Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7e55b1d-46a3-39c6-86b1-de68ec346f1f.roa
File:                     f7e55b1d-46a3-39c6-86b1-de68ec346f1f.roa (raw, json)
Hash identifier:          zHhyr8HkzYNhyFYj9I3ARcNf1zWIG3rfYH2gWIK+l74=
Subject key identifier:   65:11:B1:59:97:E4:D9:37:77:35:16:CD:A9:7F:98:D5:81:F1:47:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F60AF0763218861E004E3BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7e55b1d-46a3-39c6-86b1-de68ec346f1f.roa
Signing time:             Mon 26 Sep 2022 19:36:08 +0000
ROA not before:           Mon 26 Sep 2022 19:36:08 +0000
ROA not after:            Tue 01 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:60:af:07:63:21:88:61:e0:04:e3:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 26 19:36:08 2022 GMT
            Not After : Nov  1 04:00:00 2022 GMT
        Subject: CN=a6a7859b-cc8a-4f06-b5e2-7325b572405d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:18:db:24:b0:3f:db:50:fd:37:c1:6d:f2:
                    b6:87:b6:c5:40:bf:b9:cf:5d:80:5b:e1:33:e5:f6:
                    18:fb:f6:4b:a8:5f:4d:9d:04:f5:f8:fd:16:8f:a0:
                    11:c9:cd:be:ee:af:a1:01:18:c7:cb:89:0b:cf:64:
                    36:71:b2:64:62:ba:ea:42:93:eb:f2:2c:3a:71:74:
                    ff:17:c1:14:c8:c9:be:a8:e3:04:79:de:dc:0e:e8:
                    d4:b7:43:94:1f:70:ad:15:35:24:97:c5:4a:de:79:
                    2f:96:95:78:b1:1d:ca:4b:5e:bc:68:46:fc:f4:cb:
                    06:58:a3:22:1f:6c:d2:37:d3:a4:ce:66:78:8a:ac:
                    7f:18:3b:f3:80:e4:ce:d1:c3:cb:4e:3d:6a:7f:ba:
                    f7:b4:78:df:db:99:6b:8e:57:1f:95:49:71:d7:43:
                    5c:5c:db:2a:07:6b:6c:e0:6f:c9:80:5e:03:ca:29:
                    28:b3:d9:ac:63:aa:de:63:bd:70:af:c2:79:aa:05:
                    2c:a5:15:0c:df:0b:29:49:8e:b9:f0:62:1f:62:68:
                    e1:7f:db:59:c3:a4:57:8b:5e:20:cf:f8:70:ad:2f:
                    6b:d3:55:3a:98:56:a7:43:e8:cc:d1:a9:a9:a2:ee:
                    01:01:01:ae:20:1d:7d:a4:ec:9e:d8:54:47:1c:8a:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:B1:59:97:E4:D9:37:77:35:16:CD:A9:7F:98:D5:81:F1:47:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7e55b1d-46a3-39c6-86b1-de68ec346f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:ed:e5:2b:26:d1:5e:6f:cc:00:8f:ed:37:69:a1:c8:96:
         44:66:e1:bc:88:9c:28:20:23:86:19:ae:43:93:1b:a6:0e:80:
         04:b4:ab:6b:b0:35:40:c9:c9:17:8c:01:db:af:ef:8a:87:b9:
         c1:8f:2d:3e:84:34:11:c7:5b:06:2e:20:c4:ab:0f:7f:f7:5a:
         c1:49:2b:74:f7:40:79:56:3e:c4:a2:a3:c7:28:61:e1:b2:c4:
         70:75:38:31:74:f9:70:9b:63:20:8b:75:59:13:13:bc:b7:fb:
         6f:22:f3:e0:d6:37:da:14:b5:12:85:98:43:4d:7e:03:45:74:
         f1:07:ae:19:8a:d4:41:ab:3f:35:41:a6:53:82:86:eb:7e:42:
         60:52:10:8e:c2:bb:28:21:ac:99:81:6a:03:42:d6:51:fb:5b:
         a8:15:cd:d4:62:02:b7:24:95:14:70:05:de:ab:23:07:45:a9:
         44:5e:a9:35:03:af:f0:4d:f3:8d:0a:f4:75:c6:82:2a:13:4a:
         46:a9:79:ad:89:d8:d8:de:d4:73:4d:80:69:6a:78:6d:b2:6b:
         f1:44:81:e2:5a:48:53:5c:a2:28:d1:ea:ba:e2:f4:fe:2e:fd:
         f7:3f:40:f0:70:47:c5:0d:01:48:3c:e0:e0:9b:51:d6:7d:07:
         b0:f7:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:58 2025 by rpki-client