7:4c:fe:38:12:f8:1b:71:
         99:6a:16:a7:0d:0c:33:fb:bc:d7:e7:1b:b2:58:27:aa:c5:14:
         bd:bc:97:9f:28:06:60:e3:8d:e9:98:35:1d:a8:36:92:85:7b:
         33:58:42:b0:9d:da:fb:84:02:7f:97:6a:0f:21:ce:0d:ee:40:
         d2:f3:1f:9c:f9:36:1c:c1:7a:af:c9:b5:ca:96:54:64:3c:4d:
         b6:79:b6:3b:e2:b3:27:77:ec:68:b9:c7:a7:27:cf:b7:fc:3b:
         b2:fc:f7:42:55:af:dc:0b:94:07:5e:e1:ec:0c:d3:22:70:bc:
         c1:05:bf:62:8e:8e:16:59:73:b9:d2:59:4d:46:04:13:f1:5a:
         ac:71:59:4e:b3:52:85:7f:87:47:1f:9a:7d:1d:86:66:42:a0:
         26:66:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:42 2025 by rpki-client