Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9217ad6-01ac-3c68-bf9d-954191ee94eb.roa
File:                     f9217ad6-01ac-3c68-bf9d-954191ee94eb.roa (raw, json)
Hash identifier:          MbtDIRW2U4y57U0xsZe65IWV/EwODlp6xYuC2yb75Hs=
Subject key identifier:   61:68:69:06:5A:85:39:39:5B:64:71:02:1A:87:70:C8:C5:B4:48:F8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3A01D1109D5232BEF1503C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9217ad6-01ac-3c68-bf9d-954191ee94eb.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3a:01:d1:10:9d:52:32:be:f1:50:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=3161cfce-56ae-469e-a5cf-0422717bc719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:1b:17:c4:08:df:f6:01:f3:e9:ec:18:9a:
                    fc:c0:f1:5c:ca:fc:34:2b:57:3f:fc:23:05:95:d2:
                    c6:2f:d2:9b:8d:57:24:b7:04:3b:cf:a8:d8:84:2f:
                    0a:56:b9:76:37:a1:0e:a2:05:5f:e3:37:d9:6f:de:
                    4d:3d:fa:bb:35:2b:d0:37:fa:40:91:cf:3e:77:02:
                    c8:78:6e:35:9a:15:fe:97:51:74:6f:69:47:2f:9a:
                    00:61:01:eb:c4:89:1a:53:fa:3f:05:ad:f5:da:49:
                    90:ee:6f:7e:f5:c4:25:22:a9:ae:91:50:10:54:32:
                    f7:e9:69:fa:a2:ee:41:37:48:fc:04:99:6a:04:41:
                    68:18:ee:f3:f6:7a:03:75:e4:8e:a2:77:34:e1:99:
                    e2:7f:d8:a5:de:8b:69:2f:fd:7b:9f:19:ad:94:0f:
                    8c:9c:d6:b4:09:c1:c3:78:4d:19:95:83:27:e8:01:
                    39:56:16:c9:71:4a:f2:b2:2b:8e:5f:d5:a9:d2:fd:
                    1e:7f:5d:09:3d:5b:3d:ea:dc:b7:fe:59:00:63:d1:
                    57:ef:48:04:a7:8a:08:b5:d7:71:9a:57:3a:b7:61:
                    1e:4f:3a:c9:23:3c:a3:ac:fc:9f:51:1a:ce:c7:a1:
                    6b:5a:4d:e7:85:e3:c6:0e:8c:1e:a2:a2:0f:00:2c:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:69:06:5A:85:39:39:5B:64:71:02:1A:87:70:C8:C5:B4:48:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9217ad6-01ac-3c68-bf9d-954191ee94eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:df:6e:a0:f4:a2:11:3e:fb:91:cd:42:bb:82:b2:91:15:
         53:af:42:17:42:cc:13:e8:c0:83:90:d0:a7:19:92:5f:2a:ee:
         19:21:1d:82:ea:93:d2:13:f7:ad:09:d9:9c:15:cf:9b:66:49:
         14:74:ed:f7:5b:11:4b:d9:18:2a:a9:57:dc:7c:2d:aa:78:54:
         11:2b:80:11:86:c3:a2:bf:d6:0b:30:70:69:86:08:5a:52:23:
         38:1b:34:f1:5e:4d:6d:14:c9:ab:3b:ef:5b:13:c5:0b:ff:06:
         fb:a3:40:6d:67:20:7f:d0:bf:17:59:da:8f:1d:14:b9:cc:eb:
         0e:b2:6d:ed:d3:ec:51:38:5a:1c:5e:6e:31:66:50:a2:f5:81:
         32:3b:82:41:2b:b0:ab:f6:dd:27:9c:1a:1b:29:29:ca:03:d3:
         00:5d:ee:5a:b7:96:d5:1e:a5:e2:0f:90:5a:aa:b9:18:73:58:
         f9:c4:3d:01:e8:5c:1c:ed:4d:31:15:05:58:bf:c2:96:32:e9:
         2c:c2:db:84:a7:ab:11:31:41:f1:25:4e:3f:72:ae:01:26:03:
         8b:2b:b7:ae:ef:3d:07:f8:ec:d1:2e:21:53:91:48:29:b5:e5:
         c9:85:da:89:00:d7:6f:4e:46:3f:52:74:c2:1e:1c:74:67:0d:
         1f:91:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:00 2025 by rpki-client