Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f95badc2-5499-35f6-9236-e8a0e433e7bb.roa
File:                     f95badc2-5499-35f6-9236-e8a0e433e7bb.roa (raw, json)
Hash identifier:          qHzTUh/d026yxwQUhhTxyMfWI4yOg5kOLaWDe0BQMi0=
Subject key identifier:   C5:2E:40:F9:4C:EF:C8:C9:72:35:4B:AE:7F:B2:57:CA:85:57:73:08
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E49B6B587E33BEF4494BCEF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f95badc2-5499-35f6-9236-e8a0e433e7bb.roa
Signing time:             Sat 18 Jun 2022 12:00:00 +0000
ROA not before:           Sat 18 Jun 2022 12:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.159.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:49:b6:b5:87:e3:3b:ef:44:94:bc:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 18 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=e8b612f7-e22b-450e-af8b-ad10e56d4070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:14:69:28:6a:cc:82:df:3e:76:78:4b:81:
                    a5:0a:1f:69:b2:56:bd:0e:c6:df:1f:f9:6d:c9:37:
                    28:7a:99:64:82:ed:11:5e:a0:4c:a1:38:3b:3f:dc:
                    63:68:51:d7:1b:e5:54:e4:e9:3e:83:52:c5:3b:52:
                    06:9f:f8:17:f1:9b:34:04:45:52:84:23:38:e4:bf:
                    42:62:67:83:76:e5:10:17:e0:ac:48:43:d7:f0:3a:
                    44:a7:20:fd:93:f3:14:1a:c8:ef:9c:65:2b:c5:50:
                    2b:db:59:b0:5f:a9:e7:32:c9:bf:79:94:02:4a:45:
                    a7:0e:bb:42:b3:ae:ae:c8:7d:bf:df:1c:4a:7a:92:
                    fa:c1:ab:50:4c:82:5c:d3:2e:77:fa:37:b6:f0:ae:
                    e2:36:be:7a:5c:45:97:a0:68:6a:d1:47:b3:8f:45:
                    8b:95:9b:17:7c:2a:47:42:26:de:06:58:68:cd:07:
                    7e:22:8d:e3:b6:b5:71:cd:9c:6c:c9:2d:75:e8:35:
                    1e:bd:9b:41:fa:81:bf:c4:01:ed:03:e8:d0:80:34:
                    2c:cb:24:8c:39:3e:b0:42:c2:ef:95:7b:d0:ae:2a:
                    55:66:79:9b:38:3b:de:19:a6:71:50:a6:cc:0e:19:
                    b3:98:dd:ad:5b:93:aa:02:9d:b9:e6:b9:59:69:c2:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:40:F9:4C:EF:C8:C9:72:35:4B:AE:7F:B2:57:CA:85:57:73:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f95badc2-5499-35f6-9236-e8a0e433e7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:44:cc:25:57:07:a5:34:f4:02:90:1e:9d:55:02:b6:15:
         42:e3:30:88:72:2a:e9:d2:c1:48:64:15:f5:b9:0b:d9:82:40:
         68:33:3f:d7:90:a1:b0:39:ac:8b:16:51:c8:14:40:cf:36:0e:
         d0:cd:cc:12:75:eb:e4:6d:50:3e:86:15:57:65:61:88:9a:bf:
         11:3e:f5:de:fb:d5:8e:d3:cf:ba:c8:ec:15:71:b0:e6:92:64:
         5b:00:c9:8e:09:56:a7:8b:41:54:d9:f1:e6:94:bf:64:a3:ed:
         e6:c1:ba:dd:37:01:20:4f:70:2f:a3:7d:02:08:17:9a:e5:86:
         d0:0f:24:a1:5d:dd:66:98:3a:7d:f1:4d:9c:9c:c7:af:1e:f3:
         fd:4a:52:2a:18:04:a0:5f:12:3e:ca:8f:48:6e:dd:81:f4:09:
         3d:b1:2f:42:62:1b:f7:aa:7b:57:bc:c4:e4:cb:21:4c:e4:92:
         b5:2c:51:f5:f1:4d:17:2d:ca:10:d2:ee:8f:ef:3d:a9:b3:25:
         24:bc:c0:ce:9f:8d:a4:2e:77:66:b8:35:1f:92:d2:4a:e0:ca:
         f6:84:26:3a:74:58:37:be:77:cc:42:1a:58:b6:25:65:2e:22:
         ca:83:14:cf:8b:0a:c6:37:79:34:f9:e7:af:ac:d0:b7:ae:83:
         01:11:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:52 2025 by rpki-client