Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f93c631e-9864-3f98-97ff-8f42ae65c410.roa
File:                     f93c631e-9864-3f98-97ff-8f42ae65c410.roa (raw, json)
Hash identifier:          lD+SxCvN5DmtOETc8xoooVO3M2B0h+XXXqLgVWNFw4M=
Subject key identifier:   E9:C4:EB:0A:92:DB:0C:6E:6E:05:9B:B6:18:14:3E:16:50:02:DF:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA4213110091D9FBB014E0858
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f93c631e-9864-3f98-97ff-8f42ae65c410.roa
Signing time:             Tue 19 Apr 2022 12:00:00 +0000
ROA not before:           Tue 19 Apr 2022 12:00:00 +0000
ROA not after:            Wed 25 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.75.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:21:31:10:09:1d:9f:bb:01:4e:08:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 19 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2022 GMT
        Subject: CN=5b1bac95-3434-4585-8950-93aa1a7178d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:fb:58:4b:d3:b7:d2:94:c1:9a:9e:01:09:
                    6c:da:8f:26:d2:3d:02:62:7e:dd:1a:22:58:84:bb:
                    33:38:26:bb:b0:cb:64:d6:dc:35:0d:77:78:c1:6d:
                    44:ed:74:d5:77:4d:3a:e9:b0:2e:fe:e2:5d:ac:cb:
                    5e:bb:2b:4e:ee:81:77:b0:27:f1:c0:69:13:70:af:
                    f2:31:9b:ee:f5:cf:bb:39:37:8b:31:4c:53:c8:b0:
                    07:b4:05:53:c4:3f:8a:ce:9b:d4:72:e2:83:56:67:
                    d7:87:41:f2:89:b0:07:54:b2:76:b5:d8:3d:ca:e4:
                    a4:ec:2d:28:c8:38:ed:08:23:3b:c3:b6:70:a0:f7:
                    ce:81:23:a0:2a:a5:09:2f:b7:6d:f3:06:ba:91:ce:
                    ce:4b:c7:0c:af:ba:24:29:a7:1b:70:52:98:3c:7b:
                    65:2c:45:f8:7e:da:7a:06:04:d4:91:52:e4:ff:f3:
                    95:1d:03:f0:29:ad:12:28:c9:ca:1e:16:29:8a:3e:
                    dc:9f:f4:61:f1:da:e7:be:d1:de:e6:74:57:e4:5d:
                    58:41:39:c6:c8:97:3c:d0:ef:3b:5e:ae:ab:68:ec:
                    cf:fa:6f:ae:fd:df:cb:42:e2:59:79:a6:18:cc:d4:
                    ac:92:9f:53:86:b2:12:4f:f4:0f:c0:66:da:61:83:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:EB:0A:92:DB:0C:6E:6E:05:9B:B6:18:14:3E:16:50:02:DF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f93c631e-9864-3f98-97ff-8f42ae65c410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:9d:7a:67:50:08:c3:99:21:12:27:3b:bc:62:7b:d6:fa:
         1b:c1:73:d2:bc:4e:fe:2b:4d:6c:35:4f:13:25:88:d2:e8:99:
         d6:1e:d1:74:cf:93:1b:18:30:4c:a3:aa:e8:49:2d:24:74:08:
         06:56:55:7d:9c:bf:ce:94:6c:40:39:2b:4d:2d:7c:af:07:72:
         6b:f8:52:e9:b9:08:8c:5c:18:32:aa:19:7d:c3:71:5b:53:fe:
         b9:ca:fc:17:2e:ce:ba:19:3c:f9:1f:48:76:79:3b:98:fa:c7:
         79:49:8e:64:ee:66:f3:7e:d2:47:13:ca:f3:a4:ae:73:03:b7:
         8a:fa:a5:45:ee:69:7d:1c:c0:d0:88:62:ea:2b:06:92:f3:48:
         6c:6f:b8:cd:1a:d8:07:3f:7d:8e:b7:87:f6:5e:23:df:e9:cf:
         bd:a9:65:1d:b3:45:54:4d:4d:87:43:0f:ef:a6:d9:b0:ea:2b:
         3d:39:fa:96:73:8a:bf:9d:76:22:d7:fc:7c:e6:b3:44:56:35:
         4f:65:23:3e:60:65:35:08:49:78:f3:93:13:d5:ea:4f:d2:ca:
         ae:c1:c3:46:45:ff:06:11:ea:dc:e6:83:8f:f7:f0:ec:7c:ad:
         e6:b5:ec:11:f7:9c:31:fb:e5:04:4e:b9:c9:2a:80:c5:f0:59:
         79:35:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:22 2025 by rpki-client