Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7915258-8872-3a9a-ae96-534f76947bb8.roa
File:                     f7915258-8872-3a9a-ae96-534f76947bb8.roa (raw, json)
Hash identifier:          dR/hjofPDRU0JYTlX9gdLKRzVtW7nxeMeQ1/C7O5Rqo=
Subject key identifier:   50:BA:F7:3E:4E:59:B2:9F:DC:60:45:3F:BD:4C:FF:7C:4C:95:FA:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EB953291CF20411012A098C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7915258-8872-3a9a-ae96-534f76947bb8.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:53:29:1c:f2:04:11:01:2a:09:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=e04edba0-10a3-4d38-9f3e-b4c2f6c4fd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:db:a7:6b:05:23:f2:46:ef:1d:cc:da:52:
                    78:29:68:fe:36:10:30:12:29:98:d0:19:5d:d5:61:
                    5b:11:54:18:13:ce:3f:25:77:e3:86:4f:be:b1:40:
                    e6:3b:56:71:ac:72:01:83:36:9b:4d:bf:8b:8a:2d:
                    a8:79:59:4d:3b:e5:64:bc:20:a0:06:bf:22:0a:6f:
                    79:ba:ad:f5:61:3b:f7:08:b2:6b:fd:13:12:e2:3f:
                    cf:dd:a6:ca:81:5f:b7:b0:33:50:d5:19:14:b2:0c:
                    81:3d:e9:7a:ca:ea:21:7b:2a:ba:ca:08:31:45:c3:
                    ff:5d:ee:e8:92:5c:c5:cd:e7:00:b3:02:98:70:69:
                    37:57:cb:76:a5:54:ff:fe:38:80:1b:8a:0d:d0:d0:
                    2a:c0:30:9c:cc:cd:7c:32:05:19:50:f8:b4:09:4b:
                    5e:43:1d:2b:af:6b:af:c2:b4:f5:ad:a8:46:61:88:
                    69:31:28:22:a3:7b:18:9d:47:66:93:68:74:db:8f:
                    ab:60:22:7f:2c:06:6a:6d:23:65:37:d8:8f:c2:43:
                    1a:4f:d8:21:65:9f:88:f2:f7:b3:a0:2f:bf:bb:76:
                    20:e6:ab:87:f2:9a:33:39:f9:66:de:3a:d4:3c:a9:
                    e0:ed:9c:64:b7:53:21:5d:1c:ce:fd:a0:bc:31:15:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BA:F7:3E:4E:59:B2:9F:DC:60:45:3F:BD:4C:FF:7C:4C:95:FA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7915258-8872-3a9a-ae96-534f76947bb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:15:81:c1:3e:41:96:4a:7e:80:eb:78:44:64:2b:ba:fc:25:
         cc:36:b1:29:75:a9:08:d9:93:73:82:66:68:42:33:bb:9a:fb:
         69:6d:d3:97:7a:da:ce:44:1a:90:aa:53:4c:61:ad:13:57:a8:
         94:18:f9:2c:33:bc:d1:f2:e6:d4:69:4d:4a:67:b5:8d:e5:02:
         42:72:47:1d:75:2b:a4:15:b9:8d:93:f6:b5:a3:0f:c7:71:2e:
         05:e7:ca:88:a3:78:16:59:62:fe:6b:c1:a5:e2:15:14:f9:88:
         f5:99:44:74:0b:89:03:19:82:be:6a:ad:90:54:19:2c:a5:99:
         bd:1d:b2:71:2f:fc:94:ff:a8:6f:b9:80:4f:ff:27:6b:d6:c5:
         f5:ed:fe:4b:9b:5b:25:e3:37:67:59:81:f1:aa:8e:f5:a6:41:
         69:1c:25:7c:b8:82:fc:68:b8:87:a9:74:4f:45:eb:02:b1:cf:
         43:e9:1a:0f:77:0f:c7:05:ec:db:5e:93:a4:1a:94:45:93:1d:
         82:9f:aa:6c:54:c3:d7:e7:83:d3:a5:3b:5e:84:d9:40:7c:29:
         79:9f:b8:7b:94:0f:c3:f6:45:a4:4d:31:0a:8f:55:24:d9:c1:
         bb:de:9f:ad:23:60:7c:0f:30:a9:d1:a8:de:10:8c:2c:95:00:
         90:a2:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:12 2025 by rpki-client