Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb0aa551-be03-3e15-9c7a-7043cd2f3d1f.roa
File:                     fb0aa551-be03-3e15-9c7a-7043cd2f3d1f.roa (raw, json)
Hash identifier:          Pnt1sErb/ENRgGlp0OyN12wRT8SImmHij8JphJw/gu4=
Subject key identifier:   B3:4E:A2:14:CA:8B:C1:87:BA:62:A7:86:36:A8:F8:9A:0E:49:48:AA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858409FEE1C8809024480D13D5F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb0aa551-be03-3e15-9c7a-7043cd2f3d1f.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:ee:1c:88:09:02:44:80:d1:3d:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=199cd4f6-43b9-4e74-a561-fb05fd6f8fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fb:b2:37:38:93:17:07:49:03:11:7c:46:d9:
                    bc:25:ae:c0:7a:6f:72:8a:8b:05:ab:43:1f:7a:bc:
                    d1:51:5e:03:1a:6f:61:b2:fb:35:51:7a:bb:a7:b1:
                    09:7d:b2:81:fa:2e:24:7f:d1:de:ee:0a:62:dc:e6:
                    d7:d3:fa:c7:96:7b:7d:d5:69:9d:13:64:e4:2f:cc:
                    7c:e6:4d:1f:44:88:de:a4:b5:da:ad:e2:57:91:93:
                    bf:d1:76:24:87:4b:fc:65:98:ce:67:0c:9c:6a:47:
                    e0:34:16:fc:05:3b:92:29:e1:c9:a2:74:ac:da:21:
                    c2:4a:d8:ef:a1:6d:3e:4b:07:4c:24:02:c4:64:5c:
                    38:4d:0e:4c:95:5f:c4:db:7e:27:ec:fd:f7:66:8f:
                    f3:7d:7a:40:02:b0:da:03:e6:63:f1:1c:66:35:1a:
                    6b:52:a7:45:49:5f:f2:d2:42:3d:1b:89:cb:93:4f:
                    5e:06:38:0b:b0:0c:be:a3:a3:c7:e8:75:80:53:36:
                    6b:61:cf:4c:1d:7c:1b:58:9e:0d:ba:58:a8:3c:65:
                    05:ac:1f:42:fe:3a:8c:19:4c:8a:26:3f:82:98:65:
                    05:ee:35:b0:4c:53:c4:54:cd:e8:7f:90:bc:87:b5:
                    54:7b:8e:f7:e9:fd:4b:1c:da:24:1c:95:54:aa:75:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:A2:14:CA:8B:C1:87:BA:62:A7:86:36:A8:F8:9A:0E:49:48:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb0aa551-be03-3e15-9c7a-7043cd2f3d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:1b:3d:90:fe:f5:71:8b:65:bc:e2:a2:4c:33:e8:42:84:
         a7:e9:da:30:e4:c5:b3:4c:d6:e6:51:fd:bf:89:1a:05:2e:c6:
         5c:e1:ac:76:26:96:12:f3:9d:9d:88:11:2d:5f:65:6e:fc:57:
         27:8d:8b:73:43:94:2f:8c:bd:7f:ef:47:75:94:4b:07:ee:b2:
         ff:4c:00:48:3a:82:58:8d:3b:27:67:06:db:75:9e:e3:a5:c6:
         45:5b:ff:5d:2a:0f:7e:a5:5c:eb:5c:2e:0f:9b:4c:cf:51:7c:
         70:22:1c:eb:e1:62:79:47:02:56:83:a0:29:24:dc:16:70:ab:
         27:27:c5:96:80:ec:49:c9:7f:a5:34:b8:6a:d9:01:95:6b:ca:
         fb:20:02:d0:bd:b2:2c:1d:03:33:36:6b:76:f0:21:ad:32:32:
         ff:22:bf:2a:ff:e4:ab:d0:a5:e5:e9:c4:92:0e:64:e9:af:55:
         7b:26:31:62:07:43:a2:de:88:43:c3:a5:93:2e:25:1e:40:94:
         0f:f8:f3:46:aa:a2:7d:17:05:db:e4:e5:33:ad:76:fb:25:0a:
         d5:c0:9b:79:14:2e:a2:23:a1:e9:dd:87:03:9b:2b:97:ec:02:
         78:66:d5:f0:b0:e9:99:f3:31:d2:6a:0d:f0:64:92:e1:87:6b:
         a2:0e:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:02 2025 by rpki-client